Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/274545-eabb-47ec-8606-b9008e9467e2/1/3pGXzdXFKIdELVAGJLfuHK_STew.mft
File:                     3pGXzdXFKIdELVAGJLfuHK_STew.mft (raw, json)
Hash identifier:          teCQ2Y3pU7Q2tOGwVWHVZb5+6MoVS7isYm2LiXeXyKI=
Subject key identifier:   7A:C4:34:CF:80:8C:D3:F0:4F:0C:D6:44:11:7D:3B:52:D7:AA:5E:A6
Authority key identifier: DE:91:97:CD:D5:C5:28:87:44:2D:50:06:24:B7:EE:1C:AF:D2:4D:EC
Certificate issuer:       /CN=de9197cdd5c52887442d500624b7ee1cafd24dec
Certificate serial:       0188B34D0B95695F5E19A791D55CCCA09722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pGXzdXFKIdELVAGJLfuHK_STew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/274545-eabb-47ec-8606-b9008e9467e2/1/3pGXzdXFKIdELVAGJLfuHK_STew.mft
Manifest number:          04D3
Signing time:             Tue 13 Jun 2023 05:49:10 +0000
Manifest this update:     Tue 13 Jun 2023 05:49:10 +0000
Manifest next update:     Wed 14 Jun 2023 05:49:10 +0000
Files and hashes:         1: 3pGXzdXFKIdELVAGJLfuHK_STew.crl (hash: VO0XPzhxcn1wC5de6A4EtVpEXYFADhQ98fbbawcZ2OU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b3:4d:0b:95:69:5f:5e:19:a7:91:d5:5c:cc:a0:97:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9197cdd5c52887442d500624b7ee1cafd24dec
        Validity
            Not Before: Jun 13 05:49:10 2023 GMT
            Not After : Jun 14 05:49:10 2023 GMT
        Subject: CN=7ac434cf808cd3f04f0cd644117d3b52d7aa5ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:58:af:9c:57:ae:8f:73:9b:d5:cd:1e:dd:00:
                    8e:75:d0:93:66:45:78:4f:db:13:aa:5a:a7:ab:12:
                    cf:70:24:73:8a:a0:e7:5b:c4:41:73:75:3d:26:b3:
                    f3:3a:58:86:20:e8:12:3b:cc:03:c7:2e:1b:c2:47:
                    39:c1:8e:25:13:fc:e9:1a:71:84:07:b8:20:dd:5f:
                    1f:94:b0:f7:f4:34:03:6e:5e:d7:d2:17:1c:7e:ef:
                    9a:f1:92:ee:8f:22:c4:1d:50:f7:c8:0f:f7:7e:e4:
                    20:55:bc:51:72:0f:5d:0a:4b:6e:88:68:a9:0a:ee:
                    e5:67:46:03:6e:0d:54:b2:4c:a1:1e:60:ce:b7:46:
                    55:a2:15:69:81:f6:f2:a6:9a:c5:a8:82:cb:21:7d:
                    4c:89:2e:82:1b:c4:58:9f:7b:d7:96:e0:ea:34:4f:
                    ab:47:11:ea:94:4f:f7:63:73:12:88:da:50:5c:ab:
                    c8:e8:37:a1:55:ce:91:86:17:dc:51:2d:89:91:b6:
                    4e:04:2b:33:3d:6e:5c:a3:72:70:29:43:a2:30:80:
                    3d:b4:2e:ac:89:92:f5:a5:06:5b:2f:a5:78:22:af:
                    89:e2:ed:b2:f9:ca:47:fd:58:03:f2:7b:59:b0:cb:
                    09:0a:4b:cf:9d:18:9c:88:df:4a:96:66:67:71:b4:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:34:CF:80:8C:D3:F0:4F:0C:D6:44:11:7D:3B:52:D7:AA:5E:A6
            X509v3 Authority Key Identifier:
                keyid:DE:91:97:CD:D5:C5:28:87:44:2D:50:06:24:B7:EE:1C:AF:D2:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pGXzdXFKIdELVAGJLfuHK_STew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/274545-eabb-47ec-8606-b9008e9467e2/1/3pGXzdXFKIdELVAGJLfuHK_STew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/274545-eabb-47ec-8606-b9008e9467e2/1/3pGXzdXFKIdELVAGJLfuHK_STew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8b:78:0a:08:81:4e:b1:c3:90:1e:ff:04:9e:11:f2:b4:f7:
         17:fa:00:04:ee:cc:0c:72:22:94:ac:10:8b:a1:3d:a0:69:a2:
         c0:6c:90:78:1a:ef:c2:6e:35:35:34:88:72:81:3d:0b:00:d7:
         4c:53:ee:ca:ae:0a:cf:be:41:78:18:44:7a:79:35:96:0d:15:
         44:2d:fe:50:12:f6:1f:df:f4:b1:11:d0:a7:84:61:3c:c8:39:
         75:fc:c9:09:0f:ad:fc:25:c4:5a:90:cc:2f:b7:b6:d4:15:a8:
         96:91:f0:08:29:a9:07:4d:12:9f:a2:c6:93:b6:66:cf:56:23:
         e1:6b:0c:5a:e3:33:41:62:3e:a2:9b:fd:68:a5:a0:f4:5d:19:
         7c:7b:8b:e5:b9:b0:fd:aa:6a:a2:e0:4c:3e:a2:59:47:aa:c8:
         99:48:e4:af:04:ea:71:ba:5d:7a:b5:ce:09:89:e6:2c:ab:69:
         e5:ba:4c:e9:e8:0c:b1:0e:88:0c:75:3c:d7:90:90:41:0a:f5:
         67:2a:f0:7f:38:10:91:cf:a6:20:ef:0a:4c:14:23:f0:34:17:
         ac:f0:1d:d0:8b:7a:38:11:7e:97:91:45:37:b6:57:02:86:e5:
         72:81:05:d5:11:af:c1:8a:fa:fa:35:45:9f:e6:80:be:18:2c:
         57:3c:d6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYizTQuVaV9eGaeR1VzMoJciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTE5N2NkZDVjNTI4ODc0NDJkNTAwNjI0YjdlZTFjYWZk
MjRkZWMwHhcNMjMwNjEzMDU0OTEwWhcNMjMwNjE0MDU0OTEwWjAzMTEwLwYDVQQD
Eyg3YWM0MzRjZjgwOGNkM2YwNGYwY2Q2NDQxMTdkM2I1MmQ3YWE1ZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1ivnFeuj3Ob1c0e3QCOddCTZkV4
T9sTqlqnqxLPcCRziqDnW8RBc3U9JrPzOliGIOgSO8wDxy4bwkc5wY4lE/zpGnGE
B7gg3V8flLD39DQDbl7X0hccfu+a8ZLujyLEHVD3yA/3fuQgVbxRcg9dCktuiGip
Cu7lZ0YDbg1UskyhHmDOt0ZVohVpgfbypprFqILLIX1MiS6CG8RYn3vXluDqNE+r
RxHqlE/3Y3MSiNpQXKvI6DehVc6RhhfcUS2JkbZOBCszPW5co3JwKUOiMIA9tC6s
iZL1pQZbL6V4Iq+J4u2y+cpH/VgD8ntZsMsJCkvPnRiciN9KlmZncbQsoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrENM+AjNPwTwzWRBF9O1LXql6mMB8GA1UdIwQY
MBaAFN6Rl83VxSiHRC1QBiS37hyv0k3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BHWHpkWEZLSWRFTFZBR0pMZnVIS19TVGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yNzQ1NDUtZWFiYi00N2VjLTg2MDYt
YjkwMDhlOTQ2N2UyLzEvM3BHWHpkWEZLSWRFTFZBR0pMZnVIS19TVGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yNzQ1NDUtZWFiYi00N2VjLTg2MDYtYjkwMDhlOTQ2N2Uy
LzEvM3BHWHpkWEZLSWRFTFZBR0pMZnVIS19TVGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoot4CgiB
TrHDkB7/BJ4R8rT3F/oABO7MDHIilKwQi6E9oGmiwGyQeBrvwm41NTSIcoE9CwDX
TFPuyq4Kz75BeBhEenk1lg0VRC3+UBL2H9/0sRHQp4RhPMg5dfzJCQ+t/CXEWpDM
L7e21BWolpHwCCmpB00Sn6LGk7Zmz1Yj4WsMWuMzQWI+opv9aKWg9F0ZfHuL5bmw
/apqouBMPqJZR6rImUjkrwTqcbpderXOCYnmLKtp5bpM6egMsQ6IDHU815CQQQr1
ZyrwfzgQkc+mIO8KTBQj8DQXrPAd0It6OBF+l5FFN7ZXAoblcoEF1RGvwYr6+jVF
n+aAvhgsVzzWMQ==
-----END CERTIFICATE-----