Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/da86a7-2202-4911-80fb-7211cf87ae36/1/34bOorUOgOrRzBdPg90Z1a6s478.mft
File:                     34bOorUOgOrRzBdPg90Z1a6s478.mft (raw, json)
Hash identifier:          nm125abS654WMmwdGSZN0DlKTOcFhKFbg5a/uARzCzU=
Subject key identifier:   C0:E7:4A:E4:06:81:67:FC:EE:4D:53:D2:A8:F8:C2:12:AF:65:9A:44
Authority key identifier: DF:86:CE:A2:B5:0E:80:EA:D1:CC:17:4F:83:DD:19:D5:AE:AC:E3:BF
Certificate issuer:       /CN=df86cea2b50e80ead1cc174f83dd19d5aeace3bf
Certificate serial:       018379437B5A6BA2737E4BF9DB8E0A673AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34bOorUOgOrRzBdPg90Z1a6s478.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/da86a7-2202-4911-80fb-7211cf87ae36/1/34bOorUOgOrRzBdPg90Z1a6s478.mft
Manifest number:          01C0
Signing time:             Mon 26 Sep 2022 10:06:48 +0000
Manifest this update:     Mon 26 Sep 2022 10:06:48 +0000
Manifest next update:     Tue 27 Sep 2022 10:06:48 +0000
Files and hashes:         1: 34bOorUOgOrRzBdPg90Z1a6s478.crl (hash: uATz4YMWJi9KN1Npk5gwIZOG//lwbFIA7RuvrcXMrgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:79:43:7b:5a:6b:a2:73:7e:4b:f9:db:8e:0a:67:3a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df86cea2b50e80ead1cc174f83dd19d5aeace3bf
        Validity
            Not Before: Sep 26 10:06:48 2022 GMT
            Not After : Sep 27 10:06:48 2022 GMT
        Subject: CN=c0e74ae4068167fcee4d53d2a8f8c212af659a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:12:93:b8:42:89:49:0a:a7:57:b6:f0:70:
                    cb:8a:42:4c:43:2b:62:45:95:7d:8b:8d:3c:41:08:
                    f6:82:19:6c:77:61:55:c0:e4:9a:6d:19:59:7e:5c:
                    d6:05:02:e2:c3:54:f1:e5:d6:ed:6f:5f:d3:09:a9:
                    01:ff:e2:e8:0b:9e:4e:db:29:8e:85:06:0f:28:59:
                    b3:9f:5f:cf:04:f0:4b:02:2e:b8:94:2f:91:14:8c:
                    00:98:e2:6f:c0:08:5c:b1:24:00:ad:21:14:87:3d:
                    bd:0f:5d:47:74:d3:70:38:51:0d:cb:d2:3d:5f:c0:
                    d3:2e:b5:ff:81:d6:a0:50:b4:12:e3:de:3a:86:b2:
                    b8:8e:bf:51:0a:d8:af:7a:6f:b1:93:01:70:e0:11:
                    93:20:af:3e:fd:5c:bd:50:0c:8d:8b:c3:d3:62:39:
                    e4:49:80:26:46:37:93:a6:fd:b0:37:f1:47:0b:0f:
                    8d:c6:56:c7:4d:a6:33:de:1b:d8:32:d9:16:e5:ed:
                    05:f6:39:69:0d:62:fc:b8:6b:93:cd:d6:b3:11:92:
                    25:b8:e8:31:60:38:ee:d4:8e:23:4a:0a:42:18:5a:
                    86:00:ec:d8:8b:78:3c:a1:07:ff:4f:49:7d:df:df:
                    27:c8:14:5c:31:91:61:cb:bf:f2:22:a5:15:cd:61:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E7:4A:E4:06:81:67:FC:EE:4D:53:D2:A8:F8:C2:12:AF:65:9A:44
            X509v3 Authority Key Identifier:
                keyid:DF:86:CE:A2:B5:0E:80:EA:D1:CC:17:4F:83:DD:19:D5:AE:AC:E3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34bOorUOgOrRzBdPg90Z1a6s478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/da86a7-2202-4911-80fb-7211cf87ae36/1/34bOorUOgOrRzBdPg90Z1a6s478.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/da86a7-2202-4911-80fb-7211cf87ae36/1/34bOorUOgOrRzBdPg90Z1a6s478.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:48:75:15:51:5c:2e:02:7f:b8:cb:d2:51:38:60:3c:5d:57:
         f3:3e:8c:86:ce:47:bf:a7:2d:b2:56:08:d7:31:d8:f3:f5:0d:
         ef:23:47:97:cb:82:5a:7e:e7:02:fc:a1:49:cd:42:cc:71:96:
         d0:e9:99:73:0b:74:44:16:e7:81:3b:0f:6f:d7:ec:86:0b:97:
         15:70:4f:02:64:6e:3c:7f:97:c8:38:97:e5:e8:dd:00:d3:d8:
         d5:70:e5:cf:5e:83:61:af:e0:9a:07:40:af:01:37:0f:1f:98:
         67:d4:f5:54:d0:13:2b:cd:3e:65:69:e5:1b:42:32:e3:85:59:
         7e:1a:46:3e:f2:45:45:7b:b8:a7:6f:50:b1:86:7a:85:57:c9:
         5b:0e:4d:df:df:9c:6f:57:5b:47:63:7f:97:30:ea:70:3e:e0:
         3f:dd:a8:c3:5d:b6:d7:50:12:c8:f6:f1:07:45:85:84:a6:fa:
         df:04:cc:2e:58:66:dc:93:b4:65:14:0b:2d:e7:e2:2a:e8:2c:
         b8:86:a4:f3:28:3b:12:24:1f:55:7c:86:fc:dc:22:3b:36:10:
         ea:49:33:9b:33:a6:b6:a5:05:8d:15:ec:81:bf:81:79:bb:e4:
         29:ef:17:bf:32:d9:eb:84:e4:63:11:06:10:e0:07:bc:28:94:
         66:4d:a9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYN5Q3taa6Jzfkv5244KZzquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODZjZWEyYjUwZTgwZWFkMWNjMTc0ZjgzZGQxOWQ1YWVh
Y2UzYmYwHhcNMjIwOTI2MTAwNjQ4WhcNMjIwOTI3MTAwNjQ4WjAzMTEwLwYDVQQD
EyhjMGU3NGFlNDA2ODE2N2ZjZWU0ZDUzZDJhOGY4YzIxMmFmNjU5YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgygSk7hCiUkKp1e28HDLikJMQyti
RZV9i408QQj2ghlsd2FVwOSabRlZflzWBQLiw1Tx5dbtb1/TCakB/+LoC55O2ymO
hQYPKFmzn1/PBPBLAi64lC+RFIwAmOJvwAhcsSQArSEUhz29D11HdNNwOFENy9I9
X8DTLrX/gdagULQS4946hrK4jr9RCtivem+xkwFw4BGTIK8+/Vy9UAyNi8PTYjnk
SYAmRjeTpv2wN/FHCw+NxlbHTaYz3hvYMtkW5e0F9jlpDWL8uGuTzdazEZIluOgx
YDju1I4jSgpCGFqGAOzYi3g8oQf/T0l9398nyBRcMZFhy7/yIqUVzWGvCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDnSuQGgWf87k1T0qj4whKvZZpEMB8GA1UdIwQY
MBaAFN+GzqK1DoDq0cwXT4PdGdWurOO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRiT29yVU9nT3JSekJkUGc5MFoxYTZzNDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYTg2YTctMjIwMi00OTExLTgwZmIt
NzIxMWNmODdhZTM2LzEvMzRiT29yVU9nT3JSekJkUGc5MFoxYTZzNDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kYTg2YTctMjIwMi00OTExLTgwZmItNzIxMWNmODdhZTM2
LzEvMzRiT29yVU9nT3JSekJkUGc5MFoxYTZzNDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUh1FVFc
LgJ/uMvSUThgPF1X8z6Mhs5Hv6ctslYI1zHY8/UN7yNHl8uCWn7nAvyhSc1CzHGW
0OmZcwt0RBbngTsPb9fshguXFXBPAmRuPH+XyDiX5ejdANPY1XDlz16DYa/gmgdA
rwE3Dx+YZ9T1VNATK80+ZWnlG0Iy44VZfhpGPvJFRXu4p29QsYZ6hVfJWw5N39+c
b1dbR2N/lzDqcD7gP92ow12211ASyPbxB0WFhKb63wTMLlhm3JO0ZRQLLefiKugs
uIak8yg7EiQfVXyG/NwiOzYQ6kkzmzOmtqUFjRXsgb+BebvkKe8XvzLZ64TkYxEG
EOAHvCiUZk2paw==
-----END CERTIFICATE-----