Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ea373e-1cf1-496b-a2cf-062f8160a5e3/1/ZkwN3p0cYXOxq34hxpq4vdlfA2E.mft
File:                     ZkwN3p0cYXOxq34hxpq4vdlfA2E.mft (raw, json)
Hash identifier:          +444Mpqq+r0mVb1Myt4/om8Vh9GwbFdOJjMBy/H9HGU=
Subject key identifier:   69:A2:F3:B5:E9:4A:BF:67:92:C3:00:6C:06:5F:FC:14:29:A4:88:F6
Authority key identifier: 66:4C:0D:DE:9D:1C:61:73:B1:AB:7E:21:C6:9A:B8:BD:D9:5F:03:61
Certificate issuer:       /CN=664c0dde9d1c6173b1ab7e21c69ab8bdd95f0361
Certificate serial:       0189FC89B5713A09842BF8F899650FF02D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkwN3p0cYXOxq34hxpq4vdlfA2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ea373e-1cf1-496b-a2cf-062f8160a5e3/1/ZkwN3p0cYXOxq34hxpq4vdlfA2E.mft
Manifest number:          0869
Signing time:             Wed 16 Aug 2023 04:10:30 +0000
Manifest this update:     Wed 16 Aug 2023 04:10:30 +0000
Manifest next update:     Thu 17 Aug 2023 04:10:30 +0000
Files and hashes:         1: ZkwN3p0cYXOxq34hxpq4vdlfA2E.crl (hash: kJeKQrm5DUiWz2hq+1hZu8DJS9ltQ0EHoDvgGqHsX/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fc:89:b5:71:3a:09:84:2b:f8:f8:99:65:0f:f0:2d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664c0dde9d1c6173b1ab7e21c69ab8bdd95f0361
        Validity
            Not Before: Aug 16 04:10:30 2023 GMT
            Not After : Aug 17 04:10:30 2023 GMT
        Subject: CN=69a2f3b5e94abf6792c3006c065ffc1429a488f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:b0:6c:4c:bd:88:67:a6:28:8d:07:33:52:
                    34:30:4c:46:cb:86:4b:82:b4:70:66:af:78:e7:6d:
                    71:ee:62:66:d7:0f:de:9d:22:23:dc:28:91:2b:b2:
                    d1:e2:d9:73:e0:42:ee:f6:7e:f5:dc:fd:4c:f1:14:
                    a6:a1:39:90:82:79:14:21:51:75:93:e2:2d:82:05:
                    83:5a:f9:8d:2c:b2:c2:0b:d4:12:39:ca:65:35:4b:
                    bf:46:cb:0a:5e:a5:79:80:b4:95:1e:bf:ab:52:ea:
                    ad:d0:b6:91:6a:d9:d1:36:66:3c:ac:ba:8f:d0:df:
                    9c:e9:9e:b0:cf:98:22:1a:84:99:d6:83:c2:fd:3e:
                    ac:da:66:91:bc:81:f7:2e:c8:4f:d7:a7:28:b9:6e:
                    c3:80:17:4c:a4:f8:a9:68:67:d6:0d:3c:96:3e:61:
                    31:c8:69:47:d5:56:22:88:52:16:94:4b:d1:4b:84:
                    9a:93:69:b6:5f:b2:1c:d5:be:ad:06:08:a2:eb:12:
                    9a:a9:c5:23:eb:54:c1:43:fb:aa:a6:e8:61:45:77:
                    92:78:19:e4:a8:d1:68:91:6b:74:b5:0e:af:c1:32:
                    a9:50:e6:d1:02:6d:b0:27:9a:e0:96:92:b9:e9:2b:
                    a0:a7:f7:87:b1:29:09:e7:7d:6a:d6:5e:65:f3:7c:
                    3b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:F3:B5:E9:4A:BF:67:92:C3:00:6C:06:5F:FC:14:29:A4:88:F6
            X509v3 Authority Key Identifier:
                keyid:66:4C:0D:DE:9D:1C:61:73:B1:AB:7E:21:C6:9A:B8:BD:D9:5F:03:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkwN3p0cYXOxq34hxpq4vdlfA2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ea373e-1cf1-496b-a2cf-062f8160a5e3/1/ZkwN3p0cYXOxq34hxpq4vdlfA2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ea373e-1cf1-496b-a2cf-062f8160a5e3/1/ZkwN3p0cYXOxq34hxpq4vdlfA2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7f:a1:63:b5:56:d7:25:8b:c4:77:ae:be:70:e1:f5:99:15:
         b0:5a:6b:78:1f:1a:47:7f:0a:03:05:41:33:c1:c9:fe:ba:0b:
         a7:ab:65:c6:56:f8:cb:c4:f7:23:59:93:90:b4:42:c7:f4:9e:
         04:fe:bf:17:cb:87:03:5c:b4:fa:0e:02:35:49:6b:fe:1f:c2:
         d3:d5:ee:61:66:61:fb:05:4e:b2:2a:ae:72:be:59:f0:e3:31:
         42:96:6c:41:cb:d0:ec:c9:fa:5c:3d:88:57:93:2d:29:29:06:
         4f:ad:fc:67:fd:a7:6e:10:fc:36:f6:0a:35:97:3a:81:bb:47:
         fe:09:de:ff:4e:aa:ca:db:4f:15:46:27:c6:f9:7c:7b:9e:35:
         3c:f2:3e:97:66:1d:24:df:02:ea:bd:8e:1b:a9:a7:46:29:28:
         1c:0b:c4:d2:a3:ff:e1:95:b3:ce:ad:b6:0a:4d:f9:69:7d:ff:
         d2:14:5a:48:1e:01:6c:19:26:fb:10:20:6a:1d:de:7f:a4:42:
         66:06:08:21:89:b1:41:25:d6:19:09:51:90:2a:6e:df:75:e2:
         d7:cd:eb:b6:c0:bb:73:13:30:64:cb:74:87:b3:bc:e4:0e:54:
         bf:f3:74:4a:2d:42:71:03:9d:7d:fc:47:12:54:32:7d:d3:7d:
         a4:e9:30:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYn8ibVxOgmEK/j4mWUP8C2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NGMwZGRlOWQxYzYxNzNiMWFiN2UyMWM2OWFiOGJkZDk1
ZjAzNjEwHhcNMjMwODE2MDQxMDMwWhcNMjMwODE3MDQxMDMwWjAzMTEwLwYDVQQD
Eyg2OWEyZjNiNWU5NGFiZjY3OTJjMzAwNmMwNjVmZmMxNDI5YTQ4OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfawbEy9iGemKI0HM1I0MExGy4ZL
grRwZq94521x7mJm1w/enSIj3CiRK7LR4tlz4ELu9n713P1M8RSmoTmQgnkUIVF1
k+ItggWDWvmNLLLCC9QSOcplNUu/RssKXqV5gLSVHr+rUuqt0LaRatnRNmY8rLqP
0N+c6Z6wz5giGoSZ1oPC/T6s2maRvIH3LshP16couW7DgBdMpPipaGfWDTyWPmEx
yGlH1VYiiFIWlEvRS4Sak2m2X7Ic1b6tBgii6xKaqcUj61TBQ/uqpuhhRXeSeBnk
qNFokWt0tQ6vwTKpUObRAm2wJ5rglpK56Sugp/eHsSkJ531q1l5l83w7OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmi87XpSr9nksMAbAZf/BQppIj2MB8GA1UdIwQY
MBaAFGZMDd6dHGFzsat+IcaauL3ZXwNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmt3TjNwMGNZWE94cTM0aHhwcTR2ZGxmQTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lYTM3M2UtMWNmMS00OTZiLWEyY2Yt
MDYyZjgxNjBhNWUzLzEvWmt3TjNwMGNZWE94cTM0aHhwcTR2ZGxmQTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lYTM3M2UtMWNmMS00OTZiLWEyY2YtMDYyZjgxNjBhNWUz
LzEvWmt3TjNwMGNZWE94cTM0aHhwcTR2ZGxmQTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn+hY7VW
1yWLxHeuvnDh9ZkVsFpreB8aR38KAwVBM8HJ/roLp6tlxlb4y8T3I1mTkLRCx/Se
BP6/F8uHA1y0+g4CNUlr/h/C09XuYWZh+wVOsiqucr5Z8OMxQpZsQcvQ7Mn6XD2I
V5MtKSkGT638Z/2nbhD8NvYKNZc6gbtH/gne/06qyttPFUYnxvl8e541PPI+l2Yd
JN8C6r2OG6mnRikoHAvE0qP/4ZWzzq22Ck35aX3/0hRaSB4BbBkm+xAgah3ef6RC
ZgYIIYmxQSXWGQlRkCpu33Xi183rtsC7cxMwZMt0h7O85A5Uv/N0Si1CcQOdffxH
ElQyfdN9pOkwHQ==
-----END CERTIFICATE-----