Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.mft
File:                     sUxz039H2HcRtsOcRQ0hNWr8mlc.mft (raw, json)
Hash identifier:          yd7Jzu/OsUoWuv6CWKAZ7HfzvBqkYDejBR62sFS8Xp8=
Subject key identifier:   02:DF:AF:6C:B9:71:18:2D:81:DD:42:7C:AD:49:85:3B:FD:28:69:73
Authority key identifier: B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57
Certificate issuer:       /CN=b14c73d37f47d87711b6c39c450d21356afc9a57
Certificate serial:       018533661590370A21675436FE303C5A5D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.mft
Manifest number:          0B2D
Signing time:             Wed 21 Dec 2022 06:36:46 +0000
Manifest this update:     Wed 21 Dec 2022 06:36:46 +0000
Manifest next update:     Thu 22 Dec 2022 06:36:46 +0000
Files and hashes:         1: sUxz039H2HcRtsOcRQ0hNWr8mlc.crl (hash: E58H4Xpf9F8bRTHjPIJr5unrVTioalPYxbsYdtjrQxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:33:66:15:90:37:0a:21:67:54:36:fe:30:3c:5a:5d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14c73d37f47d87711b6c39c450d21356afc9a57
        Validity
            Not Before: Dec 21 06:36:46 2022 GMT
            Not After : Dec 22 06:36:46 2022 GMT
        Subject: CN=02dfaf6cb971182d81dd427cad49853bfd286973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:04:4b:18:a4:39:0e:2e:74:43:9d:e8:9a:
                    c7:83:a3:22:50:86:b9:87:55:67:62:2a:4c:ad:c8:
                    e4:a7:55:ff:44:e1:57:a5:b6:76:81:92:54:ba:b0:
                    12:13:5b:d0:1b:18:1c:dc:7e:fd:19:1d:81:63:79:
                    c3:eb:e8:6b:41:25:21:1b:da:1f:48:dc:5c:6c:31:
                    d4:b2:98:02:85:b3:e1:67:47:ab:d9:e0:07:1a:5e:
                    03:88:89:b4:40:53:80:a3:55:de:0e:2e:73:1e:bb:
                    f6:a0:12:21:72:04:9f:87:7d:27:31:cc:43:f5:f6:
                    5e:fc:a9:76:d3:8a:1a:22:00:b7:06:a9:7d:46:26:
                    72:19:31:ae:cb:a1:fe:cf:5c:01:8d:94:d6:1b:66:
                    67:2e:eb:02:e4:59:e3:23:5b:f6:03:c6:d8:2e:70:
                    e1:41:4d:6c:7d:56:1e:1a:86:42:22:5d:04:a7:55:
                    0a:0b:12:2d:f0:b1:27:61:9a:9e:4f:fd:c5:fa:12:
                    0e:98:5c:41:53:12:fd:d2:20:f2:c5:e7:33:71:5a:
                    f1:fe:69:99:63:8e:6a:d3:6d:b5:90:a2:10:3a:42:
                    07:32:c2:a2:8e:38:b4:5b:f4:1d:d8:77:89:45:c1:
                    16:fd:67:1a:67:d7:ab:86:4b:90:23:d9:be:1f:b5:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DF:AF:6C:B9:71:18:2D:81:DD:42:7C:AD:49:85:3B:FD:28:69:73
            X509v3 Authority Key Identifier:
                keyid:B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:82:e7:48:e2:2b:4b:0e:49:0b:a2:65:da:8b:3a:66:fd:
         ed:e2:12:0a:60:36:c2:81:67:53:8d:d4:d3:dd:c2:15:d0:ad:
         75:4f:4e:b4:cd:56:c7:eb:c5:ca:87:dc:ac:3d:36:24:eb:5c:
         7a:50:c0:d3:27:d2:1d:6e:d9:b9:2b:f0:67:76:95:17:cc:96:
         93:54:d1:f9:59:54:aa:26:aa:64:bd:98:29:ab:b8:12:f9:34:
         57:d4:78:2d:fd:2b:c7:16:e1:fb:fd:fb:72:17:57:e3:2b:6f:
         8f:04:d1:f3:27:de:5f:d8:63:2d:f3:b3:d2:b2:6e:91:a3:1c:
         27:f8:6d:ae:36:a0:72:b0:dc:52:99:02:4d:39:08:59:75:b9:
         07:02:a3:0c:81:3e:b0:15:62:17:87:50:d5:ab:44:75:45:ff:
         ad:e9:ce:43:e8:db:05:c2:ef:63:e5:1a:c7:e0:b3:e3:06:46:
         06:f7:8d:12:34:98:cd:2d:90:31:63:7c:f9:dc:b0:d0:93:bc:
         bd:01:bc:c6:76:5e:32:97:e1:8c:01:6e:3a:b7:4c:d7:46:57:
         92:28:ae:43:6d:09:b0:c3:f3:0d:bd:9a:ff:46:e9:d0:7b:da:
         e2:cf:29:c0:67:70:f8:56:a1:cb:43:e1:2c:1d:3b:82:79:6c:
         51:dd:43:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUzZhWQNwohZ1Q2/jA8Wl1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGM3M2QzN2Y0N2Q4NzcxMWI2YzM5YzQ1MGQyMTM1NmFm
YzlhNTcwHhcNMjIxMjIxMDYzNjQ2WhcNMjIxMjIyMDYzNjQ2WjAzMTEwLwYDVQQD
EygwMmRmYWY2Y2I5NzExODJkODFkZDQyN2NhZDQ5ODUzYmZkMjg2OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmUESxikOQ4udEOd6JrHg6MiUIa5
h1VnYipMrcjkp1X/ROFXpbZ2gZJUurASE1vQGxgc3H79GR2BY3nD6+hrQSUhG9of
SNxcbDHUspgChbPhZ0er2eAHGl4DiIm0QFOAo1XeDi5zHrv2oBIhcgSfh30nMcxD
9fZe/Kl204oaIgC3Bql9RiZyGTGuy6H+z1wBjZTWG2ZnLusC5FnjI1v2A8bYLnDh
QU1sfVYeGoZCIl0Ep1UKCxIt8LEnYZqeT/3F+hIOmFxBUxL90iDyxeczcVrx/mmZ
Y45q0221kKIQOkIHMsKijji0W/Qd2HeJRcEW/WcaZ9erhkuQI9m+H7VRZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALfr2y5cRgtgd1CfK1JhTv9KGlzMB8GA1UdIwQY
MBaAFLFMc9N/R9h3EbbDnEUNITVq/JpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1V4ejAzOUgySGNSdHNPY1JRMGhOV3I4bWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZDU1YzgtNTVhYS00NzFmLWEzZWMt
MjdjODRkNTZiMDA4LzEvc1V4ejAzOUgySGNSdHNPY1JRMGhOV3I4bWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82ZDU1YzgtNTVhYS00NzFmLWEzZWMtMjdjODRkNTZiMDA4
LzEvc1V4ejAzOUgySGNSdHNPY1JRMGhOV3I4bWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfuC50ji
K0sOSQuiZdqLOmb97eISCmA2woFnU43U093CFdCtdU9OtM1Wx+vFyofcrD02JOtc
elDA0yfSHW7ZuSvwZ3aVF8yWk1TR+VlUqiaqZL2YKau4Evk0V9R4Lf0rxxbh+/37
chdX4ytvjwTR8yfeX9hjLfOz0rJukaMcJ/htrjagcrDcUpkCTTkIWXW5BwKjDIE+
sBViF4dQ1atEdUX/renOQ+jbBcLvY+Uax+Cz4wZGBveNEjSYzS2QMWN8+dyw0JO8
vQG8xnZeMpfhjAFuOrdM10ZXkiiuQ20JsMPzDb2a/0bp0Hva4s8pwGdw+Fahy0Ph
LB07gnlsUd1Dug==
-----END CERTIFICATE-----