Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.mft
File:                     MsAbG4QPOM4GcfccO0cn6B9porc.mft (raw, json)
Hash identifier:          DeRkKGKfNlX528JLt0TcEMLUf0kM566ILcj8HyU9rAQ=
Subject key identifier:   41:D4:05:52:A5:92:B9:EA:1F:4C:FD:61:A9:FB:4C:F1:30:F2:7D:4D
Authority key identifier: 32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
Certificate issuer:       /CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
Certificate serial:       018557155BF69D786A0C9F608C86E97C34C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.mft
Manifest number:          096D
Signing time:             Wed 28 Dec 2022 04:54:55 +0000
Manifest this update:     Wed 28 Dec 2022 04:54:55 +0000
Manifest next update:     Thu 29 Dec 2022 04:54:55 +0000
Files and hashes:         1: MsAbG4QPOM4GcfccO0cn6B9porc.crl (hash: hbrX9f5nVbEx6nSwzMzK+mfu3KtWcESB8RVxeV0HJYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:57:15:5b:f6:9d:78:6a:0c:9f:60:8c:86:e9:7c:34:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
        Validity
            Not Before: Dec 28 04:54:55 2022 GMT
            Not After : Dec 29 04:54:55 2022 GMT
        Subject: CN=41d40552a592b9ea1f4cfd61a9fb4cf130f27d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:97:01:85:df:fe:14:3f:b9:13:f6:57:98:
                    08:80:d2:27:de:04:a0:d8:b8:6c:16:ad:52:6a:1a:
                    11:67:f8:cf:b9:29:8f:a3:60:f8:fa:32:a8:95:64:
                    34:dd:4e:a5:39:df:4a:f0:15:3a:4f:e3:6d:ab:5e:
                    eb:37:eb:f4:3a:48:76:79:3d:73:ef:5d:8c:c9:3c:
                    c0:c1:41:79:8a:04:8c:9e:5a:e9:56:ae:b4:68:5b:
                    f2:c0:be:82:43:2b:40:46:6b:2e:71:41:18:57:c4:
                    3e:39:bb:d9:0d:43:89:69:fe:18:6f:18:cf:19:32:
                    f6:98:f8:31:34:a2:83:9f:68:e3:b3:72:f1:78:4f:
                    5b:70:0b:66:99:7f:0c:0b:18:93:2e:0c:b9:b1:76:
                    c3:be:9a:6f:92:e5:aa:1c:2b:56:2a:ae:6d:62:06:
                    69:d3:33:dd:eb:6a:82:0f:01:5c:7d:d0:5a:2e:70:
                    34:c2:2b:b9:74:0d:24:39:8d:57:62:d7:1b:85:3e:
                    da:b0:61:00:65:2f:ca:39:1e:91:68:07:ce:0b:23:
                    09:5b:e7:aa:1b:cf:fc:c1:2e:8f:b4:07:14:d7:18:
                    21:9a:b2:ff:21:cd:43:f1:d2:bd:74:f2:a3:8a:d6:
                    1c:72:c8:36:11:98:10:2d:cf:cb:81:4b:e0:e5:a0:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D4:05:52:A5:92:B9:EA:1F:4C:FD:61:A9:FB:4C:F1:30:F2:7D:4D
            X509v3 Authority Key Identifier:
                keyid:32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:28:d0:ef:2f:40:62:cf:67:e0:b6:7a:c9:6c:80:f7:10:8c:
         72:eb:83:97:29:71:61:8b:6b:54:4c:cd:8f:9d:0f:7c:bd:35:
         ba:a3:6b:cf:56:26:20:f0:57:1c:3e:5e:d4:56:ae:4d:70:68:
         e6:a6:e4:19:01:bf:d9:77:73:e5:57:80:6a:36:d0:9d:75:d9:
         4e:a5:d3:79:71:b3:87:65:c3:ea:11:6d:26:e5:e2:02:de:71:
         31:68:3a:7a:7a:ee:23:a1:78:6c:88:77:75:a4:eb:fd:c4:4b:
         6c:5e:4f:74:57:38:a6:0e:b3:7b:93:b9:f8:d8:96:8e:ca:af:
         8a:00:e2:a8:a9:c9:7a:de:d5:30:0a:72:58:04:81:a3:3d:77:
         c8:85:58:52:68:27:64:dc:82:72:b2:76:df:49:8c:b8:e7:32:
         a4:73:2f:6f:82:a4:e1:77:48:b5:72:5e:bd:44:4d:2c:b2:8b:
         fd:81:85:6e:1e:96:77:46:02:09:75:01:61:64:c9:08:8e:4b:
         e6:ac:d0:25:ba:7b:5b:87:1a:2e:a6:7b:68:bf:ca:5b:d3:3d:
         d4:1f:6d:94:f4:4c:03:dd:ad:f4:b4:ca:b2:32:4e:22:45:cc:
         be:c3:6b:2f:a7:f9:8f:68:43:00:14:bb:f2:92:83:85:35:8a:
         71:b7:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----