Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.mft
File:                     2GRubMtxbolQGVj8hoI6mDaPtRo.mft (raw, json)
Hash identifier:          djGNeISwzCfXc0m6ycgO04BMKoPeYw3VdAZ4xE45HoM=
Subject key identifier:   CA:2C:15:ED:22:3C:85:01:73:4F:7E:19:C4:F8:1D:85:1A:29:BC:36
Authority key identifier: D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
Certificate issuer:       /CN=d8646e6ccb716e89501958fc86823a98368fb51a
Certificate serial:       018709AFEFF0E405D70FFCCE8397D7F54A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.mft
Manifest number:          06B5
Signing time:             Wed 22 Mar 2023 14:18:57 +0000
Manifest this update:     Wed 22 Mar 2023 14:18:57 +0000
Manifest next update:     Thu 23 Mar 2023 14:18:57 +0000
Files and hashes:         1: 2GRubMtxbolQGVj8hoI6mDaPtRo.crl (hash: vDTz/QT1O5BOfcFYPJBOptceMbkXuA+nDhDtcKFep4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:af:ef:f0:e4:05:d7:0f:fc:ce:83:97:d7:f5:4a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8646e6ccb716e89501958fc86823a98368fb51a
        Validity
            Not Before: Mar 22 14:18:57 2023 GMT
            Not After : Mar 23 14:18:57 2023 GMT
        Subject: CN=ca2c15ed223c8501734f7e19c4f81d851a29bc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:de:00:cb:44:16:26:01:91:69:cb:ad:40:
                    3c:5a:d0:a5:6d:34:3f:3d:1c:b1:3f:f1:d2:8e:c6:
                    1d:c8:b4:cd:96:e8:48:db:68:95:88:29:63:e5:7b:
                    66:22:7c:bb:b3:37:48:61:9b:b3:ce:42:ba:ae:74:
                    27:41:55:1e:ea:10:75:48:87:d5:0d:15:83:36:87:
                    91:f0:c9:88:1b:6e:36:32:5e:f8:98:85:9d:ff:17:
                    fe:3a:5a:90:5d:b0:20:06:f4:75:35:c4:5a:36:18:
                    ef:2f:5f:d4:3c:6a:67:ba:ba:06:d7:4a:e9:5c:84:
                    4f:71:bb:6b:2a:c5:cc:88:ca:0a:ad:3a:6a:f1:cb:
                    e0:15:2a:53:08:23:c6:65:7a:33:bf:88:90:37:1a:
                    97:b5:27:eb:f6:3a:6e:d6:75:0a:ab:5d:0f:74:c2:
                    5a:42:aa:f9:62:26:b6:ab:03:3a:b6:27:09:4e:ce:
                    27:96:37:37:63:1d:91:e2:a6:f8:6f:ad:f0:82:9e:
                    03:f4:41:f2:01:b5:4c:28:30:71:6b:f8:ac:3c:1d:
                    68:ea:c7:1f:f5:fa:bc:5c:4f:4b:b5:52:1b:7f:e3:
                    50:85:25:44:10:d4:9e:7c:cb:dc:3d:06:69:1a:7a:
                    8e:61:94:c4:d4:80:70:f5:84:c7:12:6b:07:88:3d:
                    95:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2C:15:ED:22:3C:85:01:73:4F:7E:19:C4:F8:1D:85:1A:29:BC:36
            X509v3 Authority Key Identifier:
                keyid:D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:41:c2:a0:36:89:79:fd:9f:9a:a5:92:17:09:41:64:7b:a4:
         8b:c6:d5:6b:77:0b:30:e2:57:f1:c5:f7:62:cd:33:92:7f:8c:
         21:fd:6e:a1:4d:01:8c:e4:f0:b0:70:49:2b:ba:1d:49:22:3d:
         b2:66:a0:d1:05:db:d9:a3:b8:de:73:6f:b2:d6:6a:f3:f9:73:
         22:f8:95:a2:7e:f6:25:a5:9a:09:e2:81:c9:4d:a1:b9:0f:2c:
         0b:cb:62:96:da:79:c6:a8:3c:8e:1a:e5:6c:0d:5d:fc:db:d8:
         ed:77:a3:d6:9d:d7:15:99:9b:03:c4:06:19:6d:55:fb:62:9d:
         82:2b:33:cf:91:02:51:63:d0:76:53:dc:ab:7d:a1:64:1d:22:
         f6:75:b1:a5:ae:93:63:9b:54:a3:0e:f3:59:d3:dc:15:49:d2:
         f2:b6:29:f5:42:b2:b8:fb:30:9b:ac:5a:a9:92:b6:5e:b2:41:
         9a:54:70:34:53:fc:b0:2f:06:d0:fd:af:07:90:fc:1c:a3:21:
         23:99:92:68:00:80:02:92:ba:09:22:9d:f2:34:11:90:dc:fd:
         3c:97:51:1d:78:96:7e:bf:2c:d4:92:9e:9b:81:ff:ad:c6:19:
         2c:1c:90:44:55:4f:05:7e:a4:6a:eb:0a:b7:15:ac:01:4f:27:
         3a:e1:be:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcJr+/w5AXXD/zOg5fX9UpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjQ2ZTZjY2I3MTZlODk1MDE5NThmYzg2ODIzYTk4MzY4
ZmI1MWEwHhcNMjMwMzIyMTQxODU3WhcNMjMwMzIzMTQxODU3WjAzMTEwLwYDVQQD
EyhjYTJjMTVlZDIyM2M4NTAxNzM0ZjdlMTljNGY4MWQ4NTFhMjliYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOTeAMtEFiYBkWnLrUA8WtClbTQ/
PRyxP/HSjsYdyLTNluhI22iViClj5XtmIny7szdIYZuzzkK6rnQnQVUe6hB1SIfV
DRWDNoeR8MmIG242Ml74mIWd/xf+OlqQXbAgBvR1NcRaNhjvL1/UPGpnuroG10rp
XIRPcbtrKsXMiMoKrTpq8cvgFSpTCCPGZXozv4iQNxqXtSfr9jpu1nUKq10PdMJa
Qqr5Yia2qwM6ticJTs4nljc3Yx2R4qb4b63wgp4D9EHyAbVMKDBxa/isPB1o6scf
9fq8XE9LtVIbf+NQhSVEENSefMvcPQZpGnqOYZTE1IBw9YTHEmsHiD2V1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMosFe0iPIUBc09+GcT4HYUaKbw2MB8GA1UdIwQY
MBaAFNhkbmzLcW6JUBlY/IaCOpg2j7UaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdSdWJNdHhib2xRR1ZqOGhvSTZtRGFQdFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84MzcwNDItNTcyZi00ODg0LTg2ZmMt
ZDg2MDNiNGVlMzliLzEvMkdSdWJNdHhib2xRR1ZqOGhvSTZtRGFQdFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84MzcwNDItNTcyZi00ODg0LTg2ZmMtZDg2MDNiNGVlMzli
LzEvMkdSdWJNdHhib2xRR1ZqOGhvSTZtRGFQdFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkHCoDaJ
ef2fmqWSFwlBZHuki8bVa3cLMOJX8cX3Ys0zkn+MIf1uoU0BjOTwsHBJK7odSSI9
smag0QXb2aO43nNvstZq8/lzIviVon72JaWaCeKByU2huQ8sC8tiltp5xqg8jhrl
bA1d/NvY7Xej1p3XFZmbA8QGGW1V+2Kdgiszz5ECUWPQdlPcq32hZB0i9nWxpa6T
Y5tUow7zWdPcFUnS8rYp9UKyuPswm6xaqZK2XrJBmlRwNFP8sC8G0P2vB5D8HKMh
I5mSaACAApK6CSKd8jQRkNz9PJdRHXiWfr8s1JKem4H/rcYZLByQRFVPBX6kausK
txWsAU8nOuG+DQ==
-----END CERTIFICATE-----