Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/17a1eb-123d-4ca6-85b7-fbbcb6a21f30/1/1-i8TqeS3m5ODCapMozaTTHc2SXk.mft
File:                     1-i8TqeS3m5ODCapMozaTTHc2SXk.mft (raw, json)
Hash identifier:          IcW0w4ZotC4DPPAdOqqdnEpWKQfRuXvhg6bpDfG2C18=
Subject key identifier:   0C:53:BA:83:B1:96:F5:B7:EA:FB:19:8C:C9:57:59:BA:7E:46:30:61
Authority key identifier: FA:2F:13:A9:E4:B7:9B:93:83:09:AA:4C:A3:36:93:4C:77:36:49:79
Certificate issuer:       /CN=fa2f13a9e4b79b938309aa4ca336934c77364979
Certificate serial:       06373DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i8TqeS3m5ODCapMozaTTHc2SXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/17a1eb-123d-4ca6-85b7-fbbcb6a21f30/1/1-i8TqeS3m5ODCapMozaTTHc2SXk.mft
Manifest number:          083C
Signing time:             Fri 29 Apr 2022 06:01:00 +0000
Manifest this update:     Fri 29 Apr 2022 06:01:00 +0000
Manifest next update:     Sat 30 Apr 2022 06:01:00 +0000
Files and hashes:         1: 1-i8TqeS3m5ODCapMozaTTHc2SXk.crl (hash: fbDzUYq4xm5QeDKfY0HCynQvhtNkQQbmiuYL/4snMcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104283585 (0x6373dc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2f13a9e4b79b938309aa4ca336934c77364979
        Validity
            Not Before: Apr 29 06:01:00 2022 GMT
            Not After : Apr 30 06:01:00 2022 GMT
        Subject: CN=0c53ba83b196f5b7eafb198cc95759ba7e463061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:02:1b:7d:50:fd:f2:ca:30:68:62:58:25:
                    28:c2:ff:c5:1e:93:0d:d3:22:34:06:b9:48:08:50:
                    dd:c1:cf:e4:e2:51:c9:7c:44:01:3b:7c:6b:f7:4a:
                    65:ec:87:e7:36:69:2d:f0:60:64:69:8f:5f:0b:9f:
                    c2:ad:3d:cc:b5:bc:28:48:2c:13:33:19:f3:9a:42:
                    ab:e6:85:12:4e:43:c1:62:0c:3b:67:33:f7:d2:3b:
                    d9:95:5b:21:18:0b:7e:83:56:15:c5:d5:50:3c:d2:
                    86:01:38:4d:ed:c9:73:88:a9:c9:cd:cc:59:da:ac:
                    44:ed:0f:6b:55:cd:d2:18:5c:b5:15:67:86:6b:c0:
                    4c:b1:cb:7c:a6:9e:fd:15:0f:a6:64:b3:6f:c2:fb:
                    a3:3a:ac:ad:b2:bb:e4:0e:83:8e:36:eb:a4:84:dc:
                    4d:09:c9:0a:c6:1b:06:80:cb:d1:1c:29:b3:46:94:
                    66:bb:b1:b6:2f:d1:cb:83:5a:81:35:a9:fb:40:76:
                    36:6d:c4:98:5c:96:6c:a4:97:71:2c:e0:b1:dd:d1:
                    dd:90:b0:2d:5c:25:11:92:66:79:f4:f1:da:a7:9b:
                    67:cb:63:07:4d:b8:ae:6a:45:3d:55:d9:e5:1f:5a:
                    97:ca:ce:71:ec:ab:8d:6d:a0:02:43:38:da:63:5f:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:53:BA:83:B1:96:F5:B7:EA:FB:19:8C:C9:57:59:BA:7E:46:30:61
            X509v3 Authority Key Identifier:
                keyid:FA:2F:13:A9:E4:B7:9B:93:83:09:AA:4C:A3:36:93:4C:77:36:49:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i8TqeS3m5ODCapMozaTTHc2SXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/17a1eb-123d-4ca6-85b7-fbbcb6a21f30/1/1-i8TqeS3m5ODCapMozaTTHc2SXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/17a1eb-123d-4ca6-85b7-fbbcb6a21f30/1/1-i8TqeS3m5ODCapMozaTTHc2SXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:92:d1:38:f0:b5:08:b1:9d:93:e7:7f:64:72:57:8d:bb:c1:
         8e:0b:46:42:d0:d3:5a:af:be:70:73:26:46:01:ba:dc:7f:59:
         05:9e:3b:e2:80:aa:87:82:16:08:50:9c:06:fb:00:e1:5c:5b:
         48:e7:fd:11:13:fe:f2:be:8b:60:d5:9f:16:a9:3d:27:e4:b0:
         72:f4:87:b1:e6:d5:02:6f:78:9c:16:c6:16:70:91:15:6a:bf:
         3d:bf:b8:4f:35:54:fb:40:e8:89:87:be:d5:85:b7:fb:80:54:
         ba:fe:28:cd:9e:07:b1:9a:e2:5e:68:a6:0a:1c:44:94:c4:0a:
         6f:04:b9:92:d9:06:93:7e:2d:a0:c8:be:6b:91:30:6b:2b:80:
         90:3d:e7:ad:99:ec:a9:dd:cb:3d:56:f8:91:87:8d:81:e2:34:
         88:f6:5c:38:ae:ce:12:ba:dd:a9:28:e0:a7:90:41:67:07:d3:
         8f:10:eb:8b:6b:a3:66:37:c8:76:5e:81:33:b0:ac:dd:39:68:
         62:a7:11:81:06:de:87:33:61:5c:d9:76:b2:65:4c:9c:b9:8b:
         53:c3:52:98:3b:43:91:ee:52:e1:5f:e1:72:6c:28:3b:0e:38:
         2b:d6:ef:ec:a9:cf:42:2a:b3:84:c9:73:45:e9:66:71:ae:d7:
         3b:89:75:6f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIEBjc9wTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YTJmMTNhOWU0Yjc5YjkzODMwOWFhNGNhMzM2OTM0Yzc3MzY0OTc5MB4XDTIyMDQy
OTA2MDEwMFoXDTIyMDQzMDA2MDEwMFowMzExMC8GA1UEAxMoMGM1M2JhODNiMTk2
ZjViN2VhZmIxOThjYzk1NzU5YmE3ZTQ2MzA2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAItSAht9UP3yyjBoYlglKML/xR6TDdMiNAa5SAhQ3cHP5OJR
yXxEATt8a/dKZeyH5zZpLfBgZGmPXwufwq09zLW8KEgsEzMZ85pCq+aFEk5DwWIM
O2cz99I72ZVbIRgLfoNWFcXVUDzShgE4Te3Jc4ipyc3MWdqsRO0Pa1XN0hhctRVn
hmvATLHLfKae/RUPpmSzb8L7ozqsrbK75A6DjjbrpITcTQnJCsYbBoDL0Rwps0aU
Zruxti/Ry4NagTWp+0B2Nm3EmFyWbKSXcSzgsd3R3ZCwLVwlEZJmefTx2qebZ8tj
B024rmpFPVXZ5R9al8rOceyrjW2gAkM42mNf+H0CAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBQMU7qDsZb1t+r7GYzJV1m6fkYwYTAfBgNVHSMEGDAWgBT6LxOp5Lebk4MJ
qkyjNpNMdzZJeTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtaThUcWVTM201T0RDYXBNb3phVFRIYzJTWGsuY2VyMIGOBggrBgEFBQcBCwSB
gTB/MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzk0LzE3YTFlYi0xMjNkLTRjYTYtODViNy1mYmJjYjZhMjFmMzAv
MS8xLWk4VHFlUzNtNU9EQ2FwTW96YVRUSGMyU1hrLm1mdDCBggYDVR0fBHsweTB3
oHWgc4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85
NC8xN2ExZWItMTIzZC00Y2E2LTg1YjctZmJiY2I2YTIxZjMwLzEvMS1pOFRxZVMz
bTVPRENhcE1vemFUVEhjMlNYay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKuS0TjwtQixnZPnf2RyV427
wY4LRkLQ01qvvnBzJkYButx/WQWeO+KAqoeCFghQnAb7AOFcW0jn/RET/vK+i2DV
nxapPSfksHL0h7Hm1QJveJwWxhZwkRVqvz2/uE81VPtA6ImHvtWFt/uAVLr+KM2e
B7Ga4l5opgocRJTECm8EuZLZBpN+LaDIvmuRMGsrgJA9562Z7Kndyz1W+JGHjYHi
NIj2XDiuzhK63ako4KeQQWcH048Q64tro2Y3yHZegTOwrN05aGKnEYEG3oczYVzZ
drJlTJy5i1PDUpg7Q5HuUuFf4XJsKDsOOCvW7+ypz0Iqs4TJc0XpZnGu1zuJdW8=
-----END CERTIFICATE-----