Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/875466-2c90-43fe-86fc-c5109c57ed23/1/XAv2kp1n9wbekm4qFJdC-6PjZ0M.mft
File:                     XAv2kp1n9wbekm4qFJdC-6PjZ0M.mft (raw, json)
Hash identifier:          L47MxnCOhkgyrbjLuvnSyJEOqxpCPWee27bYHdmVkMU=
Subject key identifier:   1A:06:91:BC:3C:24:02:67:A2:C4:C8:96:A5:96:93:EA:DA:3D:23:99
Authority key identifier: 5C:0B:F6:92:9D:67:F7:06:DE:92:6E:2A:14:97:42:FB:A3:E3:67:43
Certificate issuer:       /CN=5c0bf6929d67f706de926e2a149742fba3e36743
Certificate serial:       0182E855BCE5BDBECB962988402F20D94E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XAv2kp1n9wbekm4qFJdC-6PjZ0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/875466-2c90-43fe-86fc-c5109c57ed23/1/XAv2kp1n9wbekm4qFJdC-6PjZ0M.mft
Manifest number:          67
Signing time:             Mon 29 Aug 2022 06:41:49 +0000
Manifest this update:     Mon 29 Aug 2022 06:41:49 +0000
Manifest next update:     Tue 30 Aug 2022 06:41:49 +0000
Files and hashes:         1: XAv2kp1n9wbekm4qFJdC-6PjZ0M.crl (hash: eYptCDh2wa4ZhwsBW5ICPWMn8Y9qvO+B9mZkeqzxI/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e8:55:bc:e5:bd:be:cb:96:29:88:40:2f:20:d9:4e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c0bf6929d67f706de926e2a149742fba3e36743
        Validity
            Not Before: Aug 29 06:41:49 2022 GMT
            Not After : Aug 30 06:41:49 2022 GMT
        Subject: CN=1a0691bc3c240267a2c4c896a59693eada3d2399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:d0:a9:66:c0:c8:fc:c1:e6:54:77:1c:63:
                    19:99:f1:f8:3c:11:ec:3c:75:52:32:b9:3a:fb:74:
                    4e:85:a6:9a:ea:e4:1b:16:1d:e2:cf:c2:e5:b3:c6:
                    ee:2a:ef:af:9d:05:6e:2b:d5:50:77:46:91:60:2c:
                    ec:fe:28:56:b2:f2:70:ea:24:00:94:9e:d3:76:99:
                    f0:1c:61:7d:af:e7:8c:a0:2d:c3:b5:52:ba:70:b9:
                    13:2b:02:d9:76:38:bc:4a:86:43:31:d1:52:85:14:
                    c1:b5:32:91:2f:99:56:53:66:98:c4:74:a6:03:4f:
                    d0:55:44:5c:d8:76:3e:8c:f6:a9:ae:10:7c:61:06:
                    3d:e7:c7:3b:a5:c6:dc:f8:e4:7d:53:5b:6b:96:17:
                    a9:d2:54:6b:33:2c:76:46:23:c5:d2:df:7b:40:6f:
                    4f:18:e0:55:ca:cf:a1:1d:c6:6f:91:10:9d:8a:d3:
                    29:ba:6b:6d:1d:5e:08:f8:c8:b5:f0:40:82:27:c8:
                    b9:93:37:3f:38:14:b0:90:5b:ae:31:98:cc:e0:2c:
                    f6:d3:66:e2:8e:ff:56:cc:4f:14:73:79:4f:34:81:
                    65:6b:1d:58:36:27:6a:fa:88:21:25:ae:80:20:07:
                    7e:18:bb:83:d5:54:82:65:0d:b5:f9:fb:fd:1b:23:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:06:91:BC:3C:24:02:67:A2:C4:C8:96:A5:96:93:EA:DA:3D:23:99
            X509v3 Authority Key Identifier:
                keyid:5C:0B:F6:92:9D:67:F7:06:DE:92:6E:2A:14:97:42:FB:A3:E3:67:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAv2kp1n9wbekm4qFJdC-6PjZ0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/875466-2c90-43fe-86fc-c5109c57ed23/1/XAv2kp1n9wbekm4qFJdC-6PjZ0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/875466-2c90-43fe-86fc-c5109c57ed23/1/XAv2kp1n9wbekm4qFJdC-6PjZ0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5a:ba:33:9a:66:60:53:9e:5a:ba:02:2b:53:8d:1d:12:5a:
         53:dd:5c:62:d2:e7:6d:f4:f8:73:14:17:45:40:06:b6:75:f4:
         cf:61:cb:49:85:38:01:e9:d4:76:d4:a9:5f:3c:63:74:f6:a6:
         c2:d6:a7:eb:1e:66:cb:60:75:eb:c4:fb:ea:0e:bc:85:7e:cd:
         45:c2:94:ac:4a:c2:8a:40:5d:73:a9:c8:f3:90:60:ea:8f:58:
         2c:db:45:b3:e8:57:23:08:cf:0f:86:91:df:a2:be:ca:57:4a:
         e1:95:9a:c1:d1:d5:bd:a0:b8:b3:84:15:cd:1d:95:5b:bc:8c:
         a9:27:9a:08:31:2d:87:b0:ae:9d:14:fb:6c:a0:78:19:3b:6d:
         08:df:3a:40:17:58:0c:f1:bd:5d:dd:36:74:20:4e:51:12:39:
         7a:7f:c1:f8:a4:de:cd:50:1d:aa:81:31:5a:ab:34:65:6c:01:
         9f:a6:39:01:4d:5d:79:54:57:11:e6:ca:15:51:e5:61:fb:23:
         b8:ec:1c:cf:47:85:8d:51:f4:b2:31:57:d1:45:06:a3:a7:58:
         d4:bf:c7:c8:2e:e8:ce:4b:a0:49:68:ef:2c:c7:92:a1:b2:92:
         ab:71:c2:67:98:23:be:e9:7d:d3:23:17:42:0a:81:f0:bb:3f:
         f0:92:af:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYLoVbzlvb7LlimIQC8g2U4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMGJmNjkyOWQ2N2Y3MDZkZTkyNmUyYTE0OTc0MmZiYTNl
MzY3NDMwHhcNMjIwODI5MDY0MTQ5WhcNMjIwODMwMDY0MTQ5WjAzMTEwLwYDVQQD
EygxYTA2OTFiYzNjMjQwMjY3YTJjNGM4OTZhNTk2OTNlYWRhM2QyMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia7QqWbAyPzB5lR3HGMZmfH4PBHs
PHVSMrk6+3ROhaaa6uQbFh3iz8Lls8buKu+vnQVuK9VQd0aRYCzs/ihWsvJw6iQA
lJ7TdpnwHGF9r+eMoC3DtVK6cLkTKwLZdji8SoZDMdFShRTBtTKRL5lWU2aYxHSm
A0/QVURc2HY+jPaprhB8YQY958c7pcbc+OR9U1trlhep0lRrMyx2RiPF0t97QG9P
GOBVys+hHcZvkRCditMpumttHV4I+Mi18ECCJ8i5kzc/OBSwkFuuMZjM4Cz202bi
jv9WzE8Uc3lPNIFlax1YNidq+oghJa6AIAd+GLuD1VSCZQ21+fv9GyNVHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoGkbw8JAJnosTIlqWWk+raPSOZMB8GA1UdIwQY
MBaAFFwL9pKdZ/cG3pJuKhSXQvuj42dDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEF2MmtwMW45d2Jla200cUZKZEMtNlBqWjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84NzU0NjYtMmM5MC00M2ZlLTg2ZmMt
YzUxMDljNTdlZDIzLzEvWEF2MmtwMW45d2Jla200cUZKZEMtNlBqWjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84NzU0NjYtMmM5MC00M2ZlLTg2ZmMtYzUxMDljNTdlZDIz
LzEvWEF2MmtwMW45d2Jla200cUZKZEMtNlBqWjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFq6M5pm
YFOeWroCK1ONHRJaU91cYtLnbfT4cxQXRUAGtnX0z2HLSYU4AenUdtSpXzxjdPam
wtan6x5my2B168T76g68hX7NRcKUrErCikBdc6nI85Bg6o9YLNtFs+hXIwjPD4aR
36K+yldK4ZWawdHVvaC4s4QVzR2VW7yMqSeaCDEth7CunRT7bKB4GTttCN86QBdY
DPG9Xd02dCBOURI5en/B+KTezVAdqoExWqs0ZWwBn6Y5AU1deVRXEebKFVHlYfsj
uOwcz0eFjVH0sjFX0UUGo6dY1L/HyC7ozkugSWjvLMeSobKSq3HCZ5gjvul90yMX
QgqB8Ls/8JKvZQ==
-----END CERTIFICATE-----