Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/A2aKoHZPNrYhRejvN5RF4TqzxUI.mft
File:                     A2aKoHZPNrYhRejvN5RF4TqzxUI.mft (raw, json)
Hash identifier:          CP4pgb3xt+yrYkzx/NXg6m3Ifa5f0FWLRqymAyjaBTs=
Subject key identifier:   76:59:CE:A7:CB:36:B6:18:59:71:87:79:CF:E0:97:7C:9D:27:29:65
Authority key identifier: 03:66:8A:A0:76:4F:36:B6:21:45:E8:EF:37:94:45:E1:3A:B3:C5:42
Certificate issuer:       /CN=03668aa0764f36b62145e8ef379445e13ab3c542
Certificate serial:       060F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2aKoHZPNrYhRejvN5RF4TqzxUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/A2aKoHZPNrYhRejvN5RF4TqzxUI.mft
Manifest number:          06
Signing time:             Thu 24 Feb 2022 13:57:04 +0000
Manifest this update:     Thu 24 Feb 2022 13:57:04 +0000
Manifest next update:     Fri 25 Feb 2022 13:57:04 +0000
Files and hashes:         1: A2aKoHZPNrYhRejvN5RF4TqzxUI.crl (hash: yMGA8foDKPWwe3jHPwqPbGXYS8edUULRPMi9AS9+i/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397147 (0x60f5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03668aa0764f36b62145e8ef379445e13ab3c542
        Validity
            Not Before: Feb 24 13:57:04 2022 GMT
            Not After : Feb 25 13:57:04 2022 GMT
        Subject: CN=7659cea7cb36b61859718779cfe0977c9d272965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:13:9b:26:2b:d2:e0:88:a9:ca:54:97:5a:
                    56:79:30:c9:9f:3d:3d:c4:4d:54:91:57:c4:9f:3d:
                    b1:f5:07:2a:fa:47:3e:15:99:90:ed:f8:25:c9:07:
                    84:ff:d1:ab:30:d1:38:77:a6:66:dc:f1:76:83:62:
                    fd:f3:9d:6e:44:47:00:5e:e3:d0:65:aa:b8:4d:b8:
                    a6:4d:f0:6c:d2:1e:58:da:3e:35:c2:79:91:0b:5e:
                    b4:af:2a:c0:a3:37:3b:fc:dd:ab:a9:c9:d2:c1:23:
                    ac:5c:40:00:2c:86:88:02:08:96:ef:d1:88:c1:b0:
                    fe:ca:a3:c0:4c:f3:a7:81:98:39:4f:4e:d1:1a:01:
                    f7:1c:22:af:63:fb:f7:93:03:78:3d:ec:7d:a8:21:
                    80:14:30:04:4a:61:4c:aa:ab:14:95:63:de:4c:ec:
                    b7:8a:0e:6d:22:b0:ed:ab:f3:67:c2:87:92:f5:d0:
                    25:4c:f4:b7:d3:62:ce:bb:67:77:14:ba:e2:74:a0:
                    31:86:f4:29:3f:a3:48:a4:86:c8:a1:bf:c6:0f:e9:
                    b7:b1:97:2d:92:ca:d5:26:d5:f2:8e:79:41:b3:f2:
                    8b:02:d9:ad:b0:bc:f1:24:dc:9b:91:de:2e:e1:99:
                    85:0d:9b:f7:3d:94:a0:d5:ff:30:e5:ff:1f:7d:60:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:59:CE:A7:CB:36:B6:18:59:71:87:79:CF:E0:97:7C:9D:27:29:65
            X509v3 Authority Key Identifier:
                keyid:03:66:8A:A0:76:4F:36:B6:21:45:E8:EF:37:94:45:E1:3A:B3:C5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2aKoHZPNrYhRejvN5RF4TqzxUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/A2aKoHZPNrYhRejvN5RF4TqzxUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/A2aKoHZPNrYhRejvN5RF4TqzxUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:5c:fa:17:a2:fa:c9:09:02:89:bd:e1:53:25:e4:26:0f:
         9f:ce:d3:d9:23:03:e5:dc:d0:58:f0:74:e4:4c:19:79:5e:2f:
         ea:65:ae:45:78:a6:8a:45:99:47:2a:27:24:1f:bc:24:5b:be:
         88:11:f0:3c:4f:c9:b4:0b:03:d9:4d:7b:12:dd:1e:bd:08:d2:
         ab:92:5a:b1:bf:bf:c3:73:02:a4:f0:a1:e6:b5:bd:24:a1:5d:
         17:fd:31:23:94:f5:7c:2c:7f:d8:60:cd:f6:2f:bf:24:da:21:
         ae:20:1f:02:3c:31:49:a3:c5:0e:2b:39:c6:6f:69:18:c5:de:
         34:c5:ed:4b:8c:db:7c:90:60:6c:aa:31:b4:03:99:e9:16:30:
         db:d7:b5:c0:94:02:9e:43:0b:b3:e2:3b:0f:a0:81:54:51:69:
         f7:a5:9f:eb:d7:94:91:f6:15:5a:ae:64:03:91:17:5b:2f:10:
         8d:84:95:7e:fa:ad:fa:ee:3a:5c:f0:a9:f6:aa:c8:70:fe:18:
         a0:49:16:a9:ca:41:3d:39:15:bd:16:1f:d5:c0:00:21:eb:62:
         5a:37:56:d2:c3:46:6a:68:a6:f4:b0:22:eb:e4:0e:02:7f:e8:
         a6:4e:08:ac:8f:cd:23:1c:10:b3:ed:aa:72:e7:a9:1a:11:16:
         df:18:08:8c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIDBg9bMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
NjY4YWEwNzY0ZjM2YjYyMTQ1ZThlZjM3OTQ0NWUxM2FiM2M1NDIwHhcNMjIwMjI0
MTM1NzA0WhcNMjIwMjI1MTM1NzA0WjAzMTEwLwYDVQQDEyg3NjU5Y2VhN2NiMzZi
NjE4NTk3MTg3NzljZmUwOTc3YzlkMjcyOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlswTmyYr0uCIqcpUl1pWeTDJnz09xE1UkVfEnz2x9Qcq+kc+
FZmQ7fglyQeE/9GrMNE4d6Zm3PF2g2L9851uREcAXuPQZaq4TbimTfBs0h5Y2j41
wnmRC160ryrAozc7/N2rqcnSwSOsXEAALIaIAgiW79GIwbD+yqPATPOngZg5T07R
GgH3HCKvY/v3kwN4Pex9qCGAFDAESmFMqqsUlWPeTOy3ig5tIrDtq/NnwoeS9dAl
TPS302LOu2d3FLridKAxhvQpP6NIpIbIob/GD+m3sZctksrVJtXyjnlBs/KLAtmt
sLzxJNybkd4u4ZmFDZv3PZSg1f8w5f8ffWBvjQIDAQABo4ICIjCCAh4wHQYDVR0O
BBYEFHZZzqfLNrYYWXGHec/gl3ydJyllMB8GA1UdIwQYMBaAFANmiqB2Tza2IUXo
7zeUReE6s8VCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
QTJhS29IWlBOclloUmVqdk41UkY0VHF6eFVJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81NC9jYmM4ZTYtNDJiMC00M2FmLTk4N2ItYmZiODdiMTAzZmM5LzEv
QTJhS29IWlBOclloUmVqdk41UkY0VHF6eFVJLm1mdDCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9j
YmM4ZTYtNDJiMC00M2FmLTk4N2ItYmZiODdiMTAzZmM5LzEvQTJhS29IWlBOcllo
UmVqdk41UkY0VHF6eFVJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8E
BjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKpc+hei+skJAom94VMl5CYPn87T
2SMD5dzQWPB05EwZeV4v6mWuRXimikWZRyonJB+8JFu+iBHwPE/JtAsD2U17Et0e
vQjSq5Jasb+/w3MCpPCh5rW9JKFdF/0xI5T1fCx/2GDN9i+/JNohriAfAjwxSaPF
Dis5xm9pGMXeNMXtS4zbfJBgbKoxtAOZ6RYw29e1wJQCnkMLs+I7D6CBVFFp96Wf
69eUkfYVWq5kA5EXWy8QjYSVfvqt+u46XPCp9qrIcP4YoEkWqcpBPTkVvRYf1cAA
IetiWjdW0sNGamim9LAi6+QOAn/opk4IrI/NIxwQs+2qcuepGhEW3xgIjA==
-----END CERTIFICATE-----