Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a523aa-6adc-4daf-af1a-0f500940fdbe/1/9_qRV4Ba_Iq-WAkrWz8hRkLEkxA.mft
File:                     9_qRV4Ba_Iq-WAkrWz8hRkLEkxA.mft (raw, json)
Hash identifier:          nvQURJQs+mz9OjTVUpISxsFeeElIvf6QCjg6LjiSLc8=
Subject key identifier:   1F:20:32:19:A6:B5:DC:01:90:D5:E6:6B:02:A2:6E:6E:B6:48:21:53
Authority key identifier: F7:FA:91:57:80:5A:FC:8A:BE:58:09:2B:5B:3F:21:46:42:C4:93:10
Certificate issuer:       /CN=f7fa9157805afc8abe58092b5b3f214642c49310
Certificate serial:       0185EC596405B6D69AD2E8AA62C396C1A407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_qRV4Ba_Iq-WAkrWz8hRkLEkxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a523aa-6adc-4daf-af1a-0f500940fdbe/1/9_qRV4Ba_Iq-WAkrWz8hRkLEkxA.mft
Manifest number:          0C40
Signing time:             Thu 26 Jan 2023 04:32:39 +0000
Manifest this update:     Thu 26 Jan 2023 04:32:39 +0000
Manifest next update:     Fri 27 Jan 2023 04:32:39 +0000
Files and hashes:         1: 9_qRV4Ba_Iq-WAkrWz8hRkLEkxA.crl (hash: u4CXoSKuKZXb5VmtaLDr39G5QyZ9lfKMvCgu1UNdgSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ec:59:64:05:b6:d6:9a:d2:e8:aa:62:c3:96:c1:a4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fa9157805afc8abe58092b5b3f214642c49310
        Validity
            Not Before: Jan 26 04:32:39 2023 GMT
            Not After : Jan 27 04:32:39 2023 GMT
        Subject: CN=1f203219a6b5dc0190d5e66b02a26e6eb6482153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:e5:c3:4a:a3:e8:30:d7:42:2b:37:6b:f1:
                    f5:c4:55:34:df:28:ca:a5:c5:a5:78:fb:11:ff:ce:
                    56:19:06:da:8a:30:12:11:33:62:64:37:d5:6a:5d:
                    f8:d4:0c:73:36:c6:6e:04:49:24:1f:c8:65:c4:51:
                    ad:1d:ba:66:de:c5:8f:85:10:66:6a:b5:f7:97:0a:
                    1e:69:9f:f7:4a:1b:7f:94:96:5d:d3:74:31:d3:fd:
                    18:9f:c3:4a:8c:f9:ab:a3:76:df:db:45:88:f9:24:
                    2d:61:f5:e5:c8:83:76:16:fa:0c:80:de:7c:ba:77:
                    35:a6:09:cc:6b:f7:dd:d7:ae:c5:96:d4:19:f5:e4:
                    a7:dc:95:6b:7e:61:1e:fd:f0:5b:54:a6:af:d5:b5:
                    46:83:3d:62:17:6c:86:c0:d8:82:73:e9:b8:fb:96:
                    83:2a:4d:03:3c:3b:90:22:75:18:54:26:ff:5c:50:
                    ae:d6:18:3c:6a:ac:c1:9a:f2:3d:0f:f7:fd:3d:1a:
                    fb:d7:db:ff:95:aa:a0:1f:ea:ef:53:ac:d3:10:f1:
                    4b:5e:21:12:84:0a:31:6f:5b:12:9c:ea:29:aa:7a:
                    5c:65:3e:05:a4:1e:93:5a:30:b3:77:8b:0e:8e:12:
                    9f:35:84:50:45:51:4c:db:28:54:b3:d0:46:30:0b:
                    ce:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:20:32:19:A6:B5:DC:01:90:D5:E6:6B:02:A2:6E:6E:B6:48:21:53
            X509v3 Authority Key Identifier:
                keyid:F7:FA:91:57:80:5A:FC:8A:BE:58:09:2B:5B:3F:21:46:42:C4:93:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_qRV4Ba_Iq-WAkrWz8hRkLEkxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a523aa-6adc-4daf-af1a-0f500940fdbe/1/9_qRV4Ba_Iq-WAkrWz8hRkLEkxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a523aa-6adc-4daf-af1a-0f500940fdbe/1/9_qRV4Ba_Iq-WAkrWz8hRkLEkxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:2f:d3:47:9c:ca:a4:d5:70:30:c8:29:84:12:3f:49:be:
         8e:0a:a6:ff:8b:7f:e8:0d:a1:33:8e:c6:ea:7b:74:58:01:94:
         e3:42:f8:53:2f:d5:56:77:77:a1:9b:37:73:e5:74:8e:30:a5:
         ee:31:8f:87:ad:33:99:10:0e:4d:63:a4:91:10:20:d5:cc:6b:
         fb:61:69:36:1e:55:37:1c:81:41:a9:ab:f8:4a:62:b2:65:ec:
         c1:f9:7b:1a:de:fc:17:73:db:69:9c:03:4b:ef:7f:57:df:6c:
         37:0a:7f:47:cd:d7:f1:6c:b8:1f:43:e9:28:dc:2f:07:13:db:
         eb:9b:ec:55:0c:fe:f4:12:1c:2c:81:cf:de:19:91:c0:fd:3c:
         b9:62:52:71:dc:ff:d1:bb:70:85:30:20:04:b1:50:3a:69:68:
         61:ed:24:77:fd:2e:bc:7b:6d:76:b6:fe:4c:60:57:e4:ca:c8:
         29:3f:15:08:f0:66:37:5b:f7:78:fe:4f:c4:ce:34:9e:5e:ff:
         d5:6c:9e:b3:7a:88:db:90:07:13:20:1b:2a:d9:69:5c:01:f6:
         d4:e2:fe:05:9d:42:a7:c6:2b:ca:0a:cd:3c:55:b7:6b:72:d9:
         6f:be:be:86:1a:08:8c:7b:6e:5d:d0:01:a5:d2:92:4a:01:ee:
         b8:41:c2:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYXsWWQFttaa0uiqYsOWwaQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZmE5MTU3ODA1YWZjOGFiZTU4MDkyYjViM2YyMTQ2NDJj
NDkzMTAwHhcNMjMwMTI2MDQzMjM5WhcNMjMwMTI3MDQzMjM5WjAzMTEwLwYDVQQD
EygxZjIwMzIxOWE2YjVkYzAxOTBkNWU2NmIwMmEyNmU2ZWI2NDgyMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlePlw0qj6DDXQis3a/H1xFU03yjK
pcWlePsR/85WGQbaijASETNiZDfVal341AxzNsZuBEkkH8hlxFGtHbpm3sWPhRBm
arX3lwoeaZ/3Sht/lJZd03Qx0/0Yn8NKjPmro3bf20WI+SQtYfXlyIN2FvoMgN58
unc1pgnMa/fd167FltQZ9eSn3JVrfmEe/fBbVKav1bVGgz1iF2yGwNiCc+m4+5aD
Kk0DPDuQInUYVCb/XFCu1hg8aqzBmvI9D/f9PRr719v/laqgH+rvU6zTEPFLXiES
hAoxb1sSnOopqnpcZT4FpB6TWjCzd4sOjhKfNYRQRVFM2yhUs9BGMAvOQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8gMhmmtdwBkNXmawKibm62SCFTMB8GA1UdIwQY
MBaAFPf6kVeAWvyKvlgJK1s/IUZCxJMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9xUlY0QmFfSXEtV0Frcld6OGhSa0xFa3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNTIzYWEtNmFkYy00ZGFmLWFmMWEt
MGY1MDA5NDBmZGJlLzEvOV9xUlY0QmFfSXEtV0Frcld6OGhSa0xFa3hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hNTIzYWEtNmFkYy00ZGFmLWFmMWEtMGY1MDA5NDBmZGJl
LzEvOV9xUlY0QmFfSXEtV0Frcld6OGhSa0xFa3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/0v00ec
yqTVcDDIKYQSP0m+jgqm/4t/6A2hM47G6nt0WAGU40L4Uy/VVnd3oZs3c+V0jjCl
7jGPh60zmRAOTWOkkRAg1cxr+2FpNh5VNxyBQamr+EpismXswfl7Gt78F3PbaZwD
S+9/V99sNwp/R83X8Wy4H0PpKNwvBxPb65vsVQz+9BIcLIHP3hmRwP08uWJScdz/
0btwhTAgBLFQOmloYe0kd/0uvHttdrb+TGBX5MrIKT8VCPBmN1v3eP5PxM40nl7/
1Wyes3qI25AHEyAbKtlpXAH21OL+BZ1Cp8YrygrNPFW3a3LZb76+hhoIjHtuXdAB
pdKSSgHuuEHCYQ==
-----END CERTIFICATE-----