Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5669e0-f345-4b62-9437-961d1f869ee4/1/3yvf5hUovbwsvU4_1WnAcPLXFXI.mft
File:                     3yvf5hUovbwsvU4_1WnAcPLXFXI.mft (raw, json)
Hash identifier:          8iJF3MQe2ydtjU1pKr4t3MFci3ww72pGJDWRQRJFA6g=
Subject key identifier:   74:72:6C:DB:88:07:7B:DA:61:2A:0E:E7:5C:8E:36:C0:0A:A5:2F:12
Authority key identifier: DF:2B:DF:E6:15:28:BD:BC:2C:BD:4E:3F:D5:69:C0:70:F2:D7:15:72
Certificate issuer:       /CN=df2bdfe61528bdbc2cbd4e3fd569c070f2d71572
Certificate serial:       07057183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3yvf5hUovbwsvU4_1WnAcPLXFXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5669e0-f345-4b62-9437-961d1f869ee4/1/3yvf5hUovbwsvU4_1WnAcPLXFXI.mft
Manifest number:          08BB
Signing time:             Fri 25 Mar 2022 10:43:04 +0000
Manifest this update:     Fri 25 Mar 2022 10:43:04 +0000
Manifest next update:     Sat 26 Mar 2022 10:43:04 +0000
Files and hashes:         1: 3yvf5hUovbwsvU4_1WnAcPLXFXI.crl (hash: 8a9J1QkrFN2xH7241uWOhE/HFn0rT7XGSPLY63Tdmek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117797251 (0x7057183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2bdfe61528bdbc2cbd4e3fd569c070f2d71572
        Validity
            Not Before: Mar 25 10:43:04 2022 GMT
            Not After : Mar 26 10:43:04 2022 GMT
        Subject: CN=74726cdb88077bda612a0ee75c8e36c00aa52f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:01:96:bf:8e:38:09:42:7b:39:09:4c:d9:
                    89:d5:70:23:40:b7:5d:89:7d:eb:9c:f5:c7:b7:62:
                    1b:72:26:04:28:e9:09:25:2b:73:f6:e9:fa:a1:0c:
                    c7:58:b9:e4:58:04:bc:91:88:f0:ce:6c:f1:d9:d6:
                    e6:f0:93:4a:85:25:be:21:17:d3:04:4d:c5:b8:8a:
                    1b:dd:b1:83:b2:28:f6:e4:29:9d:b0:28:bf:a9:4a:
                    f7:48:ee:ad:8c:7e:7e:05:af:64:26:12:68:8e:4b:
                    e5:e5:0f:27:5a:ad:f6:5a:8f:57:4b:1b:82:4c:2b:
                    c0:97:8e:2d:22:75:52:ef:1a:0f:cf:3b:d5:51:1b:
                    da:d4:05:34:38:0d:56:f0:63:0f:61:31:2e:e6:80:
                    64:65:cd:f8:31:89:99:fc:8f:77:bc:2d:06:46:24:
                    09:36:a5:a4:b1:d4:94:ad:b7:94:e8:25:c8:35:51:
                    e3:0a:97:f3:0d:f5:5a:38:02:a3:f0:12:02:c9:cb:
                    8b:cb:c6:8e:db:b8:cc:95:01:4a:e0:2c:59:1f:d2:
                    05:f3:ec:68:b2:5a:27:0c:cd:c7:f9:c4:78:ab:8e:
                    c7:d2:25:c2:ff:2f:b0:42:e5:46:9d:6f:60:fc:5c:
                    60:ef:5e:a2:be:14:4c:37:a2:cc:af:38:d1:f4:fc:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:72:6C:DB:88:07:7B:DA:61:2A:0E:E7:5C:8E:36:C0:0A:A5:2F:12
            X509v3 Authority Key Identifier:
                keyid:DF:2B:DF:E6:15:28:BD:BC:2C:BD:4E:3F:D5:69:C0:70:F2:D7:15:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3yvf5hUovbwsvU4_1WnAcPLXFXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5669e0-f345-4b62-9437-961d1f869ee4/1/3yvf5hUovbwsvU4_1WnAcPLXFXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5669e0-f345-4b62-9437-961d1f869ee4/1/3yvf5hUovbwsvU4_1WnAcPLXFXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:aa:41:c2:72:42:6d:81:e4:3b:c5:d7:3c:4d:fd:a0:c7:
         f9:b2:bf:3b:02:d3:d9:3d:8b:ac:e7:8c:4a:0d:e3:09:8c:5c:
         9f:79:df:b9:97:09:2c:d9:6d:0c:a2:af:14:e9:66:2c:65:e5:
         7d:29:cc:49:f8:f9:5f:f9:38:e9:75:6f:f9:3a:da:58:20:11:
         4e:43:ed:6d:87:cd:33:a5:69:9e:19:de:98:1b:99:a3:47:9c:
         18:97:89:c2:bc:af:4f:65:ac:61:c3:cc:30:24:1f:dc:e0:58:
         ad:d8:a0:84:4d:1b:30:3f:08:27:5b:fc:83:1c:49:62:e7:19:
         ff:d9:ef:95:7e:b1:e3:19:4b:b2:80:54:4e:f9:2f:3d:ee:b9:
         0c:c0:35:30:30:ba:f6:e0:39:bb:3e:6a:3b:bb:6d:51:87:d2:
         ec:48:91:0f:4a:77:97:e7:f3:95:9c:36:79:71:87:aa:b4:ae:
         6a:79:d3:89:ed:00:d6:ac:7c:87:bf:61:de:85:fb:93:6e:70:
         65:bb:e8:c8:be:1f:8f:54:fd:bd:f1:57:e3:e0:05:99:fc:3c:
         5e:85:9c:7e:2b:f7:a1:e4:e1:1b:f0:f0:24:57:8e:75:c3:42:
         7d:e0:18:1a:38:65:88:e8:c6:6d:7e:ae:1d:d4:28:69:4f:b0:
         48:d0:5b:c6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBwVxgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZjJiZGZlNjE1MjhiZGJjMmNiZDRlM2ZkNTY5YzA3MGYyZDcxNTcyMB4XDTIyMDMy
NTEwNDMwNFoXDTIyMDMyNjEwNDMwNFowMzExMC8GA1UEAxMoNzQ3MjZjZGI4ODA3
N2JkYTYxMmEwZWU3NWM4ZTM2YzAwYWE1MmYxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK4MAZa/jjgJQns5CUzZidVwI0C3XYl965z1x7diG3ImBCjp
CSUrc/bp+qEMx1i55FgEvJGI8M5s8dnW5vCTSoUlviEX0wRNxbiKG92xg7Io9uQp
nbAov6lK90jurYx+fgWvZCYSaI5L5eUPJ1qt9lqPV0sbgkwrwJeOLSJ1Uu8aD887
1VEb2tQFNDgNVvBjD2ExLuaAZGXN+DGJmfyPd7wtBkYkCTalpLHUlK23lOglyDVR
4wqX8w31WjgCo/ASAsnLi8vGjtu4zJUBSuAsWR/SBfPsaLJaJwzNx/nEeKuOx9Il
wv8vsELlRp1vYPxcYO9eor4UTDeizK840fT8v30CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBR0cmzbiAd72mEqDudcjjbACqUvEjAfBgNVHSMEGDAWgBTfK9/mFSi9vCy9
Tj/VacBw8tcVcjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzN5dmY1aFVvdmJ3c3ZVNF8xV25BY1BMWEZYSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvNTY2OWUwLWYzNDUtNGI2Mi05NDM3LTk2MWQxZjg2OWVlNC8x
LzN5dmY1aFVvdmJ3c3ZVNF8xV25BY1BMWEZYSS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
NTY2OWUwLWYzNDUtNGI2Mi05NDM3LTk2MWQxZjg2OWVlNC8xLzN5dmY1aFVvdmJ3
c3ZVNF8xV25BY1BMWEZYSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJGbqkHCckJtgeQ7xdc8Tf2gx/my
vzsC09k9i6znjEoN4wmMXJ9537mXCSzZbQyirxTpZixl5X0pzEn4+V/5OOl1b/k6
2lggEU5D7W2HzTOlaZ4Z3pgbmaNHnBiXicK8r09lrGHDzDAkH9zgWK3YoIRNGzA/
CCdb/IMcSWLnGf/Z75V+seMZS7KAVE75Lz3uuQzANTAwuvbgObs+aju7bVGH0uxI
kQ9Kd5fn85WcNnlxh6q0rmp504ntANasfIe/Yd6F+5NucGW76Mi+H49U/b3xV+Pg
BZn8PF6FnH4r96Hk4Rvw8CRXjnXDQn3gGBo4ZYjoxm1+rh3UKGlPsEjQW8Y=
-----END CERTIFICATE-----