Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.mft
File:                     XNyNOwxhTdPD8OsWySe3ypiXFNI.mft (raw, json)
Hash identifier:          5qKTahr75lC+vyGemomYTt2c3ozpgSeZiUxHfqjkxT0=
Subject key identifier:   70:AD:A5:F9:52:41:F3:F3:4E:78:2B:F3:12:1E:32:4E:2D:C5:61:E5
Authority key identifier: 5C:DC:8D:3B:0C:61:4D:D3:C3:F0:EB:16:C9:27:B7:CA:98:97:14:D2
Certificate issuer:       /CN=5cdc8d3b0c614dd3c3f0eb16c927b7ca989714d2
Certificate serial:       018ADDCFF386405F914FA33DED79C1AC15F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNyNOwxhTdPD8OsWySe3ypiXFNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.mft
Manifest number:          06BB
Signing time:             Thu 28 Sep 2023 22:01:47 +0000
Manifest this update:     Thu 28 Sep 2023 22:01:47 +0000
Manifest next update:     Fri 29 Sep 2023 22:01:47 +0000
Files and hashes:         1: XNyNOwxhTdPD8OsWySe3ypiXFNI.crl (hash: U7LpPvkjFq1nBQrB7QP190bp/vEsN62YMBrnNTWWIs0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:dd:cf:f3:86:40:5f:91:4f:a3:3d:ed:79:c1:ac:15:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc8d3b0c614dd3c3f0eb16c927b7ca989714d2
        Validity
            Not Before: Sep 28 22:01:47 2023 GMT
            Not After : Sep 29 22:01:47 2023 GMT
        Subject: CN=70ada5f95241f3f34e782bf3121e324e2dc561e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:8f:cf:5f:56:f2:36:35:28:b5:7c:f2:65:
                    86:da:c5:5d:34:8f:41:44:35:1f:96:c4:f1:73:4f:
                    8c:48:7d:ec:b5:41:d3:23:9f:a8:f9:f0:e3:d9:cf:
                    84:92:aa:05:fd:67:f0:b4:5c:ba:74:0f:57:c3:bd:
                    09:6d:20:1d:7a:72:13:88:0d:3f:d4:85:de:16:84:
                    b8:7f:32:25:44:80:e3:32:69:eb:75:e8:ab:96:2c:
                    ae:4d:50:bf:57:ce:46:f5:e4:3d:73:a2:36:a9:92:
                    4e:e6:70:c5:ca:7c:b6:1d:2a:0b:1f:17:1c:83:1f:
                    2b:9a:93:ad:1c:fe:3c:06:a2:da:17:13:1c:a7:85:
                    9d:2f:af:71:0a:7f:83:02:14:3e:99:c0:f6:b1:73:
                    58:a3:74:ac:2d:22:25:d0:e0:24:f4:2f:fa:97:33:
                    fa:83:90:3c:90:c0:46:a6:7d:38:52:c7:44:ac:d1:
                    5c:37:bc:3f:53:87:d1:a8:4d:cf:a0:42:ed:be:f9:
                    a7:44:e2:60:f9:4b:4b:42:1a:94:37:b5:69:3b:fa:
                    14:50:36:41:ed:c5:8a:fd:81:97:46:44:71:65:b0:
                    60:d2:c8:75:14:d5:60:de:61:76:bf:a9:a0:2b:92:
                    ae:dd:c2:d9:66:88:77:a6:47:d8:7a:93:11:c2:74:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:A5:F9:52:41:F3:F3:4E:78:2B:F3:12:1E:32:4E:2D:C5:61:E5
            X509v3 Authority Key Identifier:
                keyid:5C:DC:8D:3B:0C:61:4D:D3:C3:F0:EB:16:C9:27:B7:CA:98:97:14:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNyNOwxhTdPD8OsWySe3ypiXFNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:17:fa:83:df:a6:66:66:e2:2c:a7:db:81:09:9c:18:53:01:
         9c:0e:b5:1c:d7:2f:62:e9:c5:70:dd:40:d7:15:09:84:4e:88:
         89:1d:a8:dd:e8:6e:52:5b:f2:d8:29:6b:03:09:17:c5:40:81:
         77:09:62:ad:9a:5f:76:48:0c:52:14:31:80:cc:7b:ee:6c:ed:
         e7:4c:08:90:39:db:9a:30:c0:04:05:e0:f3:12:6c:f8:11:6d:
         9e:81:ad:c8:15:36:c2:55:50:06:ef:59:d5:59:85:8a:6b:bf:
         a3:25:08:85:2d:a7:73:f4:4b:29:ea:77:bc:d0:21:8d:42:3d:
         96:20:6c:01:2f:48:c4:9e:ac:21:d9:fc:0a:03:40:d3:1a:8f:
         ca:ea:5d:d0:5e:89:52:78:3a:f2:cd:a6:b7:43:71:60:38:26:
         1c:33:1c:13:69:5c:c6:53:c8:44:98:32:c2:25:d1:30:e7:78:
         e5:6c:b6:b7:31:82:ea:47:a2:1c:26:9a:89:73:3d:62:0e:60:
         fb:d1:03:5d:be:e7:51:fd:4c:33:91:de:98:ab:84:f8:51:41:
         31:30:4b:3d:a9:a5:0e:8c:45:d7:64:a2:5d:2d:91:21:e0:24:
         ba:af:43:18:86:6d:28:82:b3:78:06:ff:2a:b6:6d:c4:46:31:
         d7:45:99:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYrdz/OGQF+RT6M97XnBrBXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZGM4ZDNiMGM2MTRkZDNjM2YwZWIxNmM5MjdiN2NhOTg5
NzE0ZDIwHhcNMjMwOTI4MjIwMTQ3WhcNMjMwOTI5MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg3MGFkYTVmOTUyNDFmM2YzNGU3ODJiZjMxMjFlMzI0ZTJkYzU2MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVOPz19W8jY1KLV88mWG2sVdNI9B
RDUflsTxc0+MSH3stUHTI5+o+fDj2c+EkqoF/WfwtFy6dA9Xw70JbSAdenITiA0/
1IXeFoS4fzIlRIDjMmnrdeirliyuTVC/V85G9eQ9c6I2qZJO5nDFyny2HSoLHxcc
gx8rmpOtHP48BqLaFxMcp4WdL69xCn+DAhQ+mcD2sXNYo3SsLSIl0OAk9C/6lzP6
g5A8kMBGpn04UsdErNFcN7w/U4fRqE3PoELtvvmnROJg+UtLQhqUN7VpO/oUUDZB
7cWK/YGXRkRxZbBg0sh1FNVg3mF2v6mgK5Ku3cLZZoh3pkfYepMRwnQhQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCtpflSQfPzTngr8xIeMk4txWHlMB8GA1UdIwQY
MBaAFFzcjTsMYU3Tw/DrFsknt8qYlxTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE55Tk93eGhUZFBEOE9zV3lTZTN5cGlYRk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mY2M1OGItZTYxNS00ZGM5LTkxNTAt
ZmQ4YzM2YjZiYzAwLzEvWE55Tk93eGhUZFBEOE9zV3lTZTN5cGlYRk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mY2M1OGItZTYxNS00ZGM5LTkxNTAtZmQ4YzM2YjZiYzAw
LzEvWE55Tk93eGhUZFBEOE9zV3lTZTN5cGlYRk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhf6g9+m
ZmbiLKfbgQmcGFMBnA61HNcvYunFcN1A1xUJhE6IiR2o3ehuUlvy2ClrAwkXxUCB
dwlirZpfdkgMUhQxgMx77mzt50wIkDnbmjDABAXg8xJs+BFtnoGtyBU2wlVQBu9Z
1VmFimu/oyUIhS2nc/RLKep3vNAhjUI9liBsAS9IxJ6sIdn8CgNA0xqPyupd0F6J
Ung68s2mt0NxYDgmHDMcE2lcxlPIRJgywiXRMOd45Wy2tzGC6keiHCaaiXM9Yg5g
+9EDXb7nUf1MM5HemKuE+FFBMTBLPamlDoxF12SiXS2RIeAkuq9DGIZtKIKzeAb/
KrZtxEYx10WZ3g==
-----END CERTIFICATE-----