Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a72549-df5b-4659-adb1-a3e98f7c7802/1/6mbhlKlb6TmfahVgzVxgC9xQ5ck.mft
File:                     6mbhlKlb6TmfahVgzVxgC9xQ5ck.mft (raw, json)
Hash identifier:          yxZvL2oik8H+D9KItuWfM/9yAZWvraz1sfGfXgjhaWE=
Subject key identifier:   09:95:62:25:AD:F6:B8:DB:48:E2:8B:48:83:0E:57:9B:3D:40:60:A9
Authority key identifier: EA:66:E1:94:A9:5B:E9:39:9F:6A:15:60:CD:5C:60:0B:DC:50:E5:C9
Certificate issuer:       /CN=ea66e194a95be9399f6a1560cd5c600bdc50e5c9
Certificate serial:       0706FC49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mbhlKlb6TmfahVgzVxgC9xQ5ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a72549-df5b-4659-adb1-a3e98f7c7802/1/6mbhlKlb6TmfahVgzVxgC9xQ5ck.mft
Manifest number:          08B1
Signing time:             Tue 22 Mar 2022 06:50:18 +0000
Manifest this update:     Tue 22 Mar 2022 06:50:18 +0000
Manifest next update:     Wed 23 Mar 2022 06:50:18 +0000
Files and hashes:         1: 6mbhlKlb6TmfahVgzVxgC9xQ5ck.crl (hash: 0ZRmGkQEinuYB/mRKreEbDuOUv11lmBGQ1df/lQZlhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117898313 (0x706fc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea66e194a95be9399f6a1560cd5c600bdc50e5c9
        Validity
            Not Before: Mar 22 06:50:18 2022 GMT
            Not After : Mar 23 06:50:18 2022 GMT
        Subject: CN=09956225adf6b8db48e28b48830e579b3d4060a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:8b:2b:3e:66:1b:bb:f9:73:b4:01:04:e6:
                    3d:f3:58:a5:59:74:1e:f5:e3:77:1f:aa:1e:62:87:
                    9a:60:ee:18:9c:89:98:22:62:55:32:68:72:8e:c1:
                    bb:2f:5a:c9:4e:d2:86:99:4e:41:c9:88:c3:80:6b:
                    a2:eb:c2:c7:6c:54:b9:9c:05:db:ee:75:17:2d:aa:
                    31:48:66:1d:15:4c:f2:e4:c9:4e:be:22:c8:05:60:
                    90:04:4f:fa:21:7e:ac:ae:5d:d1:6a:4d:50:8a:42:
                    ab:88:ab:f3:96:b4:10:25:35:d4:7c:b8:cc:d5:0b:
                    dd:b8:73:41:ae:da:82:9f:07:4c:4c:65:d3:33:d7:
                    22:5b:08:b5:ce:53:a3:b0:83:f6:8e:be:12:07:4c:
                    8f:d6:d9:fe:c4:e3:c3:60:0f:5c:16:16:2a:60:1a:
                    4f:03:a0:c9:67:f4:98:95:87:73:36:4d:6e:dc:aa:
                    64:59:a6:e2:91:7b:d7:ee:a2:da:e2:ae:3c:5f:1c:
                    48:91:d9:ac:c1:1c:9a:a0:f1:13:fc:6e:ec:ad:75:
                    a0:9d:65:0f:0e:6b:9c:1b:6e:9e:de:66:23:8f:ba:
                    69:bc:0f:31:a1:5b:94:cd:0b:17:42:83:dd:b7:9d:
                    55:3c:fe:af:b6:cf:13:b0:bc:42:b2:60:bc:7d:70:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:95:62:25:AD:F6:B8:DB:48:E2:8B:48:83:0E:57:9B:3D:40:60:A9
            X509v3 Authority Key Identifier:
                keyid:EA:66:E1:94:A9:5B:E9:39:9F:6A:15:60:CD:5C:60:0B:DC:50:E5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mbhlKlb6TmfahVgzVxgC9xQ5ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a72549-df5b-4659-adb1-a3e98f7c7802/1/6mbhlKlb6TmfahVgzVxgC9xQ5ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a72549-df5b-4659-adb1-a3e98f7c7802/1/6mbhlKlb6TmfahVgzVxgC9xQ5ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:71:2b:80:09:96:0b:81:1e:ab:15:a1:6b:8a:c0:32:ea:
         6a:64:88:85:0b:19:33:05:13:53:f2:3c:2e:90:a3:c8:a9:43:
         b2:36:13:93:c5:3b:1e:41:c6:57:15:ac:cb:c9:35:8c:e4:cc:
         3a:c6:d3:cf:94:c7:3f:e4:75:4e:d8:ed:1d:76:e8:b1:0c:25:
         c0:11:21:b5:9c:d4:cf:90:cf:1a:cf:6f:72:2f:b7:01:cf:19:
         82:38:db:e1:97:14:44:15:ea:6d:29:b9:0d:33:d4:6e:69:af:
         a2:a9:5e:b2:9f:b6:36:e8:d3:dc:37:a2:a0:b0:46:d7:1d:d6:
         d1:17:96:5d:e4:62:58:25:3b:77:5a:18:5a:9a:64:be:a4:dd:
         ef:52:ce:89:1f:f5:4f:7a:c7:f0:ab:a9:9b:f8:ec:29:e1:5d:
         1d:30:bb:15:05:a9:19:fa:75:4a:89:8e:e9:b9:c3:9f:5a:4a:
         bc:04:ee:4a:9c:ef:fc:96:03:c4:fb:f2:b4:6e:dd:7c:d9:df:
         64:0e:0a:82:bc:a1:90:46:81:59:4c:22:83:9a:de:bb:ca:07:
         14:ec:f6:63:b2:c1:bc:97:06:8a:c0:15:46:61:2b:7d:cc:83:
         54:fe:5d:8d:91:bf:59:b6:88:89:03:a6:3a:68:cf:09:9e:ce:
         43:7f:f8:80
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBwb8STANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YTY2ZTE5NGE5NWJlOTM5OWY2YTE1NjBjZDVjNjAwYmRjNTBlNWM5MB4XDTIyMDMy
MjA2NTAxOFoXDTIyMDMyMzA2NTAxOFowMzExMC8GA1UEAxMoMDk5NTYyMjVhZGY2
YjhkYjQ4ZTI4YjQ4ODMwZTU3OWIzZDQwNjBhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIyEiys+Zhu7+XO0AQTmPfNYpVl0HvXjdx+qHmKHmmDuGJyJ
mCJiVTJoco7Buy9ayU7ShplOQcmIw4BrouvCx2xUuZwF2+51Fy2qMUhmHRVM8uTJ
Tr4iyAVgkARP+iF+rK5d0WpNUIpCq4ir85a0ECU11Hy4zNUL3bhzQa7agp8HTExl
0zPXIlsItc5To7CD9o6+EgdMj9bZ/sTjw2APXBYWKmAaTwOgyWf0mJWHczZNbtyq
ZFmm4pF71+6i2uKuPF8cSJHZrMEcmqDxE/xu7K11oJ1lDw5rnBtunt5mI4+6abwP
MaFblM0LF0KD3bedVTz+r7bPE7C8QrJgvH1wYG8CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQJlWIlrfa420jii0iDDlebPUBgqTAfBgNVHSMEGDAWgBTqZuGUqVvpOZ9q
FWDNXGAL3FDlyTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZtYmhsS2xiNlRtZmFoVmd6VnhnQzl4UTVjay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvYTcyNTQ5LWRmNWItNDY1OS1hZGIxLWEzZTk4ZjdjNzgwMi8x
LzZtYmhsS2xiNlRtZmFoVmd6VnhnQzl4UTVjay5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
YTcyNTQ5LWRmNWItNDY1OS1hZGIxLWEzZTk4ZjdjNzgwMi8xLzZtYmhsS2xiNlRt
ZmFoVmd6VnhnQzl4UTVjay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE8fcSuACZYLgR6rFaFrisAy6mpk
iIULGTMFE1PyPC6Qo8ipQ7I2E5PFOx5BxlcVrMvJNYzkzDrG08+Uxz/kdU7Y7R12
6LEMJcARIbWc1M+QzxrPb3IvtwHPGYI42+GXFEQV6m0puQ0z1G5pr6KpXrKftjbo
09w3oqCwRtcd1tEXll3kYlglO3daGFqaZL6k3e9Szokf9U96x/CrqZv47CnhXR0w
uxUFqRn6dUqJjum5w59aSrwE7kqc7/yWA8T78rRu3XzZ32QOCoK8oZBGgVlMIoOa
3rvKBxTs9mOywbyXBorAFUZhK33Mg1T+XY2Rv1m2iIkDpjpozwmezkN/+IA=
-----END CERTIFICATE-----