Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/612bd8-54eb-4fb7-9890-4b9aa8410b2f/1/VYzaPm1lRg8li_5ZV-j4W00rAGo.mft
File:                     VYzaPm1lRg8li_5ZV-j4W00rAGo.mft (raw, json)
Hash identifier:          t7Eq++17ojodN5qm8KIUT9ER6knnh90QU78elWbsP2I=
Subject key identifier:   33:16:86:38:FA:50:19:A0:75:42:F9:60:DA:E3:CB:B4:48:F7:D2:C4
Authority key identifier: 55:8C:DA:3E:6D:65:46:0F:25:8B:FE:59:57:E8:F8:5B:4D:2B:00:6A
Certificate issuer:       /CN=558cda3e6d65460f258bfe5957e8f85b4d2b006a
Certificate serial:       0186E2F44F31885C91E2BF4CB29E3C4FA3D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYzaPm1lRg8li_5ZV-j4W00rAGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/612bd8-54eb-4fb7-9890-4b9aa8410b2f/1/VYzaPm1lRg8li_5ZV-j4W00rAGo.mft
Manifest number:          01
Signing time:             Wed 15 Mar 2023 01:48:27 +0000
Manifest this update:     Wed 15 Mar 2023 01:48:27 +0000
Manifest next update:     Thu 16 Mar 2023 01:48:27 +0000
Files and hashes:         1: VYzaPm1lRg8li_5ZV-j4W00rAGo.crl (hash: OlS5tNys46PBDtOI8288axQYYI1wxNvwzL4wIOomoDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e2:f4:4f:31:88:5c:91:e2:bf:4c:b2:9e:3c:4f:a3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558cda3e6d65460f258bfe5957e8f85b4d2b006a
        Validity
            Not Before: Mar 15 01:48:27 2023 GMT
            Not After : Mar 16 01:48:27 2023 GMT
        Subject: CN=33168638fa5019a07542f960dae3cbb448f7d2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:a4:f4:16:b6:21:26:60:ed:b9:b8:2a:aa:
                    ab:bf:75:af:b1:e1:31:c8:d3:30:1f:f8:0b:08:5f:
                    c7:22:6b:c0:5d:28:db:f2:22:a7:54:e6:3c:57:83:
                    a3:5a:b3:f8:7e:a9:e8:4b:ed:e9:5c:7e:da:9d:3d:
                    67:1c:3e:b1:2e:21:18:77:3b:21:75:eb:10:48:3a:
                    05:fb:8e:6b:d8:2d:35:b6:60:c8:1a:db:3f:7c:3a:
                    3e:94:df:53:a8:33:87:eb:34:79:e7:ad:b7:63:0a:
                    28:0a:d9:4c:99:c0:f0:c8:6d:b3:79:9e:80:d2:20:
                    c6:c2:bc:22:22:99:11:a7:c5:8d:df:dd:ea:1d:ac:
                    0c:0c:08:c6:27:06:52:c8:f5:4d:ef:ae:dc:a8:fc:
                    da:e1:e2:96:c9:11:ce:3f:6e:17:37:2a:b3:0b:c8:
                    c8:55:39:a6:e8:9c:60:c6:07:29:23:9f:54:bc:b7:
                    76:59:23:d2:b3:33:f8:43:30:a6:ef:0a:3f:8b:68:
                    43:61:4d:4b:eb:b8:99:bc:c6:ca:7d:db:a6:54:d9:
                    34:28:59:62:f3:fa:7f:b1:30:3b:c9:87:3b:eb:94:
                    f3:16:c9:2a:8a:a1:94:f4:0e:99:1b:bc:d2:21:12:
                    a2:6c:78:3d:4b:ac:2f:bf:d0:6a:17:a1:ab:c9:4f:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:16:86:38:FA:50:19:A0:75:42:F9:60:DA:E3:CB:B4:48:F7:D2:C4
            X509v3 Authority Key Identifier:
                keyid:55:8C:DA:3E:6D:65:46:0F:25:8B:FE:59:57:E8:F8:5B:4D:2B:00:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYzaPm1lRg8li_5ZV-j4W00rAGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/612bd8-54eb-4fb7-9890-4b9aa8410b2f/1/VYzaPm1lRg8li_5ZV-j4W00rAGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/612bd8-54eb-4fb7-9890-4b9aa8410b2f/1/VYzaPm1lRg8li_5ZV-j4W00rAGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:c1:5f:f1:1f:c0:63:3d:4d:4e:e6:12:d7:38:47:5b:b5:
         00:1b:d4:ea:32:e6:0f:b2:a5:ab:90:3f:5a:df:97:3e:f3:26:
         b4:27:7b:6f:8c:b6:d7:98:c4:91:32:ef:4f:81:00:42:4d:b8:
         5b:4f:0e:e6:bb:9e:f6:4e:8a:93:4d:8e:f6:d7:b5:b2:39:d3:
         0e:ad:a5:7c:49:15:45:44:3f:d1:18:fe:71:1c:31:6d:23:d8:
         d8:9f:7e:5a:6a:0e:2f:f5:32:5e:8c:43:67:39:e6:b5:03:d1:
         0e:11:b3:df:54:f0:4c:58:7b:24:12:3c:2b:31:bb:ff:7b:05:
         84:a3:4d:e5:53:e4:17:3b:6f:07:6c:6c:d5:dc:2d:12:a8:ac:
         a3:8f:18:8d:c9:a0:30:45:e0:a7:22:62:fe:e3:05:49:c9:ec:
         d5:cd:b8:e0:1e:d7:0d:a6:2d:25:70:ef:f7:a5:d4:70:aa:48:
         1e:db:e8:52:80:84:5b:4b:a9:ec:2a:08:fd:39:21:97:1f:2c:
         b6:da:f3:fd:cd:8b:e8:96:07:a3:11:7d:42:37:21:dc:70:9d:
         be:3e:ca:89:07:c3:56:7d:f7:5f:17:1a:de:7f:d4:9f:20:28:
         be:c1:9b:5a:93:ba:cf:91:80:ad:05:c7:ce:1b:d1:ab:e0:4f:
         fd:42:da:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYbi9E8xiFyR4r9Msp48T6PYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OGNkYTNlNmQ2NTQ2MGYyNThiZmU1OTU3ZThmODViNGQy
YjAwNmEwHhcNMjMwMzE1MDE0ODI3WhcNMjMwMzE2MDE0ODI3WjAzMTEwLwYDVQQD
EygzMzE2ODYzOGZhNTAxOWEwNzU0MmY5NjBkYWUzY2JiNDQ4ZjdkMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRuk9Ba2ISZg7bm4Kqqrv3WvseEx
yNMwH/gLCF/HImvAXSjb8iKnVOY8V4OjWrP4fqnoS+3pXH7anT1nHD6xLiEYdzsh
desQSDoF+45r2C01tmDIGts/fDo+lN9TqDOH6zR55623YwooCtlMmcDwyG2zeZ6A
0iDGwrwiIpkRp8WN393qHawMDAjGJwZSyPVN767cqPza4eKWyRHOP24XNyqzC8jI
VTmm6JxgxgcpI59UvLd2WSPSszP4QzCm7wo/i2hDYU1L67iZvMbKfdumVNk0KFli
8/p/sTA7yYc765TzFskqiqGU9A6ZG7zSIRKibHg9S6wvv9BqF6GryU9aLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMWhjj6UBmgdUL5YNrjy7RI99LEMB8GA1UdIwQY
MBaAFFWM2j5tZUYPJYv+WVfo+FtNKwBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVll6YVBtMWxSZzhsaV81WlYtajRXMDByQUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82MTJiZDgtNTRlYi00ZmI3LTk4OTAt
NGI5YWE4NDEwYjJmLzEvVll6YVBtMWxSZzhsaV81WlYtajRXMDByQUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82MTJiZDgtNTRlYi00ZmI3LTk4OTAtNGI5YWE4NDEwYjJm
LzEvVll6YVBtMWxSZzhsaV81WlYtajRXMDByQUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELnBX/Ef
wGM9TU7mEtc4R1u1ABvU6jLmD7Klq5A/Wt+XPvMmtCd7b4y215jEkTLvT4EAQk24
W08O5rue9k6Kk02O9te1sjnTDq2lfEkVRUQ/0Rj+cRwxbSPY2J9+WmoOL/UyXoxD
ZznmtQPRDhGz31TwTFh7JBI8KzG7/3sFhKNN5VPkFztvB2xs1dwtEqiso48Yjcmg
MEXgpyJi/uMFScns1c244B7XDaYtJXDv96XUcKpIHtvoUoCEW0up7CoI/Tkhlx8s
ttrz/c2L6JYHoxF9Qjch3HCdvj7KiQfDVn33Xxca3n/UnyAovsGbWpO6z5GArQXH
zhvRq+BP/ULaYw==
-----END CERTIFICATE-----