Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
File:                     1-IMBwukKuq41kP_E_6aU1iIFnj4.mft (raw, json)
Hash identifier:          zG72nIX85xBI1H2UvrRa2kInz+aQqBQqRysGEzUDzGU=
Subject key identifier:   8C:BB:DF:0D:23:03:B3:FF:16:A1:54:AD:F9:21:CE:E4:24:12:EC:CF
Authority key identifier: F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
Certificate issuer:       /CN=f88301c2e90abaae3590ffc4ffa694d622059e3e
Certificate serial:       018921204528F229541BC564B7ED93767391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IMBwukKuq41kP_E_6aU1iIFnj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
Manifest number:          0D4C
Signing time:             Tue 04 Jul 2023 13:38:30 +0000
Manifest this update:     Tue 04 Jul 2023 13:38:30 +0000
Manifest next update:     Wed 05 Jul 2023 13:38:30 +0000
Files and hashes:         1: 1-IMBwukKuq41kP_E_6aU1iIFnj4.crl (hash: T+/fnvLIg+OKR+i9HEKhMb9VHAXPN8qz+TtkgDI5JaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:21:20:45:28:f2:29:54:1b:c5:64:b7:ed:93:76:73:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88301c2e90abaae3590ffc4ffa694d622059e3e
        Validity
            Not Before: Jul  4 13:38:30 2023 GMT
            Not After : Jul  5 13:38:30 2023 GMT
        Subject: CN=8cbbdf0d2303b3ff16a154adf921cee42412eccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:5d:8b:e0:bc:0b:cb:c2:21:92:c5:f3:39:
                    e3:1e:be:05:90:80:cf:8c:59:1e:37:b8:be:0a:b7:
                    51:79:15:50:bc:3f:d8:f6:2d:57:5e:6c:98:8c:c3:
                    9d:d7:6c:25:c5:db:f5:e5:cd:3a:43:76:a5:82:cf:
                    55:0e:14:20:06:1a:a1:bd:8f:d4:1c:db:53:79:ee:
                    e0:9d:df:80:ff:80:98:82:b3:0e:83:e0:81:0f:a3:
                    47:51:f1:df:2c:2f:89:d1:4f:6f:ae:28:7a:e8:06:
                    53:c0:d6:d0:b5:f3:22:92:b4:f3:75:aa:6a:e9:6d:
                    50:bb:16:9a:b0:e0:f8:14:74:ec:0b:7f:e6:a7:53:
                    50:13:c8:51:08:16:cb:4b:b4:40:ba:af:08:45:1c:
                    3f:a0:d0:3a:58:ad:2c:aa:0f:b5:7a:5b:e6:b4:e7:
                    6a:6d:9b:53:5c:69:1a:2d:9b:75:51:be:45:d7:a7:
                    3e:23:8f:48:e8:2d:26:83:54:40:7b:e3:df:bb:3b:
                    84:be:c4:8e:73:14:23:7a:7c:04:e7:dc:fd:1a:94:
                    f3:f8:08:68:df:64:7d:ab:ff:19:b5:7d:36:96:3b:
                    9d:36:23:fc:83:83:4b:90:14:04:08:93:62:48:48:
                    ed:99:98:48:f6:8f:04:9b:b9:aa:59:d0:a1:d4:15:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BB:DF:0D:23:03:B3:FF:16:A1:54:AD:F9:21:CE:E4:24:12:EC:CF
            X509v3 Authority Key Identifier:
                keyid:F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IMBwukKuq41kP_E_6aU1iIFnj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:71:b6:3e:9f:cb:7d:f4:3f:45:8d:93:3f:52:0d:6e:88:
         f7:13:ac:84:1b:28:eb:2b:d3:4a:a2:78:dc:0f:cb:66:ab:b7:
         4c:c4:a5:01:3a:f1:8e:22:48:52:96:bc:96:4a:69:24:e5:fe:
         af:e7:e2:ca:e7:be:30:b8:9c:9b:2f:85:8a:87:41:49:17:0e:
         3c:0f:ce:45:c2:b5:2b:cf:3c:a1:c8:b6:b6:f0:a1:cb:90:06:
         8d:16:1b:09:5d:8b:6a:31:72:9b:e6:c0:4d:6c:66:d5:07:b7:
         72:33:43:f1:3a:69:c9:cc:06:ee:cf:00:f0:11:99:a6:5c:0d:
         c2:58:f6:5f:ba:cb:37:95:36:4f:7c:6e:f3:c5:e0:f9:22:14:
         ea:f7:cc:80:bd:e2:98:da:cf:0d:f0:d0:4b:72:ea:6d:4a:83:
         9b:0c:97:69:55:6c:86:8d:0f:e2:ce:49:67:00:ed:c4:97:71:
         60:e4:eb:fe:9f:ed:79:65:99:d5:73:8e:33:b9:7b:b5:c4:79:
         ca:7b:eb:6f:65:b4:9d:67:9e:4b:40:f4:91:33:76:44:3b:81:
         ef:7d:c7:55:54:7d:05:78:b8:87:09:0e:a4:f4:68:47:c1:a7:
         c8:c3:c7:c6:05:a8:fa:1d:23:7b:04:39:60:52:3b:48:c3:fc:
         e8:8e:ee:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYkhIEUo8ilUG8Vkt+2TdnORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODMwMWMyZTkwYWJhYWUzNTkwZmZjNGZmYTY5NGQ2MjIw
NTllM2UwHhcNMjMwNzA0MTMzODMwWhcNMjMwNzA1MTMzODMwWjAzMTEwLwYDVQQD
Eyg4Y2JiZGYwZDIzMDNiM2ZmMTZhMTU0YWRmOTIxY2VlNDI0MTJlY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS5di+C8C8vCIZLF8znjHr4FkIDP
jFkeN7i+CrdReRVQvD/Y9i1XXmyYjMOd12wlxdv15c06Q3algs9VDhQgBhqhvY/U
HNtTee7gnd+A/4CYgrMOg+CBD6NHUfHfLC+J0U9vrih66AZTwNbQtfMikrTzdapq
6W1QuxaasOD4FHTsC3/mp1NQE8hRCBbLS7RAuq8IRRw/oNA6WK0sqg+1elvmtOdq
bZtTXGkaLZt1Ub5F16c+I49I6C0mg1RAe+PfuzuEvsSOcxQjenwE59z9GpTz+Aho
32R9q/8ZtX02ljudNiP8g4NLkBQECJNiSEjtmZhI9o8Em7mqWdCh1BWepQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIy73w0jA7P/FqFUrfkhzuQkEuzPMB8GA1UdIwQY
MBaAFPiDAcLpCrquNZD/xP+mlNYiBZ4+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JTUJ3dWtLdXE0MWtQX0VfNmFVMWlJRm5qNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNzQ2N2Y2LTljNDgtNGY2Zi1hOThj
LTQ2YzMyY2EyMGZkZi8xLzEtSU1Cd3VrS3VxNDFrUF9FXzZhVTFpSUZuajQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUwLzc0NjdmNi05YzQ4LTRmNmYtYTk4Yy00NmMzMmNhMjBm
ZGYvMS8xLUlNQnd1a0t1cTQxa1BfRV82YVUxaUlGbmo0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrFx
tj6fy330P0WNkz9SDW6I9xOshBso6yvTSqJ43A/LZqu3TMSlATrxjiJIUpa8lkpp
JOX+r+fiyue+MLicmy+FiodBSRcOPA/ORcK1K888oci2tvChy5AGjRYbCV2LajFy
m+bATWxm1Qe3cjND8TppycwG7s8A8BGZplwNwlj2X7rLN5U2T3xu88Xg+SIU6vfM
gL3imNrPDfDQS3LqbUqDmwyXaVVsho0P4s5JZwDtxJdxYOTr/p/teWWZ1XOOM7l7
tcR5ynvrb2W0nWeeS0D0kTN2RDuB733HVVR9BXi4hwkOpPRoR8GnyMPHxgWo+h0j
ewQ5YFI7SMP86I7ucw==
-----END CERTIFICATE-----