Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3ec813-a77a-423f-820f-58c2da2959a8/1/9G4sNB8bPBtjWkgJjBed7Jo8ya0.mft
File:                     9G4sNB8bPBtjWkgJjBed7Jo8ya0.mft (raw, json)
Hash identifier:          OzNg0w5D/D7pZi1PqNiLthKYQ+In2DbxNKfyBnDBw/c=
Subject key identifier:   2E:9E:6B:B3:18:18:7C:FD:E3:BA:11:52:16:18:87:A7:54:D1:09:86
Authority key identifier: F4:6E:2C:34:1F:1B:3C:1B:63:5A:48:09:8C:17:9D:EC:9A:3C:C9:AD
Certificate issuer:       /CN=f46e2c341f1b3c1b635a48098c179dec9a3cc9ad
Certificate serial:       066EAD02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9G4sNB8bPBtjWkgJjBed7Jo8ya0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/3ec813-a77a-423f-820f-58c2da2959a8/1/9G4sNB8bPBtjWkgJjBed7Jo8ya0.mft
Manifest number:          087D
Signing time:             Thu 02 Jun 2022 13:58:26 +0000
Manifest this update:     Thu 02 Jun 2022 13:58:26 +0000
Manifest next update:     Fri 03 Jun 2022 13:58:26 +0000
Files and hashes:         1: 9G4sNB8bPBtjWkgJjBed7Jo8ya0.crl (hash: 6HkcTkmDs3UWOvpnP1/4VDVEB19BrM01JFE6OihCAIQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107916546 (0x66ead02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f46e2c341f1b3c1b635a48098c179dec9a3cc9ad
        Validity
            Not Before: Jun  2 13:58:26 2022 GMT
            Not After : Jun  3 13:58:26 2022 GMT
        Subject: CN=2e9e6bb318187cfde3ba1152161887a754d10986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:54:80:ba:32:d1:6e:90:00:fe:10:84:5a:99:
                    75:61:a5:9b:04:2a:fc:92:b4:c0:3b:1f:e1:1f:72:
                    67:cf:e8:45:37:e8:8b:ce:24:b0:06:89:1c:ee:6b:
                    8a:d5:81:f7:5f:56:29:78:ee:99:04:12:5e:94:49:
                    3b:72:15:20:db:ab:1a:d7:10:32:6f:5a:4a:e4:c1:
                    de:91:76:a3:f8:61:04:f8:a4:33:21:0d:d6:d4:c5:
                    46:4e:a0:06:06:49:e6:f2:1b:56:51:09:cf:69:3d:
                    1d:78:2c:d4:2c:45:14:4c:5c:c6:e1:f4:03:a4:f1:
                    86:2b:c0:b9:7a:84:a5:ea:62:0b:91:3f:1c:59:9f:
                    40:1b:b0:e3:bb:a0:86:e2:52:49:a7:77:fd:22:e8:
                    1c:41:f4:6d:1d:17:0e:1a:5b:fb:04:7b:94:e0:67:
                    86:96:42:0b:62:1b:7d:77:73:2e:48:df:79:58:fc:
                    03:2f:24:3b:e6:6a:f1:e8:08:26:49:c1:e9:69:e1:
                    d6:7e:46:2c:d0:ea:1a:7b:32:33:d9:1b:b6:db:79:
                    d5:13:6a:ed:b9:ea:89:04:2d:9d:45:de:c6:22:3b:
                    8e:c7:4c:1c:29:d4:a3:3b:df:88:89:a0:6e:91:5b:
                    05:af:6f:de:89:c0:e0:98:b8:36:79:ba:1f:db:6e:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9E:6B:B3:18:18:7C:FD:E3:BA:11:52:16:18:87:A7:54:D1:09:86
            X509v3 Authority Key Identifier:
                keyid:F4:6E:2C:34:1F:1B:3C:1B:63:5A:48:09:8C:17:9D:EC:9A:3C:C9:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9G4sNB8bPBtjWkgJjBed7Jo8ya0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3ec813-a77a-423f-820f-58c2da2959a8/1/9G4sNB8bPBtjWkgJjBed7Jo8ya0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3ec813-a77a-423f-820f-58c2da2959a8/1/9G4sNB8bPBtjWkgJjBed7Jo8ya0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:81:37:e8:cf:5c:29:63:21:9c:1e:00:4d:1d:60:cc:3f:
         34:35:a7:0f:2a:6b:91:3e:1f:32:9f:5b:e9:2b:77:5f:84:63:
         f4:2c:fb:bd:da:2f:50:d1:0f:bb:b9:11:de:0a:4f:17:b9:f2:
         15:9c:47:8e:56:10:e0:9a:82:8f:4a:f5:07:a6:47:d4:23:f7:
         e4:9a:e1:4a:cb:cd:33:26:dc:2d:25:6f:4c:5c:99:28:23:b5:
         a2:e8:fc:f0:81:c7:a7:39:56:54:6f:4d:d9:f0:d5:06:e6:9e:
         6b:51:4a:05:27:58:e7:83:ca:21:95:56:65:4b:87:c4:7b:f1:
         01:7a:de:dc:a3:81:46:f2:81:ee:29:ff:7f:64:6f:d0:c8:a9:
         2f:d1:e5:fd:48:3b:cb:9c:a1:87:b2:5f:14:19:0b:27:a2:a8:
         d2:be:b7:f2:23:43:90:60:bf:87:e0:59:5a:60:94:ec:09:88:
         ef:d4:63:6d:08:35:27:a1:da:dc:17:23:0e:57:fe:8a:c5:f9:
         bd:3d:fa:cd:dc:d5:87:b2:f7:b3:a0:7e:a0:ea:2c:f0:db:98:
         c8:95:f4:44:89:95:e8:91:be:9d:c7:55:e3:09:39:a7:ae:cf:
         a4:a3:17:4d:fb:f5:a6:4a:23:1c:ea:d3:2d:59:8b:20:3e:8b:
         75:4c:83:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBm6tAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NDZlMmMzNDFmMWIzYzFiNjM1YTQ4MDk4YzE3OWRlYzlhM2NjOWFkMB4XDTIyMDYw
MjEzNTgyNloXDTIyMDYwMzEzNTgyNlowMzExMC8GA1UEAxMoMmU5ZTZiYjMxODE4
N2NmZGUzYmExMTUyMTYxODg3YTc1NGQxMDk4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIhUgLoy0W6QAP4QhFqZdWGlmwQq/JK0wDsf4R9yZ8/oRTfo
i84ksAaJHO5ritWB919WKXjumQQSXpRJO3IVINurGtcQMm9aSuTB3pF2o/hhBPik
MyEN1tTFRk6gBgZJ5vIbVlEJz2k9HXgs1CxFFExcxuH0A6TxhivAuXqEpepiC5E/
HFmfQBuw47ughuJSSad3/SLoHEH0bR0XDhpb+wR7lOBnhpZCC2IbfXdzLkjfeVj8
Ay8kO+Zq8egIJknB6Wnh1n5GLNDqGnsyM9kbttt51RNq7bnqiQQtnUXexiI7jsdM
HCnUozvfiImgbpFbBa9v3onA4Ji4Nnm6H9tulN8CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQunmuzGBh8/eO6EVIWGIenVNEJhjAfBgNVHSMEGDAWgBT0biw0Hxs8G2Na
SAmMF53smjzJrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlHNHNOQjhiUEJ0aldrZ0pqQmVkN0pvOHlhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvM2VjODEzLWE3N2EtNDIzZi04MjBmLTU4YzJkYTI5NTlhOC8x
LzlHNHNOQjhiUEJ0aldrZ0pqQmVkN0pvOHlhMC5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
M2VjODEzLWE3N2EtNDIzZi04MjBmLTU4YzJkYTI5NTlhOC8xLzlHNHNOQjhiUEJ0
aldrZ0pqQmVkN0pvOHlhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADaMgTfoz1wpYyGcHgBNHWDMPzQ1
pw8qa5E+HzKfW+krd1+EY/Qs+73aL1DRD7u5Ed4KTxe58hWcR45WEOCago9K9Qem
R9Qj9+Sa4UrLzTMm3C0lb0xcmSgjtaLo/PCBx6c5VlRvTdnw1QbmnmtRSgUnWOeD
yiGVVmVLh8R78QF63tyjgUbyge4p/39kb9DIqS/R5f1IO8ucoYeyXxQZCyeiqNK+
t/IjQ5Bgv4fgWVpglOwJiO/UY20INSeh2twXIw5X/orF+b09+s3c1Yey97OgfqDq
LPDbmMiV9ESJleiRvp3HVeMJOaeuz6SjF0379aZKIxzq0y1ZiyA+i3VMg5w=
-----END CERTIFICATE-----