Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/960a6c-39ae-43f1-bd95-4581deede3b3/1/3jlJZXXEACkNA4Qg3OM2Iv6ozkE.mft
File:                     3jlJZXXEACkNA4Qg3OM2Iv6ozkE.mft (raw, json)
Hash identifier:          x9mJ9E6zTN4xWEUqHMaE737WhEq12nvpWtSIUXMTQ40=
Subject key identifier:   91:E7:44:48:4E:F9:F9:CE:DB:1A:EF:2D:93:1D:48:CA:F9:3C:C9:3D
Authority key identifier: DE:39:49:65:75:C4:00:29:0D:03:84:20:DC:E3:36:22:FE:A8:CE:41
Certificate issuer:       /CN=de39496575c400290d038420dce33622fea8ce41
Certificate serial:       0528127E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jlJZXXEACkNA4Qg3OM2Iv6ozkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/960a6c-39ae-43f1-bd95-4581deede3b3/1/3jlJZXXEACkNA4Qg3OM2Iv6ozkE.mft
Manifest number:          06F4
Signing time:             Fri 22 Apr 2022 10:50:51 +0000
Manifest this update:     Fri 22 Apr 2022 10:50:51 +0000
Manifest next update:     Sat 23 Apr 2022 10:50:51 +0000
Files and hashes:         1: 3jlJZXXEACkNA4Qg3OM2Iv6ozkE.crl (hash: T3W9sNfUQKfhWqOWWAmSPC4MCXZhoUht6Wzpj0dPTaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86512254 (0x528127e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de39496575c400290d038420dce33622fea8ce41
        Validity
            Not Before: Apr 22 10:50:51 2022 GMT
            Not After : Apr 23 10:50:51 2022 GMT
        Subject: CN=91e744484ef9f9cedb1aef2d931d48caf93cc93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:13:60:27:09:8c:75:27:e8:c3:e6:dd:72:
                    ea:d8:6a:07:7a:3c:6e:1b:a2:fd:24:26:7f:fc:ff:
                    a4:1a:a9:08:c0:d9:0a:74:3d:9f:e1:f6:a5:41:09:
                    8b:01:19:e0:7a:42:b4:7c:d9:59:de:e7:79:9a:ad:
                    45:52:18:af:7d:d3:60:8d:df:52:c8:61:15:94:50:
                    45:3b:b2:ee:44:98:ff:63:d5:a9:ef:59:03:59:33:
                    cf:8d:d7:7d:67:8c:c7:78:c4:22:d0:53:d7:b7:9b:
                    88:50:7d:40:c3:a3:c9:24:36:40:e7:20:a7:b7:70:
                    41:a3:8b:f1:cf:fe:09:fe:68:a5:7f:48:c6:ab:e9:
                    09:ce:ce:7d:72:68:bc:69:68:85:25:f0:15:6d:b7:
                    8f:dd:5c:61:eb:01:f4:54:23:53:d7:27:bd:b1:23:
                    8b:85:61:3c:19:99:c4:fc:e8:09:f1:10:e6:96:cf:
                    4f:5a:41:5d:20:66:9b:d0:08:dd:cc:aa:61:04:37:
                    b9:da:85:95:fa:0f:51:06:1e:3e:a5:c6:66:7f:09:
                    d7:ab:45:8b:0f:87:84:83:25:73:a7:c9:aa:f7:9f:
                    95:05:dd:df:7c:00:f1:f4:e8:81:5b:58:05:d0:12:
                    66:d2:3a:13:f1:43:9d:38:8e:77:86:72:31:c5:8a:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E7:44:48:4E:F9:F9:CE:DB:1A:EF:2D:93:1D:48:CA:F9:3C:C9:3D
            X509v3 Authority Key Identifier:
                keyid:DE:39:49:65:75:C4:00:29:0D:03:84:20:DC:E3:36:22:FE:A8:CE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jlJZXXEACkNA4Qg3OM2Iv6ozkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/960a6c-39ae-43f1-bd95-4581deede3b3/1/3jlJZXXEACkNA4Qg3OM2Iv6ozkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/960a6c-39ae-43f1-bd95-4581deede3b3/1/3jlJZXXEACkNA4Qg3OM2Iv6ozkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4c:9b:e8:23:31:55:96:8d:20:60:25:7b:62:1b:d5:93:d8:
         d7:ba:95:5a:30:1a:37:15:7b:66:0a:d7:47:1b:c3:81:16:e8:
         62:e4:a5:72:f5:56:33:7e:da:b6:71:e2:00:bb:f7:16:3e:43:
         cf:71:56:d1:bd:f8:9c:d9:7a:ce:85:ea:ad:d5:23:4d:95:cb:
         28:59:97:7a:a1:a1:09:66:fc:8b:bd:92:33:91:c3:94:d2:fe:
         91:48:47:5c:1a:bb:7a:13:82:db:6c:97:4d:d0:23:50:d3:74:
         1b:09:70:a6:12:68:4f:91:84:f0:7f:a0:d2:96:c4:ce:40:ff:
         d5:45:87:79:ba:e6:26:5b:9a:c9:7f:18:c8:2b:5e:e9:02:c0:
         15:ed:d2:da:c5:4d:bd:74:24:0b:73:b4:5f:d0:9f:80:24:86:
         99:1d:ce:78:7d:cb:5f:58:da:6e:4d:e1:7d:dd:b8:17:7a:c1:
         6a:3e:5a:c6:27:d8:da:0b:17:d9:10:5a:ac:97:cd:26:3c:b6:
         ae:18:f2:7e:4e:2a:a2:df:97:d9:e8:2b:23:1c:28:a6:40:b0:
         36:3f:3b:c4:c7:71:2c:d3:f6:e0:1f:7b:b8:5f:e3:82:ef:ec:
         86:28:97:8f:ff:c8:b4:fb:3a:73:9f:eb:d4:16:8f:08:af:a9:
         99:94:55:18
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBSgSfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZTM5NDk2NTc1YzQwMDI5MGQwMzg0MjBkY2UzMzYyMmZlYThjZTQxMB4XDTIyMDQy
MjEwNTA1MVoXDTIyMDQyMzEwNTA1MVowMzExMC8GA1UEAxMoOTFlNzQ0NDg0ZWY5
ZjljZWRiMWFlZjJkOTMxZDQ4Y2FmOTNjYzkzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJzEE2AnCYx1J+jD5t1y6thqB3o8bhui/SQmf/z/pBqpCMDZ
CnQ9n+H2pUEJiwEZ4HpCtHzZWd7neZqtRVIYr33TYI3fUshhFZRQRTuy7kSY/2PV
qe9ZA1kzz43XfWeMx3jEItBT17ebiFB9QMOjySQ2QOcgp7dwQaOL8c/+Cf5opX9I
xqvpCc7OfXJovGlohSXwFW23j91cYesB9FQjU9cnvbEji4VhPBmZxPzoCfEQ5pbP
T1pBXSBmm9AI3cyqYQQ3udqFlfoPUQYePqXGZn8J16tFiw+HhIMlc6fJqveflQXd
33wA8fTogVtYBdASZtI6E/FDnTiOd4ZyMcWKQVMCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSR50RITvn5ztsa7y2THUjK+TzJPTAfBgNVHSMEGDAWgBTeOUlldcQAKQ0D
hCDc4zYi/qjOQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNqbEpaWFhFQUNrTkE0UWczT00ySXY2b3prRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvOTYwYTZjLTM5YWUtNDNmMS1iZDk1LTQ1ODFkZWVkZTNiMy8x
LzNqbEpaWFhFQUNrTkE0UWczT00ySXY2b3prRS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
OTYwYTZjLTM5YWUtNDNmMS1iZDk1LTQ1ODFkZWVkZTNiMy8xLzNqbEpaWFhFQUNr
TkE0UWczT00ySXY2b3prRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI1Mm+gjMVWWjSBgJXtiG9WT2Ne6
lVowGjcVe2YK10cbw4EW6GLkpXL1VjN+2rZx4gC79xY+Q89xVtG9+JzZes6F6q3V
I02VyyhZl3qhoQlm/Iu9kjORw5TS/pFIR1wau3oTgttsl03QI1DTdBsJcKYSaE+R
hPB/oNKWxM5A/9VFh3m65iZbmsl/GMgrXukCwBXt0trFTb10JAtztF/Qn4Akhpkd
znh9y19Y2m5N4X3duBd6wWo+WsYn2NoLF9kQWqyXzSY8tq4Y8n5OKqLfl9noKyMc
KKZAsDY/O8THcSzT9uAfe7hf44Lv7IYol4//yLT7OnOf69QWjwivqZmUVRg=
-----END CERTIFICATE-----