Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/406e60-61e0-4a38-9617-792c255bbeab/1/RDrF_Pllau60kZJbuQjKHROcZiY.mft
File:                     RDrF_Pllau60kZJbuQjKHROcZiY.mft (raw, json)
Hash identifier:          DjO5YTHsOoNiwb4bSq8PUvn5caRKpeh1weN+QX+0mpc=
Subject key identifier:   37:56:A5:6D:45:5C:67:4F:74:51:E7:03:EF:28:1A:00:C6:76:86:B3
Authority key identifier: 44:3A:C5:FC:F9:65:6A:EE:B4:91:92:5B:B9:08:CA:1D:13:9C:66:26
Certificate issuer:       /CN=443ac5fcf9656aeeb491925bb908ca1d139c6626
Certificate serial:       0183B14A5CA47478A9F42C29529580A6A5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDrF_Pllau60kZJbuQjKHROcZiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/406e60-61e0-4a38-9617-792c255bbeab/1/RDrF_Pllau60kZJbuQjKHROcZiY.mft
Manifest number:          01EE
Signing time:             Fri 07 Oct 2022 07:13:04 +0000
Manifest this update:     Fri 07 Oct 2022 07:13:04 +0000
Manifest next update:     Sat 08 Oct 2022 07:13:04 +0000
Files and hashes:         1: RDrF_Pllau60kZJbuQjKHROcZiY.crl (hash: 2/ejm+jGkWmK7YkXiRLK7r5cGlmiKBTmrcLX/MO7XAc=)
                          2: ywzltXALNLin3OO_u_3HORl1YYY.roa (hash: XUUVfVWTYef0jdBVVMyYSkfXRY76agbOeVMDDyjWYA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b1:4a:5c:a4:74:78:a9:f4:2c:29:52:95:80:a6:a5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443ac5fcf9656aeeb491925bb908ca1d139c6626
        Validity
            Not Before: Oct  7 07:13:04 2022 GMT
            Not After : Oct  8 07:13:04 2022 GMT
        Subject: CN=3756a56d455c674f7451e703ef281a00c67686b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:36:78:af:28:b5:ae:d1:73:cf:c4:fe:af:
                    0d:b5:73:aa:28:cd:99:7b:33:d1:db:bc:4b:e7:32:
                    79:12:67:aa:d3:5d:40:17:6f:9c:7a:78:57:d2:3d:
                    ea:43:af:91:58:c6:59:85:4f:9c:41:02:94:22:18:
                    86:bb:cb:ab:94:24:54:5e:4f:4e:8e:60:97:2f:29:
                    1e:cb:b2:8b:65:aa:c2:8a:5e:b2:6a:fb:fe:58:0a:
                    15:2e:1a:26:45:a4:3c:85:53:a4:18:12:0f:93:f4:
                    f2:84:75:b6:bf:61:35:c1:48:33:cf:de:96:81:0b:
                    ae:a0:fc:c6:b0:46:ea:25:a0:d1:9d:31:c7:44:11:
                    0f:19:5f:52:18:0f:8c:77:a4:92:cd:82:52:33:c9:
                    ee:39:89:93:1c:5c:12:2c:ed:bf:46:e7:4c:83:bd:
                    53:19:79:b1:0b:63:ad:03:68:7b:8c:58:de:94:17:
                    c3:49:fb:b8:5f:77:e6:7f:82:cf:20:fb:1b:06:1a:
                    69:15:f6:22:94:d3:fc:fc:14:5b:78:fd:96:fe:8e:
                    fc:5c:f5:6f:39:bd:47:65:fc:11:4c:31:d4:b4:24:
                    22:ef:69:a2:1c:06:30:85:4a:62:15:cc:a3:bd:7a:
                    ae:ec:20:fd:5d:e7:52:14:c7:8c:5c:ec:86:89:ff:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:A5:6D:45:5C:67:4F:74:51:E7:03:EF:28:1A:00:C6:76:86:B3
            X509v3 Authority Key Identifier:
                keyid:44:3A:C5:FC:F9:65:6A:EE:B4:91:92:5B:B9:08:CA:1D:13:9C:66:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDrF_Pllau60kZJbuQjKHROcZiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/406e60-61e0-4a38-9617-792c255bbeab/1/RDrF_Pllau60kZJbuQjKHROcZiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/406e60-61e0-4a38-9617-792c255bbeab/1/RDrF_Pllau60kZJbuQjKHROcZiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:08:d8:65:11:8d:d7:2a:c6:1d:5c:aa:66:ce:e4:f8:c7:22:
         e5:d0:7c:48:37:9a:67:2b:c9:43:91:4c:67:01:e3:75:6a:9a:
         3c:f1:d5:0a:f0:e9:4a:48:fe:de:09:57:62:e0:62:97:5d:80:
         c4:62:b2:04:ec:b2:e6:2e:76:74:e3:b2:6f:d6:b7:f8:d1:54:
         75:7d:34:68:bf:27:2f:95:47:c7:99:f2:ba:e0:1b:e2:56:7f:
         65:70:f1:e3:1f:fd:5a:35:b6:30:77:bc:8e:6e:20:4b:32:1d:
         01:cc:bc:18:6e:e2:fd:bf:ab:7c:c4:0d:79:02:3b:6d:33:2c:
         9f:b2:8f:1b:bd:fb:70:40:5f:aa:88:a8:eb:2d:25:17:74:88:
         54:f7:2b:19:0c:c0:94:20:07:e2:44:8a:c8:67:e7:f9:88:73:
         7d:53:1c:c4:e4:dc:1e:6f:6a:da:bc:32:d8:af:c7:41:7c:50:
         72:84:0f:d7:03:02:a8:3f:31:bf:13:5e:b8:47:13:c8:f2:1e:
         43:fa:ab:39:c1:98:45:8f:0f:f5:c2:ef:6d:68:5c:df:8d:0e:
         2d:76:46:be:bb:79:70:c6:13:57:62:bd:26:78:fc:02:c7:5c:
         1f:ad:71:ba:dd:36:43:fa:9f:73:78:50:04:8e:ec:8e:78:8b:
         35:ae:47:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYOxSlykdHip9CwpUpWApqX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0M2FjNWZjZjk2NTZhZWViNDkxOTI1YmI5MDhjYTFkMTM5
YzY2MjYwHhcNMjIxMDA3MDcxMzA0WhcNMjIxMDA4MDcxMzA0WjAzMTEwLwYDVQQD
EygzNzU2YTU2ZDQ1NWM2NzRmNzQ1MWU3MDNlZjI4MWEwMGM2NzY4NmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+E2eK8ota7Rc8/E/q8NtXOqKM2Z
ezPR27xL5zJ5Emeq011AF2+cenhX0j3qQ6+RWMZZhU+cQQKUIhiGu8urlCRUXk9O
jmCXLykey7KLZarCil6yavv+WAoVLhomRaQ8hVOkGBIPk/TyhHW2v2E1wUgzz96W
gQuuoPzGsEbqJaDRnTHHRBEPGV9SGA+Md6SSzYJSM8nuOYmTHFwSLO2/RudMg71T
GXmxC2OtA2h7jFjelBfDSfu4X3fmf4LPIPsbBhppFfYilNP8/BRbeP2W/o78XPVv
Ob1HZfwRTDHUtCQi72miHAYwhUpiFcyjvXqu7CD9XedSFMeMXOyGif9j0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdWpW1FXGdPdFHnA+8oGgDGdoazMB8GA1UdIwQY
MBaAFEQ6xfz5ZWrutJGSW7kIyh0TnGYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRyRl9QbGxhdTYwa1pKYnVRaktIUk9jWmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80MDZlNjAtNjFlMC00YTM4LTk2MTct
NzkyYzI1NWJiZWFiLzEvUkRyRl9QbGxhdTYwa1pKYnVRaktIUk9jWmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80MDZlNjAtNjFlMC00YTM4LTk2MTctNzkyYzI1NWJiZWFi
LzEvUkRyRl9QbGxhdTYwa1pKYnVRaktIUk9jWmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAjYZRGN
1yrGHVyqZs7k+Mci5dB8SDeaZyvJQ5FMZwHjdWqaPPHVCvDpSkj+3glXYuBil12A
xGKyBOyy5i52dOOyb9a3+NFUdX00aL8nL5VHx5nyuuAb4lZ/ZXDx4x/9WjW2MHe8
jm4gSzIdAcy8GG7i/b+rfMQNeQI7bTMsn7KPG737cEBfqoio6y0lF3SIVPcrGQzA
lCAH4kSKyGfn+YhzfVMcxOTcHm9q2rwy2K/HQXxQcoQP1wMCqD8xvxNeuEcTyPIe
Q/qrOcGYRY8P9cLvbWhc340OLXZGvrt5cMYTV2K9Jnj8AsdcH61xut02Q/qfc3hQ
BI7sjniLNa5HKg==
-----END CERTIFICATE-----