Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/55c1b0-328a-4b58-b217-e3dcc4bcd144/1/cvnNeVdwd-ETWXTqplJwig-5y6o.mft
File:                     cvnNeVdwd-ETWXTqplJwig-5y6o.mft (raw, json)
Hash identifier:          X1W/oJ+tU5nIRVZ8tjba5EkDLf6fJvp2Rd7+CuIjijg=
Subject key identifier:   86:CF:DE:7B:02:7C:CD:6B:57:81:FA:E2:B0:1C:44:A6:ED:59:80:DB
Authority key identifier: 72:F9:CD:79:57:70:77:E1:13:59:74:EA:A6:52:70:8A:0F:B9:CB:AA
Certificate issuer:       /CN=72f9cd79577077e1135974eaa652708a0fb9cbaa
Certificate serial:       01889EFA207BCCAC7FAF39E583593A1E492E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvnNeVdwd-ETWXTqplJwig-5y6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/55c1b0-328a-4b58-b217-e3dcc4bcd144/1/cvnNeVdwd-ETWXTqplJwig-5y6o.mft
Manifest number:          01
Signing time:             Fri 09 Jun 2023 07:06:12 +0000
Manifest this update:     Fri 09 Jun 2023 07:06:12 +0000
Manifest next update:     Sat 10 Jun 2023 07:06:12 +0000
Files and hashes:         1: cvnNeVdwd-ETWXTqplJwig-5y6o.crl (hash: Eyv5VgfiBzWehrahnAN/piC6YVI4i24uzkWxvCrnV8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9e:fa:20:7b:cc:ac:7f:af:39:e5:83:59:3a:1e:49:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f9cd79577077e1135974eaa652708a0fb9cbaa
        Validity
            Not Before: Jun  9 07:06:12 2023 GMT
            Not After : Jun 10 07:06:12 2023 GMT
        Subject: CN=86cfde7b027ccd6b5781fae2b01c44a6ed5980db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:2b:8a:a1:03:09:34:eb:dd:2b:18:39:48:
                    68:a3:17:84:b0:6c:b5:e8:1f:34:45:40:92:32:da:
                    a3:7f:ae:2a:25:6b:08:59:dd:56:a8:ee:68:c4:98:
                    77:eb:c7:4e:6a:9f:3e:78:12:ef:5c:80:e0:61:64:
                    fe:6d:89:4d:b2:9d:a5:bd:98:96:db:58:16:b7:d0:
                    cc:e9:74:69:3a:4c:14:7a:ae:d8:b1:7f:3b:36:11:
                    32:de:80:c4:bf:f6:7f:67:f3:e5:f8:87:fa:09:ca:
                    75:d7:d5:a4:fd:08:7b:11:0e:9c:bf:57:8d:7c:ec:
                    38:21:5e:e1:16:82:4e:ea:92:1e:71:8f:74:44:20:
                    f5:8f:04:58:22:be:78:a7:cb:52:4a:52:96:e6:86:
                    bd:11:06:f3:32:a1:3b:27:42:e2:f9:b3:37:ab:4d:
                    e4:06:d9:49:1f:5e:5c:e2:cd:a6:53:6e:52:07:8c:
                    1a:a1:18:ee:80:52:a2:d2:ad:09:f0:d5:ee:90:d7:
                    d3:f2:ca:83:89:36:94:d9:ca:c2:08:51:1d:66:55:
                    d0:4b:2d:91:40:2c:e3:67:1c:37:d0:8f:f0:7f:e9:
                    70:44:24:67:3a:d1:eb:dc:e1:05:85:3b:0f:a9:e9:
                    09:c6:98:e2:4e:b4:b9:25:f0:8a:c2:89:5a:bf:f6:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CF:DE:7B:02:7C:CD:6B:57:81:FA:E2:B0:1C:44:A6:ED:59:80:DB
            X509v3 Authority Key Identifier:
                keyid:72:F9:CD:79:57:70:77:E1:13:59:74:EA:A6:52:70:8A:0F:B9:CB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvnNeVdwd-ETWXTqplJwig-5y6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/55c1b0-328a-4b58-b217-e3dcc4bcd144/1/cvnNeVdwd-ETWXTqplJwig-5y6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/55c1b0-328a-4b58-b217-e3dcc4bcd144/1/cvnNeVdwd-ETWXTqplJwig-5y6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:72:8d:cf:32:1e:24:72:fc:fc:f0:83:5d:60:5f:9b:53:18:
         49:22:af:c0:4c:b1:1b:bd:9a:26:44:fb:6f:8a:5b:10:5b:f1:
         71:0f:96:7f:9b:86:1e:fc:a9:89:fe:14:27:49:cb:15:fd:26:
         b2:4e:40:e5:6e:bc:ee:2f:b3:7b:fa:bb:9f:37:68:92:8d:eb:
         3a:3c:4a:99:57:69:77:91:3f:86:7d:42:da:6f:8a:75:b4:31:
         df:b5:e2:af:55:46:31:ea:5b:ef:7b:d6:ae:15:ff:dc:26:f8:
         9d:ac:66:9e:f3:89:ea:da:02:2d:91:49:05:a1:ef:d6:8b:b7:
         98:c6:27:68:4d:81:4d:16:e0:4b:4a:10:a7:57:59:38:3d:91:
         a7:27:27:7a:b5:36:de:dd:fa:ef:17:ee:df:9c:d6:dc:2e:e8:
         12:a1:08:bb:35:87:49:5f:71:98:f8:86:37:6f:e0:d5:87:74:
         84:af:82:27:4a:1e:d5:3d:4f:2e:8b:c9:44:8c:01:26:2f:be:
         5f:de:c3:d7:d2:6c:9b:97:88:74:4e:3a:8d:75:7d:7a:fa:1b:
         c2:cc:4b:f3:94:ac:cb:db:30:ac:4c:46:45:9a:02:08:e1:e8:
         76:1e:4e:03:a2:6e:ea:32:47:09:b0:c0:29:ef:db:9c:ac:ff:
         ad:11:ad:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYie+iB7zKx/rznlg1k6HkkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjljZDc5NTc3MDc3ZTExMzU5NzRlYWE2NTI3MDhhMGZi
OWNiYWEwHhcNMjMwNjA5MDcwNjEyWhcNMjMwNjEwMDcwNjEyWjAzMTEwLwYDVQQD
Eyg4NmNmZGU3YjAyN2NjZDZiNTc4MWZhZTJiMDFjNDRhNmVkNTk4MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgkriqEDCTTr3SsYOUhooxeEsGy1
6B80RUCSMtqjf64qJWsIWd1WqO5oxJh368dOap8+eBLvXIDgYWT+bYlNsp2lvZiW
21gWt9DM6XRpOkwUeq7YsX87NhEy3oDEv/Z/Z/Pl+If6Ccp119Wk/Qh7EQ6cv1eN
fOw4IV7hFoJO6pIecY90RCD1jwRYIr54p8tSSlKW5oa9EQbzMqE7J0Li+bM3q03k
BtlJH15c4s2mU25SB4waoRjugFKi0q0J8NXukNfT8sqDiTaU2crCCFEdZlXQSy2R
QCzjZxw30I/wf+lwRCRnOtHr3OEFhTsPqekJxpjiTrS5JfCKwolav/ZnKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbP3nsCfM1rV4H64rAcRKbtWYDbMB8GA1UdIwQY
MBaAFHL5zXlXcHfhE1l06qZScIoPucuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZuTmVWZHdkLUVUV1hUcXBsSndpZy01eTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81NWMxYjAtMzI4YS00YjU4LWIyMTct
ZTNkY2M0YmNkMTQ0LzEvY3ZuTmVWZHdkLUVUV1hUcXBsSndpZy01eTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC81NWMxYjAtMzI4YS00YjU4LWIyMTctZTNkY2M0YmNkMTQ0
LzEvY3ZuTmVWZHdkLUVUV1hUcXBsSndpZy01eTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3KNzzIe
JHL8/PCDXWBfm1MYSSKvwEyxG72aJkT7b4pbEFvxcQ+Wf5uGHvypif4UJ0nLFf0m
sk5A5W687i+ze/q7nzdoko3rOjxKmVdpd5E/hn1C2m+KdbQx37Xir1VGMepb73vW
rhX/3Cb4naxmnvOJ6toCLZFJBaHv1ou3mMYnaE2BTRbgS0oQp1dZOD2RpycnerU2
3t367xfu35zW3C7oEqEIuzWHSV9xmPiGN2/g1Yd0hK+CJ0oe1T1PLovJRIwBJi++
X97D19Jsm5eIdE46jXV9evobwsxL85Ssy9swrExGRZoCCOHodh5OA6Ju6jJHCbDA
Ke/bnKz/rRGtdA==
-----END CERTIFICATE-----