Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/9MndSgYJ49Duv0LjzNZIkTeIn38.mft
File:                     9MndSgYJ49Duv0LjzNZIkTeIn38.mft (raw, json)
Hash identifier:          1dC04H3O84w4a/VHNluMjRuFfoNfLbbkIReqKpNJ10A=
Subject key identifier:   2E:73:7D:91:3B:7E:95:DD:ED:42:CF:7E:FA:CB:C5:F4:65:CD:1C:35
Authority key identifier: F4:C9:DD:4A:06:09:E3:D0:EE:BF:42:E3:CC:D6:48:91:37:88:9F:7F
Certificate issuer:       /CN=f4c9dd4a0609e3d0eebf42e3ccd6489137889f7f
Certificate serial:       0184355E7B9B39562B6AF0C6188A264BDD53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9MndSgYJ49Duv0LjzNZIkTeIn38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/9MndSgYJ49Duv0LjzNZIkTeIn38.mft
Manifest number:          0935
Signing time:             Tue 01 Nov 2022 22:44:55 +0000
Manifest this update:     Tue 01 Nov 2022 22:44:55 +0000
Manifest next update:     Wed 02 Nov 2022 22:44:55 +0000
Files and hashes:         1: 9MndSgYJ49Duv0LjzNZIkTeIn38.crl (hash: XvN2ik+W+kqWUlIt3wHj0NEQaWpjCTjF0RclzFl1tgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:35:5e:7b:9b:39:56:2b:6a:f0:c6:18:8a:26:4b:dd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c9dd4a0609e3d0eebf42e3ccd6489137889f7f
        Validity
            Not Before: Nov  1 22:44:55 2022 GMT
            Not After : Nov  2 22:44:55 2022 GMT
        Subject: CN=2e737d913b7e95dded42cf7efacbc5f465cd1c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:0e:18:f7:36:aa:b2:d4:35:63:e7:13:2c:
                    60:fc:78:f0:88:19:ea:38:a9:0b:26:1a:0a:4d:0b:
                    2e:55:00:dc:0c:fb:d2:63:8f:bd:63:d8:e8:05:23:
                    79:5b:98:ed:7a:90:22:9d:33:80:c6:e8:4b:b8:17:
                    22:f9:ae:46:35:b4:8e:f1:c4:3e:51:e8:dd:b3:15:
                    d4:45:ee:cf:44:2c:8b:78:73:bd:a1:97:80:a9:3c:
                    7b:0d:e4:51:9f:5b:5e:1e:8d:51:9f:a9:94:12:7c:
                    ea:a9:74:c1:b6:1d:85:06:50:1c:43:a2:3c:82:cf:
                    ac:d2:a1:14:49:9f:fb:f3:8a:86:67:80:ce:48:52:
                    80:a2:2b:87:81:bc:32:9a:97:d9:00:fa:2f:3d:6f:
                    7f:61:b3:42:7e:1e:e4:9f:87:c1:69:c0:3f:14:8c:
                    1e:cd:a6:1a:bd:a8:ca:a4:2d:69:c1:f3:43:f0:78:
                    2f:ad:5c:83:73:b2:43:04:68:62:19:6a:0f:0d:41:
                    a5:07:4e:b0:10:e9:39:b8:ea:0c:65:03:85:5c:a7:
                    a3:54:45:cc:d2:4d:bd:9a:82:dc:11:db:34:f7:36:
                    cd:8c:49:5c:05:e9:5f:86:2e:67:92:e7:29:d7:70:
                    3e:d2:8f:c1:d3:88:55:7c:19:e7:01:85:ee:d5:8a:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:7D:91:3B:7E:95:DD:ED:42:CF:7E:FA:CB:C5:F4:65:CD:1C:35
            X509v3 Authority Key Identifier:
                keyid:F4:C9:DD:4A:06:09:E3:D0:EE:BF:42:E3:CC:D6:48:91:37:88:9F:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MndSgYJ49Duv0LjzNZIkTeIn38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/9MndSgYJ49Duv0LjzNZIkTeIn38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/9MndSgYJ49Duv0LjzNZIkTeIn38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:26:2a:f1:f2:c3:56:9e:84:37:85:a7:04:bd:9e:52:bc:3b:
         a7:31:66:ed:73:f8:0c:20:e6:45:8e:39:21:71:38:97:ee:4a:
         34:e1:86:bd:bb:ae:ed:92:db:12:7e:fa:e4:40:bb:76:93:99:
         2e:d6:44:97:5c:a9:3f:b5:b6:7d:01:fe:e7:05:22:15:08:be:
         b0:8a:04:bd:69:a0:ae:da:c5:0b:80:da:2e:bf:04:b9:74:75:
         55:b0:f4:b6:06:c5:b2:9c:de:16:9f:60:6c:c1:ed:67:43:fd:
         5a:ab:3c:2f:61:56:94:04:67:0b:07:04:79:8b:c7:18:b8:41:
         71:dc:b5:99:46:f8:17:23:f3:b2:c9:b3:93:6e:99:4d:b5:a3:
         74:e1:0c:c3:ea:41:fb:75:f7:24:d7:5c:06:f3:53:7a:c4:4c:
         8a:d3:75:53:c1:7e:a7:cb:8c:ce:e2:f4:fc:ef:9e:2b:55:b1:
         c0:26:c1:26:1b:20:03:f7:0a:8d:90:74:86:71:a0:e2:2d:00:
         89:f1:71:b1:08:40:b4:3f:b0:ee:1b:c2:6c:b1:19:d2:94:f5:
         ab:f6:04:41:c3:a7:9f:a4:66:82:8f:df:cb:c0:b7:17:73:33:
         c2:f8:81:3b:6a:6e:42:77:e0:6f:cc:2e:5e:f5:5c:81:d5:d6:
         4c:b4:82:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYQ1XnubOVYravDGGIomS91TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzlkZDRhMDYwOWUzZDBlZWJmNDJlM2NjZDY0ODkxMzc4
ODlmN2YwHhcNMjIxMTAxMjI0NDU1WhcNMjIxMTAyMjI0NDU1WjAzMTEwLwYDVQQD
EygyZTczN2Q5MTNiN2U5NWRkZWQ0MmNmN2VmYWNiYzVmNDY1Y2QxYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfUOGPc2qrLUNWPnEyxg/HjwiBnq
OKkLJhoKTQsuVQDcDPvSY4+9Y9joBSN5W5jtepAinTOAxuhLuBci+a5GNbSO8cQ+
UejdsxXURe7PRCyLeHO9oZeAqTx7DeRRn1teHo1Rn6mUEnzqqXTBth2FBlAcQ6I8
gs+s0qEUSZ/784qGZ4DOSFKAoiuHgbwympfZAPovPW9/YbNCfh7kn4fBacA/FIwe
zaYavajKpC1pwfND8HgvrVyDc7JDBGhiGWoPDUGlB06wEOk5uOoMZQOFXKejVEXM
0k29moLcEds09zbNjElcBelfhi5nkucp13A+0o/B04hVfBnnAYXu1YrzKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5zfZE7fpXd7ULPfvrLxfRlzRw1MB8GA1UdIwQY
MBaAFPTJ3UoGCePQ7r9C48zWSJE3iJ9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1uZFNnWUo0OUR1djBManpOWklrVGVJbjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MzYzYTEtYWFjNi00NmNmLThkMzUt
YWE4NzMzZmY1YmUxLzEvOU1uZFNnWUo0OUR1djBManpOWklrVGVJbjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82MzYzYTEtYWFjNi00NmNmLThkMzUtYWE4NzMzZmY1YmUx
LzEvOU1uZFNnWUo0OUR1djBManpOWklrVGVJbjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyYq8fLD
Vp6EN4WnBL2eUrw7pzFm7XP4DCDmRY45IXE4l+5KNOGGvbuu7ZLbEn765EC7dpOZ
LtZEl1ypP7W2fQH+5wUiFQi+sIoEvWmgrtrFC4DaLr8EuXR1VbD0tgbFspzeFp9g
bMHtZ0P9Wqs8L2FWlARnCwcEeYvHGLhBcdy1mUb4FyPzssmzk26ZTbWjdOEMw+pB
+3X3JNdcBvNTesRMitN1U8F+p8uMzuL0/O+eK1WxwCbBJhsgA/cKjZB0hnGg4i0A
ifFxsQhAtD+w7hvCbLEZ0pT1q/YEQcOnn6Rmgo/fy8C3F3MzwviBO2puQnfgb8wu
XvVcgdXWTLSCeA==
-----END CERTIFICATE-----