Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/136bd2-16f9-4097-b347-b23e79f32501/1/11tyRqZe1VSR7-3fbbub60mEFuo.mft
File:                     11tyRqZe1VSR7-3fbbub60mEFuo.mft (raw, json)
Hash identifier:          tTRqBUEZ96JQUpDdO1J/1SiCboe1RsytjfjrSYflkgs=
Subject key identifier:   38:CF:92:B8:71:C7:ED:E7:3B:64:E6:5D:F0:E6:72:1B:ED:AF:01:AC
Authority key identifier: D7:5B:72:46:A6:5E:D5:54:91:EF:ED:DF:6D:BB:9B:EB:49:84:16:EA
Certificate issuer:       /CN=d75b7246a65ed55491efeddf6dbb9beb498416ea
Certificate serial:       018A2C2F2CEB94FF7255658DCCCA71396FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11tyRqZe1VSR7-3fbbub60mEFuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/136bd2-16f9-4097-b347-b23e79f32501/1/11tyRqZe1VSR7-3fbbub60mEFuo.mft
Manifest number:          0845
Signing time:             Fri 25 Aug 2023 10:13:23 +0000
Manifest this update:     Fri 25 Aug 2023 10:13:23 +0000
Manifest next update:     Sat 26 Aug 2023 10:13:23 +0000
Files and hashes:         1: 11tyRqZe1VSR7-3fbbub60mEFuo.crl (hash: HaOF9NrCPi+uOYu1gxoCkyTnF4HBz7K55ml7nQKkT30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2c:2f:2c:eb:94:ff:72:55:65:8d:cc:ca:71:39:6f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75b7246a65ed55491efeddf6dbb9beb498416ea
        Validity
            Not Before: Aug 25 10:13:23 2023 GMT
            Not After : Aug 26 10:13:23 2023 GMT
        Subject: CN=38cf92b871c7ede73b64e65df0e6721bedaf01ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:00:43:7c:a0:64:9f:70:fa:e0:f5:2e:f9:
                    98:3c:f0:f6:73:c4:5f:c3:d8:8d:2b:53:99:88:58:
                    b0:e2:33:4d:25:e2:24:ea:4b:95:8b:12:07:0b:83:
                    c3:13:24:0f:a6:97:a3:52:5a:3b:5f:f5:07:16:3c:
                    00:07:5c:da:77:ce:f6:a4:c2:08:e7:f4:ff:08:c5:
                    09:eb:3f:49:85:a3:fb:d4:da:af:5b:ec:46:78:2a:
                    a0:e8:bd:81:6e:29:ce:f8:b8:f0:f3:60:23:64:13:
                    28:f3:88:e9:79:b1:bd:71:40:2a:72:a9:58:79:e0:
                    9e:b2:ad:29:4a:63:d2:bc:b9:e6:29:a7:0d:19:09:
                    e0:fc:46:52:c8:ad:4d:a8:1c:8e:7d:f0:e7:bc:43:
                    51:84:a4:da:a2:c8:72:30:e1:14:b3:ae:21:b9:0c:
                    d9:96:7d:c6:ad:81:d3:c0:e2:d7:6a:e7:2f:f9:47:
                    85:bc:65:39:7c:9a:ba:01:af:1f:84:ee:6f:90:13:
                    ea:6a:7c:a4:ff:b7:e0:a5:24:9f:05:0f:d9:de:18:
                    3a:cd:05:20:d7:3a:6b:ad:f2:26:5c:d0:64:04:9c:
                    86:57:e6:93:3a:72:c2:37:d9:a1:89:55:29:1b:e2:
                    8b:72:ba:ad:4b:fe:08:4c:dd:52:0e:05:89:f5:af:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CF:92:B8:71:C7:ED:E7:3B:64:E6:5D:F0:E6:72:1B:ED:AF:01:AC
            X509v3 Authority Key Identifier:
                keyid:D7:5B:72:46:A6:5E:D5:54:91:EF:ED:DF:6D:BB:9B:EB:49:84:16:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11tyRqZe1VSR7-3fbbub60mEFuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/136bd2-16f9-4097-b347-b23e79f32501/1/11tyRqZe1VSR7-3fbbub60mEFuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/136bd2-16f9-4097-b347-b23e79f32501/1/11tyRqZe1VSR7-3fbbub60mEFuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:50:7e:22:2c:51:78:e7:8b:b0:68:82:5c:1f:c2:51:6f:d3:
         e0:37:06:4a:39:8b:ad:fb:95:e0:28:cb:bd:56:49:ed:a3:dc:
         48:e5:cd:9d:8f:c9:ba:e3:0c:37:36:1e:88:11:f8:6c:b1:23:
         90:58:82:30:8b:8b:99:36:3d:70:b5:ce:97:21:a0:58:f5:14:
         3b:e6:ca:fa:cc:bd:3f:30:b0:e1:36:d7:3e:32:ad:7e:5e:71:
         3d:87:84:fd:0f:7d:24:c7:fd:12:79:6c:c2:97:4a:e1:89:58:
         1a:83:15:c5:98:16:3a:ff:57:09:2a:fd:90:5f:d4:e5:26:9d:
         99:ff:ad:08:45:ef:42:bc:9b:13:f4:81:68:b2:d0:6d:a6:ef:
         0a:6d:95:fb:c1:4c:ca:72:51:d6:7e:8d:24:6c:03:85:ab:88:
         af:2a:c4:61:7b:bb:b4:44:14:13:f9:15:41:0b:4d:7c:6b:f9:
         4c:45:26:42:14:be:7d:27:cf:83:fa:1b:a3:a4:c3:54:80:d5:
         e0:28:ee:09:cb:39:e6:6e:fa:86:b1:fd:89:a6:55:80:de:d9:
         59:78:d7:ce:05:c3:89:a2:0b:93:46:61:0a:32:7b:40:13:5c:
         cd:e0:45:9d:1e:09:32:c0:ba:64:f5:3b:29:16:fb:37:e6:c6:
         2e:cd:25:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYosLyzrlP9yVWWNzMpxOW/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NWI3MjQ2YTY1ZWQ1NTQ5MWVmZWRkZjZkYmI5YmViNDk4
NDE2ZWEwHhcNMjMwODI1MTAxMzIzWhcNMjMwODI2MTAxMzIzWjAzMTEwLwYDVQQD
EygzOGNmOTJiODcxYzdlZGU3M2I2NGU2NWRmMGU2NzIxYmVkYWYwMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK4AQ3ygZJ9w+uD1LvmYPPD2c8Rf
w9iNK1OZiFiw4jNNJeIk6kuVixIHC4PDEyQPppejUlo7X/UHFjwAB1zad872pMII
5/T/CMUJ6z9JhaP71NqvW+xGeCqg6L2BbinO+Ljw82AjZBMo84jpebG9cUAqcqlY
eeCesq0pSmPSvLnmKacNGQng/EZSyK1NqByOffDnvENRhKTaoshyMOEUs64huQzZ
ln3GrYHTwOLXaucv+UeFvGU5fJq6Aa8fhO5vkBPqanyk/7fgpSSfBQ/Z3hg6zQUg
1zprrfImXNBkBJyGV+aTOnLCN9mhiVUpG+KLcrqtS/4ITN1SDgWJ9a9o8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjPkrhxx+3nO2TmXfDmchvtrwGsMB8GA1UdIwQY
MBaAFNdbckamXtVUke/t3227m+tJhBbqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTF0eVJxWmUxVlNSNy0zZmJidWI2MG1FRnVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMzZiZDItMTZmOS00MDk3LWIzNDct
YjIzZTc5ZjMyNTAxLzEvMTF0eVJxWmUxVlNSNy0zZmJidWI2MG1FRnVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xMzZiZDItMTZmOS00MDk3LWIzNDctYjIzZTc5ZjMyNTAx
LzEvMTF0eVJxWmUxVlNSNy0zZmJidWI2MG1FRnVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFB+IixR
eOeLsGiCXB/CUW/T4DcGSjmLrfuV4CjLvVZJ7aPcSOXNnY/JuuMMNzYeiBH4bLEj
kFiCMIuLmTY9cLXOlyGgWPUUO+bK+sy9PzCw4TbXPjKtfl5xPYeE/Q99JMf9Enls
wpdK4YlYGoMVxZgWOv9XCSr9kF/U5Sadmf+tCEXvQrybE/SBaLLQbabvCm2V+8FM
ynJR1n6NJGwDhauIryrEYXu7tEQUE/kVQQtNfGv5TEUmQhS+fSfPg/obo6TDVIDV
4CjuCcs55m76hrH9iaZVgN7ZWXjXzgXDiaILk0ZhCjJ7QBNczeBFnR4JMsC6ZPU7
KRb7N+bGLs0liQ==
-----END CERTIFICATE-----