Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1ab21-6132-41dc-be8d-8504021d7e04/1/De-9TgBsF17-1lAqQ6rO7b9ekIQ.mft
File:                     De-9TgBsF17-1lAqQ6rO7b9ekIQ.mft (raw, json)
Hash identifier:          +I1gXBGCrtcLTVa5wixjPZxcpfz6YJCLytYNK4nZNOE=
Subject key identifier:   47:C0:EF:4C:99:03:4E:D9:81:FF:6E:94:2A:3E:CC:5E:C0:FE:3C:34
Authority key identifier: 0D:EF:BD:4E:00:6C:17:5E:FE:D6:50:2A:43:AA:CE:ED:BF:5E:90:84
Certificate issuer:       /CN=0defbd4e006c175efed6502a43aaceedbf5e9084
Certificate serial:       0182EE8FDAF05F4665FE65AC2FED819E3832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/De-9TgBsF17-1lAqQ6rO7b9ekIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a1ab21-6132-41dc-be8d-8504021d7e04/1/De-9TgBsF17-1lAqQ6rO7b9ekIQ.mft
Manifest number:          02
Signing time:             Tue 30 Aug 2022 11:43:01 +0000
Manifest this update:     Tue 30 Aug 2022 11:43:01 +0000
Manifest next update:     Wed 31 Aug 2022 11:43:01 +0000
Files and hashes:         1: De-9TgBsF17-1lAqQ6rO7b9ekIQ.crl (hash: WngntYpuJJlqzmLHQtaMnu1IYWInPXwAzcxJvg7MftA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ee:8f:da:f0:5f:46:65:fe:65:ac:2f:ed:81:9e:38:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0defbd4e006c175efed6502a43aaceedbf5e9084
        Validity
            Not Before: Aug 30 11:43:01 2022 GMT
            Not After : Aug 31 11:43:01 2022 GMT
        Subject: CN=47c0ef4c99034ed981ff6e942a3ecc5ec0fe3c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:97:25:c9:f2:8b:c6:01:06:f9:38:83:f4:a6:
                    9b:24:d1:60:f8:d5:65:db:2b:7d:5f:ab:f3:bc:97:
                    42:52:c6:ea:db:e2:d1:48:e0:0c:af:59:2c:64:55:
                    fc:56:5c:60:56:32:00:19:db:1e:14:1b:10:0e:33:
                    e7:0e:86:d0:89:74:44:07:77:05:d5:c6:9d:e4:72:
                    43:75:92:a8:46:d7:ec:c6:89:b1:b1:f9:49:e0:bb:
                    c0:3b:68:77:47:70:76:bf:5b:68:5f:78:01:f9:61:
                    ce:41:13:32:ca:71:2d:44:10:47:a3:34:46:7a:2c:
                    5c:71:9d:b3:57:7a:8e:dc:81:ac:6d:16:84:76:e6:
                    57:df:d6:e9:58:6e:ff:35:08:b8:c9:e9:a4:d8:13:
                    97:8b:a4:82:2c:6b:46:d2:72:2f:16:df:d0:fa:ed:
                    ee:dd:20:b0:51:b8:69:1b:aa:c2:f7:f0:c1:88:dc:
                    2e:9f:ea:5d:57:84:87:55:f5:70:00:b8:32:f7:0b:
                    61:64:81:13:0b:1a:e9:2c:48:6a:05:e0:f0:4c:c6:
                    60:0e:f5:00:a8:e5:84:d8:fa:f9:b2:0b:17:cd:af:
                    4d:b5:5b:ee:c5:98:5a:64:d3:30:55:98:c7:16:b6:
                    97:81:29:d7:07:b9:cd:ec:19:50:44:b4:81:d0:fb:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C0:EF:4C:99:03:4E:D9:81:FF:6E:94:2A:3E:CC:5E:C0:FE:3C:34
            X509v3 Authority Key Identifier:
                keyid:0D:EF:BD:4E:00:6C:17:5E:FE:D6:50:2A:43:AA:CE:ED:BF:5E:90:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-9TgBsF17-1lAqQ6rO7b9ekIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1ab21-6132-41dc-be8d-8504021d7e04/1/De-9TgBsF17-1lAqQ6rO7b9ekIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1ab21-6132-41dc-be8d-8504021d7e04/1/De-9TgBsF17-1lAqQ6rO7b9ekIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:8f:76:96:c4:39:74:be:c0:7d:6d:dd:ff:b1:07:8f:a5:
         9f:91:63:83:c1:ae:68:12:c5:9e:e9:63:98:d6:d8:f0:44:aa:
         48:22:b4:d0:76:ec:6f:f2:7c:88:2e:d8:09:e0:7f:40:e2:e5:
         b6:0a:17:a3:43:d4:7d:55:88:43:50:a7:26:1f:0f:22:51:d7:
         08:7d:14:d8:c8:08:0a:cc:4a:fb:42:5a:d4:1c:b1:5e:d2:19:
         57:53:7e:fa:9c:64:77:08:7d:06:0f:dc:b3:24:70:48:cb:e3:
         12:16:05:77:51:76:96:10:94:8a:b3:c4:b6:3d:0d:3e:cc:bf:
         f1:7e:f1:ce:e2:19:24:6a:91:df:aa:8e:58:e4:b7:c5:89:32:
         bd:c4:87:84:19:03:fb:82:ed:9c:ee:3c:eb:a3:c4:d9:74:46:
         d8:18:63:f4:e2:a0:46:d5:4f:83:2b:d2:6b:84:64:5d:ec:66:
         a5:00:be:b0:39:4c:78:8c:74:99:72:e7:66:f6:a5:eb:e6:48:
         3e:3d:c9:b5:18:c3:36:1c:db:d3:6b:7e:1b:73:c5:23:9c:b4:
         da:7a:5e:11:7b:59:60:9f:38:f5:12:b6:21:0b:e1:a9:91:e6:
         80:16:7a:36:6e:20:5a:79:6d:18:4a:11:1a:7b:79:04:36:1b:
         cf:c9:f6:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYLuj9rwX0Zl/mWsL+2BnjgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZWZiZDRlMDA2YzE3NWVmZWQ2NTAyYTQzYWFjZWVkYmY1
ZTkwODQwHhcNMjIwODMwMTE0MzAxWhcNMjIwODMxMTE0MzAxWjAzMTEwLwYDVQQD
Eyg0N2MwZWY0Yzk5MDM0ZWQ5ODFmZjZlOTQyYTNlY2M1ZWMwZmUzYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JclyfKLxgEG+TiD9KabJNFg+NVl
2yt9X6vzvJdCUsbq2+LRSOAMr1ksZFX8VlxgVjIAGdseFBsQDjPnDobQiXREB3cF
1cad5HJDdZKoRtfsxomxsflJ4LvAO2h3R3B2v1toX3gB+WHOQRMyynEtRBBHozRG
eixccZ2zV3qO3IGsbRaEduZX39bpWG7/NQi4yemk2BOXi6SCLGtG0nIvFt/Q+u3u
3SCwUbhpG6rC9/DBiNwun+pdV4SHVfVwALgy9wthZIETCxrpLEhqBeDwTMZgDvUA
qOWE2Pr5sgsXza9NtVvuxZhaZNMwVZjHFraXgSnXB7nN7BlQRLSB0Pu7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfA70yZA07Zgf9ulCo+zF7A/jw0MB8GA1UdIwQY
MBaAFA3vvU4AbBde/tZQKkOqzu2/XpCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGUtOVRnQnNGMTctMWxBcVE2ck83Yjlla0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hMWFiMjEtNjEzMi00MWRjLWJlOGQt
ODUwNDAyMWQ3ZTA0LzEvRGUtOVRnQnNGMTctMWxBcVE2ck83Yjlla0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hMWFiMjEtNjEzMi00MWRjLWJlOGQtODUwNDAyMWQ3ZTA0
LzEvRGUtOVRnQnNGMTctMWxBcVE2ck83Yjlla0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpWPdpbE
OXS+wH1t3f+xB4+ln5Fjg8GuaBLFnuljmNbY8ESqSCK00Hbsb/J8iC7YCeB/QOLl
tgoXo0PUfVWIQ1CnJh8PIlHXCH0U2MgICsxK+0Ja1ByxXtIZV1N++pxkdwh9Bg/c
syRwSMvjEhYFd1F2lhCUirPEtj0NPsy/8X7xzuIZJGqR36qOWOS3xYkyvcSHhBkD
+4LtnO4866PE2XRG2Bhj9OKgRtVPgyvSa4RkXexmpQC+sDlMeIx0mXLnZval6+ZI
Pj3JtRjDNhzb02t+G3PFI5y02npeEXtZYJ849RK2IQvhqZHmgBZ6Nm4gWnltGEoR
Gnt5BDYbz8n2Mw==
-----END CERTIFICATE-----