Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/LugMsbEtZpeF4XqO4--cgkTmTgA.mft
File:                     LugMsbEtZpeF4XqO4--cgkTmTgA.mft (raw, json)
Hash identifier:          mBGuccP5Hc7arghXhNEhBJoGKDZvUkspSuFus7CggvU=
Subject key identifier:   38:59:85:1C:B0:D0:2F:96:50:A9:83:1E:A2:2B:FC:A1:93:94:4F:8C
Authority key identifier: 2E:E8:0C:B1:B1:2D:66:97:85:E1:7A:8E:E3:EF:9C:82:44:E6:4E:00
Certificate issuer:       /CN=2ee80cb1b12d669785e17a8ee3ef9c8244e64e00
Certificate serial:       0185B9A253D53F0C530F0AD5ADBB0C572FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LugMsbEtZpeF4XqO4--cgkTmTgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/LugMsbEtZpeF4XqO4--cgkTmTgA.mft
Manifest number:          0C2F
Signing time:             Mon 16 Jan 2023 08:11:41 +0000
Manifest this update:     Mon 16 Jan 2023 08:11:41 +0000
Manifest next update:     Tue 17 Jan 2023 08:11:41 +0000
Files and hashes:         1: LugMsbEtZpeF4XqO4--cgkTmTgA.crl (hash: o9aQw1BfOMwLfzuefj2EmXL+MItmzoTtW+ygN1+W1uY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:b9:a2:53:d5:3f:0c:53:0f:0a:d5:ad:bb:0c:57:2f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee80cb1b12d669785e17a8ee3ef9c8244e64e00
        Validity
            Not Before: Jan 16 08:11:41 2023 GMT
            Not After : Jan 17 08:11:41 2023 GMT
        Subject: CN=3859851cb0d02f9650a9831ea22bfca193944f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:a7:e7:2f:e5:64:22:27:4f:8f:44:9d:54:
                    6d:d7:57:46:46:fa:19:44:e6:37:8e:bd:70:84:0f:
                    ff:89:f2:48:b4:10:d3:a2:62:87:f4:78:83:3f:0d:
                    7d:82:02:ff:0a:98:00:2b:30:d9:a1:e1:74:11:a3:
                    7a:25:9c:37:76:35:83:5d:e0:d6:fa:32:10:5d:93:
                    13:66:8e:da:85:be:e9:65:16:f0:80:9c:19:4f:0d:
                    66:3e:ea:d9:52:e7:8c:7f:81:d3:58:db:fe:87:18:
                    63:f1:d2:08:06:fa:49:5f:3d:90:80:59:53:f8:7b:
                    48:84:62:37:b2:d4:10:42:9f:90:cf:88:51:a5:17:
                    d3:e3:0c:0e:52:e7:8e:da:a4:cc:62:80:01:35:11:
                    68:c4:f7:75:15:b5:f6:e9:f7:91:6b:30:f3:48:90:
                    e6:a1:68:b4:c2:4b:7a:66:f5:6e:cc:d6:12:c0:d4:
                    f3:2e:d1:12:44:08:76:0f:d2:61:f9:81:7c:01:4e:
                    33:e9:17:78:c7:59:44:7b:21:a0:cf:ad:4b:07:41:
                    47:46:a2:ea:96:fe:6e:c3:be:e4:ce:a3:e8:28:ef:
                    d2:14:3a:8a:e6:64:24:bf:f0:46:44:2a:d5:23:ea:
                    f6:ce:f7:d7:96:1c:cf:d3:0f:10:76:c0:3d:a0:c4:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:59:85:1C:B0:D0:2F:96:50:A9:83:1E:A2:2B:FC:A1:93:94:4F:8C
            X509v3 Authority Key Identifier:
                keyid:2E:E8:0C:B1:B1:2D:66:97:85:E1:7A:8E:E3:EF:9C:82:44:E6:4E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LugMsbEtZpeF4XqO4--cgkTmTgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/LugMsbEtZpeF4XqO4--cgkTmTgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/LugMsbEtZpeF4XqO4--cgkTmTgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:32:7e:50:65:a0:69:48:cc:02:ee:f3:74:41:4c:03:c1:
         41:c1:8d:6c:d1:8b:c3:a6:1d:9b:74:83:ec:98:14:75:82:5c:
         a9:bf:fe:51:44:0d:44:0b:c5:16:f0:c2:08:2f:39:20:ae:ba:
         05:29:2d:d6:80:2b:31:61:9b:69:29:6d:ef:e1:b3:26:98:a6:
         f5:f0:52:f2:93:a4:c9:dc:53:37:38:62:4d:6f:da:71:7f:4c:
         c0:b4:2a:5a:31:16:b6:58:6c:ae:dd:f9:f5:68:a1:73:ad:b4:
         84:df:03:2e:0f:bd:84:94:cf:6d:8c:52:1f:5e:5a:4c:9b:7e:
         1f:bd:5d:34:a5:58:55:83:28:cf:65:bb:35:82:6b:f7:e5:c6:
         11:35:b8:da:dd:29:f9:bc:c8:4d:10:0f:0b:99:95:85:38:1c:
         7d:66:f2:43:80:4a:9d:1a:29:ca:eb:63:18:22:5e:60:26:22:
         d7:b0:55:47:cd:00:02:3e:b3:89:9a:46:47:2d:64:c1:ea:c7:
         8e:41:d0:09:fb:0b:61:4c:f6:16:e6:e4:fe:7c:43:43:98:9d:
         ea:10:39:f8:28:33:f7:07:20:c8:95:02:89:b1:f6:df:97:65:
         78:c5:89:7a:ba:3e:3e:ec:38:1e:dc:23:0f:a7:2f:72:1c:fe:
         7f:42:a4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYW5olPVPwxTDwrVrbsMVy+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTgwY2IxYjEyZDY2OTc4NWUxN2E4ZWUzZWY5YzgyNDRl
NjRlMDAwHhcNMjMwMTE2MDgxMTQxWhcNMjMwMTE3MDgxMTQxWjAzMTEwLwYDVQQD
EygzODU5ODUxY2IwZDAyZjk2NTBhOTgzMWVhMjJiZmNhMTkzOTQ0ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq+n5y/lZCInT49EnVRt11dGRvoZ
ROY3jr1whA//ifJItBDTomKH9HiDPw19ggL/CpgAKzDZoeF0EaN6JZw3djWDXeDW
+jIQXZMTZo7ahb7pZRbwgJwZTw1mPurZUueMf4HTWNv+hxhj8dIIBvpJXz2QgFlT
+HtIhGI3stQQQp+Qz4hRpRfT4wwOUueO2qTMYoABNRFoxPd1FbX26feRazDzSJDm
oWi0wkt6ZvVuzNYSwNTzLtESRAh2D9Jh+YF8AU4z6Rd4x1lEeyGgz61LB0FHRqLq
lv5uw77kzqPoKO/SFDqK5mQkv/BGRCrVI+r2zvfXlhzP0w8QdsA9oMTnFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhZhRyw0C+WUKmDHqIr/KGTlE+MMB8GA1UdIwQY
MBaAFC7oDLGxLWaXheF6juPvnIJE5k4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVnTXNiRXRacGVGNFhxTzQtLWNna1RtVGdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ZTFkNzctYWRmNi00ZTg0LTgxODMt
MjMxOGVhYjlmNjNhLzEvTHVnTXNiRXRacGVGNFhxTzQtLWNna1RtVGdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82ZTFkNzctYWRmNi00ZTg0LTgxODMtMjMxOGVhYjlmNjNh
LzEvTHVnTXNiRXRacGVGNFhxTzQtLWNna1RtVGdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw8yflBl
oGlIzALu83RBTAPBQcGNbNGLw6Ydm3SD7JgUdYJcqb/+UUQNRAvFFvDCCC85IK66
BSkt1oArMWGbaSlt7+GzJpim9fBS8pOkydxTNzhiTW/acX9MwLQqWjEWtlhsrt35
9Wihc620hN8DLg+9hJTPbYxSH15aTJt+H71dNKVYVYMoz2W7NYJr9+XGETW42t0p
+bzITRAPC5mVhTgcfWbyQ4BKnRopyutjGCJeYCYi17BVR80AAj6ziZpGRy1kwerH
jkHQCfsLYUz2Fubk/nxDQ5id6hA5+Cgz9wcgyJUCibH235dleMWJero+Puw4Htwj
D6cvchz+f0KkQw==
-----END CERTIFICATE-----