Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/483464-f60a-415e-95ff-f55d99693dc0/1/4Q5PopKofOFvkVVImcXQPXCayfs.mft
File:                     4Q5PopKofOFvkVVImcXQPXCayfs.mft (raw, json)
Hash identifier:          q5diRq1bvPmsPs7B8ntevi/yHEfrtBFHBjDosRaEnwU=
Subject key identifier:   5D:9E:C4:B9:FC:F7:11:61:15:42:F7:86:36:0A:D4:25:3C:FE:F0:F8
Authority key identifier: E1:0E:4F:A2:92:A8:7C:E1:6F:91:55:48:99:C5:D0:3D:70:9A:C9:FB
Certificate issuer:       /CN=e10e4fa292a87ce16f91554899c5d03d709ac9fb
Certificate serial:       0183D0EA32C2B8FF2054DD3DEE84B3317056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q5PopKofOFvkVVImcXQPXCayfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/483464-f60a-415e-95ff-f55d99693dc0/1/4Q5PopKofOFvkVVImcXQPXCayfs.mft
Manifest number:          0AF7
Signing time:             Thu 13 Oct 2022 10:35:52 +0000
Manifest this update:     Thu 13 Oct 2022 10:35:52 +0000
Manifest next update:     Fri 14 Oct 2022 10:35:52 +0000
Files and hashes:         1: 4Q5PopKofOFvkVVImcXQPXCayfs.crl (hash: 3yNvYoZfE/a21KrKyr7BSgnb15/Pn3PQlx14O97MyAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d0:ea:32:c2:b8:ff:20:54:dd:3d:ee:84:b3:31:70:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10e4fa292a87ce16f91554899c5d03d709ac9fb
        Validity
            Not Before: Oct 13 10:35:52 2022 GMT
            Not After : Oct 14 10:35:52 2022 GMT
        Subject: CN=5d9ec4b9fcf711611542f786360ad4253cfef0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:ed:29:b3:29:fd:6a:93:88:b5:b8:9f:04:
                    02:40:f7:f7:eb:e3:88:d1:be:98:93:c1:14:b8:f3:
                    67:3c:0c:9e:cb:6f:41:eb:47:2e:de:d9:7c:c5:7c:
                    6f:47:98:d8:36:0c:e4:65:e1:ca:88:81:a8:2f:a5:
                    a6:56:bd:f7:3b:8b:6a:bb:3f:be:26:da:1f:89:52:
                    80:c7:21:24:c9:b4:da:6b:a4:1f:2f:15:ea:86:44:
                    26:46:19:89:8b:24:bd:76:60:40:46:ec:7a:a1:9f:
                    34:e9:e6:d8:dc:ae:d3:88:c4:0f:00:ee:80:fa:78:
                    96:3f:45:10:2c:88:cd:a4:d9:c7:2c:43:95:b9:1a:
                    b1:b5:4a:51:00:5a:20:49:71:05:a6:9a:e6:ba:1c:
                    70:d3:00:e3:1f:98:84:e6:d8:f9:0a:fe:b2:77:3d:
                    e8:88:05:0f:b1:fc:a8:a1:2b:0a:ff:ac:92:b4:d8:
                    75:5b:1c:20:92:2c:1e:c2:26:48:63:81:12:87:95:
                    56:01:c6:dc:95:7a:05:ca:32:d8:ff:ba:84:6d:d3:
                    5c:aa:b1:1b:93:6d:24:31:2a:ee:51:62:38:e6:84:
                    82:8e:8d:ba:93:7d:e3:93:49:ce:12:92:8a:15:5e:
                    4b:65:8f:09:af:55:c4:18:ca:79:ba:0b:c5:26:d4:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9E:C4:B9:FC:F7:11:61:15:42:F7:86:36:0A:D4:25:3C:FE:F0:F8
            X509v3 Authority Key Identifier:
                keyid:E1:0E:4F:A2:92:A8:7C:E1:6F:91:55:48:99:C5:D0:3D:70:9A:C9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q5PopKofOFvkVVImcXQPXCayfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/483464-f60a-415e-95ff-f55d99693dc0/1/4Q5PopKofOFvkVVImcXQPXCayfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/483464-f60a-415e-95ff-f55d99693dc0/1/4Q5PopKofOFvkVVImcXQPXCayfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:42:c4:44:22:b7:40:f3:cc:8a:de:85:76:69:e9:a0:40:56:
         58:55:73:cb:88:3f:a2:07:04:4a:ad:43:96:bc:2a:ac:9a:8b:
         bc:a2:47:18:d5:53:fa:e8:e7:ce:c9:31:fc:7c:7c:36:3b:35:
         d2:a7:21:97:47:b4:b0:ab:6e:b9:ca:bb:48:a8:67:46:ae:cb:
         7d:84:c3:ab:e2:8c:46:9c:36:d4:10:6e:13:c7:80:40:6f:fe:
         99:00:b0:d7:4b:2d:b9:f6:f4:fc:e9:65:78:f0:24:dd:3f:cf:
         b6:2a:ae:c7:9e:77:2b:7f:eb:a8:f8:b6:06:ea:65:ca:1a:c9:
         7d:83:a5:ae:8c:32:f1:6a:55:8b:cb:ee:92:25:31:19:d5:2c:
         2e:0d:86:9c:29:fd:96:11:7c:f7:d1:0b:36:29:15:8a:d7:64:
         d7:5b:10:13:ea:a6:68:8f:b9:09:09:d6:6f:35:89:96:1e:45:
         55:82:dd:1c:f9:2d:e2:17:89:68:22:5f:4d:fc:4a:9d:d0:41:
         3f:6e:bb:f9:ef:90:b6:98:62:0c:3b:b6:2b:b6:c5:e1:ec:b7:
         3f:87:42:9d:ab:a9:61:13:d9:ad:00:1e:1a:5e:84:33:29:b9:
         c4:3f:ca:b8:94:f9:79:22:6a:b4:65:ce:90:75:50:42:e8:11:
         50:0e:3e:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYPQ6jLCuP8gVN097oSzMXBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGU0ZmEyOTJhODdjZTE2ZjkxNTU0ODk5YzVkMDNkNzA5
YWM5ZmIwHhcNMjIxMDEzMTAzNTUyWhcNMjIxMDE0MTAzNTUyWjAzMTEwLwYDVQQD
Eyg1ZDllYzRiOWZjZjcxMTYxMTU0MmY3ODYzNjBhZDQyNTNjZmVmMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB/tKbMp/WqTiLW4nwQCQPf36+OI
0b6Yk8EUuPNnPAyey29B60cu3tl8xXxvR5jYNgzkZeHKiIGoL6WmVr33O4tquz++
JtofiVKAxyEkybTaa6QfLxXqhkQmRhmJiyS9dmBARux6oZ806ebY3K7TiMQPAO6A
+niWP0UQLIjNpNnHLEOVuRqxtUpRAFogSXEFpprmuhxw0wDjH5iE5tj5Cv6ydz3o
iAUPsfyooSsK/6yStNh1WxwgkiwewiZIY4ESh5VWAcbclXoFyjLY/7qEbdNcqrEb
k20kMSruUWI45oSCjo26k33jk0nOEpKKFV5LZY8Jr1XEGMp5ugvFJtToWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2exLn89xFhFUL3hjYK1CU8/vD4MB8GA1UdIwQY
MBaAFOEOT6KSqHzhb5FVSJnF0D1wmsn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFE1UG9wS29mT0Z2a1ZWSW1jWFFQWENheWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80ODM0NjQtZjYwYS00MTVlLTk1ZmYt
ZjU1ZDk5NjkzZGMwLzEvNFE1UG9wS29mT0Z2a1ZWSW1jWFFQWENheWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80ODM0NjQtZjYwYS00MTVlLTk1ZmYtZjU1ZDk5NjkzZGMw
LzEvNFE1UG9wS29mT0Z2a1ZWSW1jWFFQWENheWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkLERCK3
QPPMit6FdmnpoEBWWFVzy4g/ogcESq1DlrwqrJqLvKJHGNVT+ujnzskx/Hx8Njs1
0qchl0e0sKtuucq7SKhnRq7LfYTDq+KMRpw21BBuE8eAQG/+mQCw10stufb0/Oll
ePAk3T/Ptiqux553K3/rqPi2BuplyhrJfYOlrowy8WpVi8vukiUxGdUsLg2GnCn9
lhF899ELNikVitdk11sQE+qmaI+5CQnWbzWJlh5FVYLdHPkt4heJaCJfTfxKndBB
P267+e+QtphiDDu2K7bF4ey3P4dCnaupYRPZrQAeGl6EMym5xD/KuJT5eSJqtGXO
kHVQQugRUA4+6A==
-----END CERTIFICATE-----