Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/156083-953d-48d7-83d2-bdcdab801b9b/1/c77kWdTUlGaIOEb4Ja5fqWcJDjg.mft
File:                     c77kWdTUlGaIOEb4Ja5fqWcJDjg.mft (raw, json)
Hash identifier:          K5msxyoAKSIEkI2F4IBlTE11muJQt7lQ4KIh8xP/Djc=
Subject key identifier:   41:DF:9B:D3:D1:4D:FA:7C:AA:D3:57:16:E9:90:5C:E7:84:8C:9B:A8
Authority key identifier: 73:BE:E4:59:D4:D4:94:66:88:38:46:F8:25:AE:5F:A9:67:09:0E:38
Certificate issuer:       /CN=73bee459d4d49466883846f825ae5fa967090e38
Certificate serial:       018517FAB31470037BE071D12A6125A7BC68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c77kWdTUlGaIOEb4Ja5fqWcJDjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/156083-953d-48d7-83d2-bdcdab801b9b/1/c77kWdTUlGaIOEb4Ja5fqWcJDjg.mft
Manifest number:          14
Signing time:             Thu 15 Dec 2022 22:49:43 +0000
Manifest this update:     Thu 15 Dec 2022 22:49:43 +0000
Manifest next update:     Fri 16 Dec 2022 22:49:43 +0000
Files and hashes:         1: c77kWdTUlGaIOEb4Ja5fqWcJDjg.crl (hash: L0VTnPk/hSkab/I4n5F8A8YSbEVkWGv0zvoyd6H1DNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:17:fa:b3:14:70:03:7b:e0:71:d1:2a:61:25:a7:bc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73bee459d4d49466883846f825ae5fa967090e38
        Validity
            Not Before: Dec 15 22:49:43 2022 GMT
            Not After : Dec 16 22:49:43 2022 GMT
        Subject: CN=41df9bd3d14dfa7caad35716e9905ce7848c9ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dc:aa:8e:85:59:01:d0:cf:3b:a4:f6:b1:3b:
                    9e:71:39:3e:7d:99:09:e3:b7:06:68:6f:38:36:f1:
                    12:3b:4a:ad:7d:3d:69:66:a0:ba:96:d8:b7:10:33:
                    75:50:32:66:ac:29:5d:be:a8:a5:be:7f:50:4d:bb:
                    06:29:95:81:69:10:23:c9:71:2a:66:8f:70:95:e1:
                    cb:82:a9:55:19:d1:f4:2a:b3:fd:e6:d6:1b:43:45:
                    59:87:74:17:59:5f:5d:cf:5c:1a:ec:f3:e2:2b:37:
                    1a:90:15:7c:08:18:ed:ed:75:9f:55:89:a1:67:b8:
                    0c:d7:22:63:6e:01:44:89:2b:38:af:f6:5b:5f:39:
                    8e:ee:b0:d5:25:18:69:2a:4e:cd:51:e2:e0:b8:d0:
                    93:63:c2:73:e6:f5:74:85:59:fa:76:f6:3b:14:1f:
                    e9:b0:1b:dd:10:0c:5f:47:09:a7:99:06:f2:20:49:
                    3d:e0:86:05:8e:95:a7:ab:e3:8c:73:e3:9f:f0:32:
                    52:71:37:9a:3b:92:1b:4b:e6:fd:ba:5f:d5:d6:10:
                    ef:68:a5:1e:dc:c3:9c:1c:b3:ac:65:67:b1:0c:97:
                    8b:4f:ab:8b:44:33:24:7c:19:b6:e2:95:3a:60:30:
                    42:6a:a3:78:77:3f:88:f1:58:02:96:f3:12:0f:cd:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DF:9B:D3:D1:4D:FA:7C:AA:D3:57:16:E9:90:5C:E7:84:8C:9B:A8
            X509v3 Authority Key Identifier:
                keyid:73:BE:E4:59:D4:D4:94:66:88:38:46:F8:25:AE:5F:A9:67:09:0E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c77kWdTUlGaIOEb4Ja5fqWcJDjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/156083-953d-48d7-83d2-bdcdab801b9b/1/c77kWdTUlGaIOEb4Ja5fqWcJDjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/156083-953d-48d7-83d2-bdcdab801b9b/1/c77kWdTUlGaIOEb4Ja5fqWcJDjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:28:45:ff:49:b4:23:ee:88:c0:1f:9d:1f:ff:0a:00:09:12:
         ad:d2:01:de:5f:53:32:55:8d:1f:e2:df:6a:21:37:23:38:de:
         cc:d3:d6:4b:cd:d5:10:a0:02:0c:a8:ff:d3:62:9c:43:1a:fe:
         bd:13:9f:0f:e8:80:24:f0:d8:62:ca:a9:6b:24:72:93:e9:e9:
         d6:14:a3:ec:84:2b:0b:4d:71:56:68:4d:c7:8e:29:6e:ea:78:
         b7:78:38:e3:7b:25:00:d9:ee:ed:d4:37:d6:13:12:f7:e2:3f:
         78:be:5f:31:c6:12:e9:82:90:44:61:99:4d:f9:2f:3b:ee:cf:
         83:1b:4b:1f:75:9d:cb:a4:ac:35:42:e1:29:1d:d4:0c:a5:9c:
         a2:37:89:c5:ae:37:51:54:b1:c4:dc:e8:8e:26:b1:b6:4d:5d:
         5e:26:85:a3:5b:67:f5:d6:c2:f8:c9:ad:1c:7a:e6:be:e4:8e:
         c1:91:62:b1:92:63:83:69:6f:36:90:ef:6c:fd:08:74:42:a0:
         94:d6:7f:1a:dc:01:9c:e8:bf:94:ac:cb:2f:27:12:cc:cc:d3:
         61:a1:1b:48:9c:05:d0:0a:bb:dd:56:dc:d7:ea:dd:be:67:b6:
         34:38:00:f4:f5:30:8e:50:6f:fd:f1:e6:94:a3:2f:8b:ff:3c:
         76:47:1f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUX+rMUcAN74HHRKmElp7xoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYmVlNDU5ZDRkNDk0NjY4ODM4NDZmODI1YWU1ZmE5Njcw
OTBlMzgwHhcNMjIxMjE1MjI0OTQzWhcNMjIxMjE2MjI0OTQzWjAzMTEwLwYDVQQD
Eyg0MWRmOWJkM2QxNGRmYTdjYWFkMzU3MTZlOTkwNWNlNzg0OGM5YmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9yqjoVZAdDPO6T2sTuecTk+fZkJ
47cGaG84NvESO0qtfT1pZqC6lti3EDN1UDJmrCldvqilvn9QTbsGKZWBaRAjyXEq
Zo9wleHLgqlVGdH0KrP95tYbQ0VZh3QXWV9dz1wa7PPiKzcakBV8CBjt7XWfVYmh
Z7gM1yJjbgFEiSs4r/ZbXzmO7rDVJRhpKk7NUeLguNCTY8Jz5vV0hVn6dvY7FB/p
sBvdEAxfRwmnmQbyIEk94IYFjpWnq+OMc+Of8DJScTeaO5IbS+b9ul/V1hDvaKUe
3MOcHLOsZWexDJeLT6uLRDMkfBm24pU6YDBCaqN4dz+I8VgClvMSD80DRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHfm9PRTfp8qtNXFumQXOeEjJuoMB8GA1UdIwQY
MBaAFHO+5FnU1JRmiDhG+CWuX6lnCQ44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzc3a1dkVFVsR2FJT0ViNEphNWZxV2NKRGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xNTYwODMtOTUzZC00OGQ3LTgzZDIt
YmRjZGFiODAxYjliLzEvYzc3a1dkVFVsR2FJT0ViNEphNWZxV2NKRGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xNTYwODMtOTUzZC00OGQ3LTgzZDItYmRjZGFiODAxYjli
LzEvYzc3a1dkVFVsR2FJT0ViNEphNWZxV2NKRGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyhF/0m0
I+6IwB+dH/8KAAkSrdIB3l9TMlWNH+LfaiE3IzjezNPWS83VEKACDKj/02KcQxr+
vROfD+iAJPDYYsqpayRyk+np1hSj7IQrC01xVmhNx44pbup4t3g443slANnu7dQ3
1hMS9+I/eL5fMcYS6YKQRGGZTfkvO+7PgxtLH3Wdy6SsNULhKR3UDKWcojeJxa43
UVSxxNzojiaxtk1dXiaFo1tn9dbC+MmtHHrmvuSOwZFisZJjg2lvNpDvbP0IdEKg
lNZ/GtwBnOi/lKzLLycSzMzTYaEbSJwF0Aq73Vbc1+rdvme2NDgA9PUwjlBv/fHm
lKMvi/88dkcf9Q==
-----END CERTIFICATE-----