Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/98d036-8260-46d0-99fa-fd915cc7c0d2/1/1-H1MaLeiVP2fduOJTeLU62D3OnA.mft
File:                     1-H1MaLeiVP2fduOJTeLU62D3OnA.mft (raw, json)
Hash identifier:          LkRhp9TSEc1Ck8HuB3R2AgjHrtmxbZi5PdnPQCJJIBo=
Subject key identifier:   D3:CB:B9:16:51:9E:F9:70:BB:FB:3A:C4:98:0D:6D:3B:CC:41:4C:06
Authority key identifier: F8:7D:4C:68:B7:A2:54:FD:9F:76:E3:89:4D:E2:D4:EB:60:F7:3A:70
Certificate issuer:       /CN=f87d4c68b7a254fd9f76e3894de2d4eb60f73a70
Certificate serial:       01849DF39881BD2EDD76B36BF4A39608073D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-H1MaLeiVP2fduOJTeLU62D3OnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/98d036-8260-46d0-99fa-fd915cc7c0d2/1/1-H1MaLeiVP2fduOJTeLU62D3OnA.mft
Manifest number:          0202
Signing time:             Tue 22 Nov 2022 06:08:17 +0000
Manifest this update:     Tue 22 Nov 2022 06:08:17 +0000
Manifest next update:     Wed 23 Nov 2022 06:08:17 +0000
Files and hashes:         1: 1-H1MaLeiVP2fduOJTeLU62D3OnA.crl (hash: LB9Uino1DE/JoO91KQCqvELagHA6kWGWIMPULLMmT2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:9d:f3:98:81:bd:2e:dd:76:b3:6b:f4:a3:96:08:07:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87d4c68b7a254fd9f76e3894de2d4eb60f73a70
        Validity
            Not Before: Nov 22 06:08:17 2022 GMT
            Not After : Nov 23 06:08:17 2022 GMT
        Subject: CN=d3cbb916519ef970bbfb3ac4980d6d3bcc414c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:c9:bb:f3:2c:2e:11:16:20:07:f3:47:d1:
                    d0:27:ba:ca:c4:15:fd:41:b3:5d:05:3e:a3:9f:44:
                    4f:1f:8c:be:0f:bb:b6:9f:e4:d0:b1:a9:13:4b:c2:
                    e8:15:4d:9b:83:d8:c2:36:10:fd:8c:27:30:9c:a5:
                    0a:ed:62:74:24:70:a8:45:93:3b:93:eb:a2:6a:47:
                    8e:c6:c1:aa:09:6f:30:ac:12:f0:d2:f3:83:13:ed:
                    60:21:79:1d:90:f4:d2:5d:48:d3:45:5f:fe:c4:0a:
                    e7:c4:da:3d:16:fd:b9:02:4f:92:59:cb:fa:eb:e5:
                    ce:17:43:5d:45:5a:cf:0d:38:59:59:42:2b:9d:8f:
                    4e:fe:b2:4c:04:e4:32:80:77:50:e9:cf:b7:a7:48:
                    6e:6c:a4:8e:db:d5:d4:ea:e8:ff:56:88:8c:03:99:
                    74:b5:35:3b:1f:45:75:b2:33:5a:2d:5b:05:fa:09:
                    19:9f:21:9a:ea:b4:e7:4d:8e:96:82:bc:a9:af:24:
                    2a:02:0a:f4:98:18:1f:fd:ef:a5:c5:02:2f:36:df:
                    66:ff:d1:02:7c:c5:ab:6b:cb:73:58:a1:65:6a:81:
                    d2:4a:b0:63:22:e4:4c:18:84:72:19:bd:78:d6:95:
                    8e:3c:6c:a5:86:e0:4d:36:20:9f:c0:07:d8:15:0c:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CB:B9:16:51:9E:F9:70:BB:FB:3A:C4:98:0D:6D:3B:CC:41:4C:06
            X509v3 Authority Key Identifier:
                keyid:F8:7D:4C:68:B7:A2:54:FD:9F:76:E3:89:4D:E2:D4:EB:60:F7:3A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-H1MaLeiVP2fduOJTeLU62D3OnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/98d036-8260-46d0-99fa-fd915cc7c0d2/1/1-H1MaLeiVP2fduOJTeLU62D3OnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/98d036-8260-46d0-99fa-fd915cc7c0d2/1/1-H1MaLeiVP2fduOJTeLU62D3OnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:62:40:84:49:98:d2:2a:65:84:36:f4:ab:d8:df:c5:40:99:
         32:9d:6c:99:26:df:34:54:ef:a0:8e:51:67:2f:8e:26:b0:29:
         b7:81:84:c9:f6:f8:54:37:5a:69:69:c4:bc:bf:94:fa:ae:ce:
         bf:81:90:71:b9:e1:71:f8:ea:6e:99:ce:03:16:5c:3b:18:f3:
         de:58:67:85:0b:9d:1d:79:26:62:51:a1:a6:65:9c:42:85:b6:
         0f:b4:5a:b1:08:36:46:c5:f0:ba:c4:da:33:2e:98:1c:3e:d2:
         6b:31:aa:f8:cd:12:fe:f6:d6:3a:b8:16:e3:cc:bb:32:7c:57:
         51:c2:87:45:cd:8a:0a:12:80:b1:0c:4e:1d:d9:50:70:d0:d7:
         06:16:1f:83:23:82:bf:c5:66:c7:3b:52:dd:5a:85:c9:52:34:
         77:e7:90:f3:2d:b5:29:f0:6b:eb:c2:1d:54:58:2b:d2:c1:cf:
         63:dc:dd:d7:a4:04:3d:c1:a6:9c:df:a2:f6:7a:51:89:72:04:
         31:dc:30:22:56:ac:f8:63:61:a1:7d:85:2a:fe:e8:c0:18:b2:
         79:e8:ac:b8:f8:a1:7d:df:0d:5c:83:3b:cb:07:79:ff:22:0f:
         a2:5e:c7:fb:16:ef:41:ba:be:f8:00:45:bd:33:81:ce:ec:01:
         e5:66:d7:92
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYSd85iBvS7ddrNr9KOWCAc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4N2Q0YzY4YjdhMjU0ZmQ5Zjc2ZTM4OTRkZTJkNGViNjBm
NzNhNzAwHhcNMjIxMTIyMDYwODE3WhcNMjIxMTIzMDYwODE3WjAzMTEwLwYDVQQD
EyhkM2NiYjkxNjUxOWVmOTcwYmJmYjNhYzQ5ODBkNmQzYmNjNDE0YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1bJu/MsLhEWIAfzR9HQJ7rKxBX9
QbNdBT6jn0RPH4y+D7u2n+TQsakTS8LoFU2bg9jCNhD9jCcwnKUK7WJ0JHCoRZM7
k+uiakeOxsGqCW8wrBLw0vODE+1gIXkdkPTSXUjTRV/+xArnxNo9Fv25Ak+SWcv6
6+XOF0NdRVrPDThZWUIrnY9O/rJMBOQygHdQ6c+3p0hubKSO29XU6uj/VoiMA5l0
tTU7H0V1sjNaLVsF+gkZnyGa6rTnTY6WgrypryQqAgr0mBgf/e+lxQIvNt9m/9EC
fMWra8tzWKFlaoHSSrBjIuRMGIRyGb141pWOPGylhuBNNiCfwAfYFQxWQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNPLuRZRnvlwu/s6xJgNbTvMQUwGMB8GA1UdIwQY
MBaAFPh9TGi3olT9n3bjiU3i1Otg9zpwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IMU1hTGVpVlAyZmR1T0pUZUxVNjJEM09uQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvOThkMDM2LTgyNjAtNDZkMC05OWZh
LWZkOTE1Y2M3YzBkMi8xLzEtSDFNYUxlaVZQMmZkdU9KVGVMVTYyRDNPbkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg3Lzk4ZDAzNi04MjYwLTQ2ZDAtOTlmYS1mZDkxNWNjN2Mw
ZDIvMS8xLUgxTWFMZWlWUDJmZHVPSlRlTFU2MkQzT25BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxWJA
hEmY0iplhDb0q9jfxUCZMp1smSbfNFTvoI5RZy+OJrApt4GEyfb4VDdaaWnEvL+U
+q7Ov4GQcbnhcfjqbpnOAxZcOxjz3lhnhQudHXkmYlGhpmWcQoW2D7RasQg2RsXw
usTaMy6YHD7SazGq+M0S/vbWOrgW48y7MnxXUcKHRc2KChKAsQxOHdlQcNDXBhYf
gyOCv8VmxztS3VqFyVI0d+eQ8y21KfBr68IdVFgr0sHPY9zd16QEPcGmnN+i9npR
iXIEMdwwIlas+GNhoX2FKv7owBiyeeisuPihfd8NXIM7ywd5/yIPol7H+xbvQbq+
+ABFvTOBzuwB5WbXkg==
-----END CERTIFICATE-----