Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ad6e25-5b22-4bde-b92e-3f9e2b381f3e/1/LjSJORrdrElYqTKofbnbwU0cAdo.mft
File:                     LjSJORrdrElYqTKofbnbwU0cAdo.mft (raw, json)
Hash identifier:          8nOAfP7th2i9yN0KpLx/HYL1cNz1dCi6rLOB9lGIPp4=
Subject key identifier:   C4:7F:F0:8E:81:84:93:CE:38:4B:A9:F2:8D:3F:11:E1:6E:A3:4A:49
Authority key identifier: 2E:34:89:39:1A:DD:AC:49:58:A9:32:A8:7D:B9:DB:C1:4D:1C:01:DA
Certificate issuer:       /CN=2e3489391addac4958a932a87db9dbc14d1c01da
Certificate serial:       1C3EBF8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjSJORrdrElYqTKofbnbwU0cAdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ad6e25-5b22-4bde-b92e-3f9e2b381f3e/1/LjSJORrdrElYqTKofbnbwU0cAdo.mft
Manifest number:          08D9
Signing time:             Mon 04 Apr 2022 07:31:49 +0000
Manifest this update:     Mon 04 Apr 2022 07:31:49 +0000
Manifest next update:     Tue 05 Apr 2022 07:31:49 +0000
Files and hashes:         1: LjSJORrdrElYqTKofbnbwU0cAdo.crl (hash: LPeIeQcc6TC76s/EzZsClhISbw2Q50bCiK8zvSh9CLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473874316 (0x1c3ebf8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3489391addac4958a932a87db9dbc14d1c01da
        Validity
            Not Before: Apr  4 07:31:49 2022 GMT
            Not After : Apr  5 07:31:49 2022 GMT
        Subject: CN=c47ff08e818493ce384ba9f28d3f11e16ea34a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:aa:d2:21:59:cc:dc:4a:83:0d:da:a5:fa:
                    1b:fd:16:9c:af:3c:cd:d2:8b:7d:4d:84:43:4b:a9:
                    36:84:4f:80:4e:8c:bf:7c:39:87:4b:0f:3b:f6:49:
                    75:18:3e:c0:2e:86:18:db:50:cc:1c:b7:43:d8:4e:
                    53:8d:0d:0c:c6:22:a7:55:63:a1:20:55:81:55:92:
                    4e:06:ce:0c:82:1b:28:8b:14:9b:3a:02:d6:c6:e5:
                    1c:d0:58:a0:c8:d6:c0:a6:71:a4:14:31:b4:c2:ce:
                    9d:d1:ed:ec:22:07:ef:76:47:12:47:36:02:b8:d9:
                    1c:bc:8a:9d:c1:a7:bd:fb:32:9b:83:c2:24:21:92:
                    f0:a2:58:2b:77:b1:52:38:be:bd:ea:9a:4c:98:83:
                    9a:0e:40:eb:fe:a8:26:76:87:28:21:d0:ef:2a:5b:
                    b1:95:d9:5b:89:d3:d4:fc:df:a1:8e:f2:9a:3b:62:
                    5e:f3:a8:0a:dd:c0:fa:b1:dc:68:b8:c0:5d:cc:f4:
                    8c:c6:2f:21:e6:6a:64:95:35:06:c1:49:a7:9a:9c:
                    5a:09:8c:0f:02:06:40:00:c4:75:a5:0c:9c:6d:0e:
                    f8:a1:bb:cd:bc:fc:c8:ae:df:74:43:55:a3:ff:cb:
                    0c:77:28:57:ab:f5:64:d5:80:ae:d6:9b:a8:76:b7:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7F:F0:8E:81:84:93:CE:38:4B:A9:F2:8D:3F:11:E1:6E:A3:4A:49
            X509v3 Authority Key Identifier:
                keyid:2E:34:89:39:1A:DD:AC:49:58:A9:32:A8:7D:B9:DB:C1:4D:1C:01:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSJORrdrElYqTKofbnbwU0cAdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ad6e25-5b22-4bde-b92e-3f9e2b381f3e/1/LjSJORrdrElYqTKofbnbwU0cAdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ad6e25-5b22-4bde-b92e-3f9e2b381f3e/1/LjSJORrdrElYqTKofbnbwU0cAdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:59:e0:d2:bd:c1:0a:36:5f:5a:84:83:95:f0:fd:d9:54:07:
         43:6b:bb:c2:d9:e6:a1:52:40:6e:a4:b1:53:49:33:3a:ff:11:
         21:75:f1:c3:dd:51:68:f2:9e:0c:48:ae:81:9d:14:58:e1:23:
         97:13:81:2d:14:08:24:00:d6:09:0c:89:33:52:dc:a5:77:b3:
         3e:a5:c4:e2:6d:7c:6c:18:a4:84:6e:c1:2f:eb:c5:16:26:30:
         c7:8c:c0:69:79:8e:1e:28:10:18:47:62:e5:52:fa:1e:1e:ac:
         b9:54:d3:e0:1b:1e:52:aa:51:5b:b6:bc:69:17:89:e5:1b:5c:
         aa:01:49:b6:6e:06:fd:dd:2c:e3:22:be:df:95:38:93:41:2a:
         4d:bc:f4:c8:89:6d:ef:01:55:aa:45:42:5f:95:0f:48:53:ec:
         a3:ad:1b:95:05:bd:ec:fb:b4:91:26:0a:44:09:34:e0:33:cc:
         06:a2:c8:8c:6f:76:35:fc:17:c1:50:26:b2:b5:64:ff:cc:e5:
         6a:87:e4:fb:3d:1b:bc:ac:08:8d:02:0c:a3:50:53:d9:60:97:
         d1:01:00:5e:a0:c5:e8:00:a6:2f:1f:ba:3d:a4:4f:0a:6c:47:
         ad:c8:2c:4f:63:98:7a:ec:39:16:63:0c:cf:96:1c:1c:82:2e:
         87:af:08:a9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEHD6/jDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTM0ODkzOTFhZGRhYzQ5NThhOTMyYTg3ZGI5ZGJjMTRkMWMwMWRhMB4XDTIyMDQw
NDA3MzE0OVoXDTIyMDQwNTA3MzE0OVowMzExMC8GA1UEAxMoYzQ3ZmYwOGU4MTg0
OTNjZTM4NGJhOWYyOGQzZjExZTE2ZWEzNGE0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJB2qtIhWczcSoMN2qX6G/0WnK88zdKLfU2EQ0upNoRPgE6M
v3w5h0sPO/ZJdRg+wC6GGNtQzBy3Q9hOU40NDMYip1VjoSBVgVWSTgbODIIbKIsU
mzoC1sblHNBYoMjWwKZxpBQxtMLOndHt7CIH73ZHEkc2ArjZHLyKncGnvfsym4PC
JCGS8KJYK3exUji+veqaTJiDmg5A6/6oJnaHKCHQ7ypbsZXZW4nT1PzfoY7ymjti
XvOoCt3A+rHcaLjAXcz0jMYvIeZqZJU1BsFJp5qcWgmMDwIGQADEdaUMnG0O+KG7
zbz8yK7fdENVo//LDHcoV6v1ZNWArtabqHa32wUCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBTEf/COgYSTzjhLqfKNPxHhbqNKSTAfBgNVHSMEGDAWgBQuNIk5Gt2sSVip
Mqh9udvBTRwB2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xqU0pPUnJkckVsWXFUS29mYm5id1UwY0Fkby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGMvYWQ2ZTI1LTViMjItNGJkZS1iOTJlLTNmOWUyYjM4MWYzZS8x
L0xqU0pPUnJkckVsWXFUS29mYm5id1UwY0Fkby5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMv
YWQ2ZTI1LTViMjItNGJkZS1iOTJlLTNmOWUyYjM4MWYzZS8xL0xqU0pPUnJkckVs
WXFUS29mYm5id1UwY0Fkby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHRZ4NK9wQo2X1qEg5Xw/dlUB0Nr
u8LZ5qFSQG6ksVNJMzr/ESF18cPdUWjyngxIroGdFFjhI5cTgS0UCCQA1gkMiTNS
3KV3sz6lxOJtfGwYpIRuwS/rxRYmMMeMwGl5jh4oEBhHYuVS+h4erLlU0+AbHlKq
UVu2vGkXieUbXKoBSbZuBv3dLOMivt+VOJNBKk289MiJbe8BVapFQl+VD0hT7KOt
G5UFvez7tJEmCkQJNOAzzAaiyIxvdjX8F8FQJrK1ZP/M5WqH5Ps9G7ysCI0CDKNQ
U9lgl9EBAF6gxegApi8fuj2kTwpsR63ILE9jmHrsORZjDM+WHByCLoevCKk=
-----END CERTIFICATE-----