Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/94c1cf-23fa-46d7-80c5-2692246f8b26/1/2zCLeS6u22LAaFDa-5GNgfMTBuE.mft
File:                     2zCLeS6u22LAaFDa-5GNgfMTBuE.mft (raw, json)
Hash identifier:          HPQ4Jf/Dd8Zwh5K6oUc2H0DlyqCbn8EROGvjgp81Fiw=
Subject key identifier:   C3:31:82:CA:C9:A4:95:18:4C:29:A2:5E:48:CE:B5:25:2E:34:94:67
Authority key identifier: DB:30:8B:79:2E:AE:DB:62:C0:68:50:DA:FB:91:8D:81:F3:13:06:E1
Certificate issuer:       /CN=db308b792eaedb62c06850dafb918d81f31306e1
Certificate serial:       01893D54825BA3788ADFA1BFAEC587BE103E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2zCLeS6u22LAaFDa-5GNgfMTBuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/94c1cf-23fa-46d7-80c5-2692246f8b26/1/2zCLeS6u22LAaFDa-5GNgfMTBuE.mft
Manifest number:          0977
Signing time:             Mon 10 Jul 2023 01:04:55 +0000
Manifest this update:     Mon 10 Jul 2023 01:04:55 +0000
Manifest next update:     Tue 11 Jul 2023 01:04:55 +0000
Files and hashes:         1: 2zCLeS6u22LAaFDa-5GNgfMTBuE.crl (hash: I9WV0RPW8/wjBa4v4XkJFaTyRXUfIpIcMkoKekoYSJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3d:54:82:5b:a3:78:8a:df:a1:bf:ae:c5:87:be:10:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db308b792eaedb62c06850dafb918d81f31306e1
        Validity
            Not Before: Jul 10 01:04:55 2023 GMT
            Not After : Jul 11 01:04:55 2023 GMT
        Subject: CN=c33182cac9a495184c29a25e48ceb5252e349467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:7a:6e:80:9c:84:2b:91:ec:5d:59:15:c1:
                    be:4b:ec:0c:03:a1:bd:b7:16:6a:4e:34:cb:5a:25:
                    0d:a7:ab:1c:0c:df:57:82:bd:74:e2:91:e9:41:b8:
                    39:ad:b5:41:34:ff:d0:f2:60:c5:e5:47:e4:19:17:
                    be:8c:66:58:f5:68:60:1f:d5:ec:0e:75:58:13:8e:
                    2b:f2:14:42:3a:79:df:39:48:c1:48:03:e7:4d:cb:
                    1a:94:be:8c:12:14:a0:12:28:0f:8b:be:22:6c:7e:
                    24:20:76:14:c6:53:9a:4c:26:b2:ff:b6:1c:f1:77:
                    fe:e9:cd:da:1b:88:f8:14:96:7b:e0:84:cd:00:82:
                    5b:6b:05:cf:5e:42:1b:ff:ff:db:92:69:42:c7:92:
                    02:98:11:4b:1a:d9:ae:82:f2:77:99:58:b2:b4:fd:
                    c2:5e:d2:47:59:f5:49:0c:52:dc:6b:48:16:ac:37:
                    13:35:9c:30:7e:7d:2b:0c:3c:51:1f:b9:df:e2:9d:
                    ed:f8:a5:30:fb:7b:ca:66:51:97:26:9d:82:7d:d2:
                    84:33:ea:9e:2b:a6:9e:84:d5:55:01:3d:9d:23:02:
                    9a:b6:90:5e:39:9b:72:9c:17:ed:e6:7c:11:8e:3e:
                    e4:16:34:f6:5d:b9:f8:c2:4e:69:48:d7:16:fa:06:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:31:82:CA:C9:A4:95:18:4C:29:A2:5E:48:CE:B5:25:2E:34:94:67
            X509v3 Authority Key Identifier:
                keyid:DB:30:8B:79:2E:AE:DB:62:C0:68:50:DA:FB:91:8D:81:F3:13:06:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zCLeS6u22LAaFDa-5GNgfMTBuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/94c1cf-23fa-46d7-80c5-2692246f8b26/1/2zCLeS6u22LAaFDa-5GNgfMTBuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/94c1cf-23fa-46d7-80c5-2692246f8b26/1/2zCLeS6u22LAaFDa-5GNgfMTBuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:19:99:1a:35:1b:26:0d:d7:15:05:63:2d:6c:9e:35:31:2c:
         39:96:58:76:ce:bd:ff:d3:78:86:8e:2a:75:a3:06:d5:44:31:
         0d:13:70:cf:ad:ca:10:dd:97:4d:ce:9f:f5:f9:4c:d6:9f:26:
         dc:e4:84:b5:3a:41:2a:40:cc:62:ac:0d:80:81:4e:8f:ec:81:
         e9:1a:ba:a7:b2:2b:bf:b0:a4:b1:9a:bb:c5:9c:09:de:b5:7e:
         b9:a5:41:bd:c7:3d:ba:0f:ca:45:87:9a:c4:5a:c8:90:95:b9:
         93:f1:c2:3f:98:3a:d6:2d:4f:3d:a3:61:5f:c9:53:d4:1b:ef:
         76:11:5e:b2:ee:c9:f0:36:b8:23:a2:03:91:d7:74:ed:42:c0:
         9f:86:8f:af:e0:ff:10:e6:64:12:74:d0:28:e7:3d:fb:bf:88:
         2c:8f:32:0d:e3:3a:4d:c0:11:23:74:0b:4b:4c:b0:e3:9b:c9:
         9b:4e:5e:80:ba:21:29:38:70:7e:ed:26:db:d4:47:10:6c:e5:
         56:99:cd:ec:91:8c:fd:99:71:79:c7:a0:fd:8f:6b:8c:fd:1b:
         b1:44:60:14:e1:1a:89:52:8b:e3:69:4e:9a:6c:3b:80:0a:c8:
         af:e6:ac:2d:d2:da:54:85:ba:47:d6:ce:98:1b:ec:d1:6e:ff:
         ca:07:bf:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYk9VIJbo3iK36G/rsWHvhA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMzA4Yjc5MmVhZWRiNjJjMDY4NTBkYWZiOTE4ZDgxZjMx
MzA2ZTEwHhcNMjMwNzEwMDEwNDU1WhcNMjMwNzExMDEwNDU1WjAzMTEwLwYDVQQD
EyhjMzMxODJjYWM5YTQ5NTE4NGMyOWEyNWU0OGNlYjUyNTJlMzQ5NDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDR6boCchCuR7F1ZFcG+S+wMA6G9
txZqTjTLWiUNp6scDN9Xgr104pHpQbg5rbVBNP/Q8mDF5UfkGRe+jGZY9WhgH9Xs
DnVYE44r8hRCOnnfOUjBSAPnTcsalL6MEhSgEigPi74ibH4kIHYUxlOaTCay/7Yc
8Xf+6c3aG4j4FJZ74ITNAIJbawXPXkIb///bkmlCx5ICmBFLGtmugvJ3mViytP3C
XtJHWfVJDFLca0gWrDcTNZwwfn0rDDxRH7nf4p3t+KUw+3vKZlGXJp2CfdKEM+qe
K6aehNVVAT2dIwKatpBeOZtynBft5nwRjj7kFjT2Xbn4wk5pSNcW+gaAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMxgsrJpJUYTCmiXkjOtSUuNJRnMB8GA1UdIwQY
MBaAFNswi3kurttiwGhQ2vuRjYHzEwbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnpDTGVTNnUyMkxBYUZEYS01R05nZk1UQnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85NGMxY2YtMjNmYS00NmQ3LTgwYzUt
MjY5MjI0NmY4YjI2LzEvMnpDTGVTNnUyMkxBYUZEYS01R05nZk1UQnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85NGMxY2YtMjNmYS00NmQ3LTgwYzUtMjY5MjI0NmY4YjI2
LzEvMnpDTGVTNnUyMkxBYUZEYS01R05nZk1UQnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchmZGjUb
Jg3XFQVjLWyeNTEsOZZYds69/9N4ho4qdaMG1UQxDRNwz63KEN2XTc6f9flM1p8m
3OSEtTpBKkDMYqwNgIFOj+yB6Rq6p7Irv7CksZq7xZwJ3rV+uaVBvcc9ug/KRYea
xFrIkJW5k/HCP5g61i1PPaNhX8lT1BvvdhFesu7J8Da4I6IDkdd07ULAn4aPr+D/
EOZkEnTQKOc9+7+ILI8yDeM6TcARI3QLS0yw45vJm05egLohKThwfu0m29RHEGzl
VpnN7JGM/Zlxeceg/Y9rjP0bsURgFOEaiVKL42lOmmw7gArIr+asLdLaVIW6R9bO
mBvs0W7/yge/ZQ==
-----END CERTIFICATE-----