Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.mft
File:                     TFmzMbx10usv8aCubPx-Lxc9QV8.mft (raw, json)
Hash identifier:          I1LxOaW4u1fkUAlTo/vaonuHI8JldR1YGtZuKpp8gqk=
Subject key identifier:   95:55:A3:4E:D3:C6:83:B2:39:23:20:6A:23:17:17:50:02:36:5F:3F
Authority key identifier: 4C:59:B3:31:BC:75:D2:EB:2F:F1:A0:AE:6C:FC:7E:2F:17:3D:41:5F
Certificate issuer:       /CN=4c59b331bc75d2eb2ff1a0ae6cfc7e2f173d415f
Certificate serial:       01840D1BD8943D0F062BF92FE3D4B561159C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFmzMbx10usv8aCubPx-Lxc9QV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.mft
Manifest number:          0649
Signing time:             Tue 25 Oct 2022 03:07:19 +0000
Manifest this update:     Tue 25 Oct 2022 03:07:19 +0000
Manifest next update:     Wed 26 Oct 2022 03:07:19 +0000
Files and hashes:         1: TFmzMbx10usv8aCubPx-Lxc9QV8.crl (hash: l0ysI7R+gWs1TnHPfd7Ii2UsWhFgwK+h1occltopCF0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:1b:d8:94:3d:0f:06:2b:f9:2f:e3:d4:b5:61:15:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c59b331bc75d2eb2ff1a0ae6cfc7e2f173d415f
        Validity
            Not Before: Oct 25 03:07:19 2022 GMT
            Not After : Oct 26 03:07:19 2022 GMT
        Subject: CN=9555a34ed3c683b23923206a2317175002365f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:bf:e6:35:ea:4d:15:06:b5:cb:69:5d:7d:
                    38:93:78:0b:74:39:9b:05:11:b4:22:eb:b2:80:c7:
                    7d:bf:fd:c9:7a:fe:5f:23:ec:ae:b5:86:3c:1e:f8:
                    9d:82:56:78:7d:27:b3:51:4e:9a:92:ab:54:bf:d9:
                    d5:e8:fb:7a:c1:ff:a8:6f:65:0f:e5:9b:ec:ab:81:
                    ce:35:4c:7d:31:c9:bd:b7:a3:64:61:31:27:d8:e4:
                    1b:1c:15:64:ae:9e:6a:d5:bb:ed:db:fa:d8:ed:9d:
                    cf:4e:ed:32:3a:f5:a9:15:74:9c:c4:71:3c:50:75:
                    d4:e1:43:2a:b8:9c:4b:2e:9e:fc:32:21:05:3b:4f:
                    eb:c9:13:73:5c:c9:43:b5:c1:b0:57:99:7a:db:6b:
                    c0:08:cd:1d:03:63:0b:99:f7:b4:92:a9:0e:bb:e8:
                    27:d4:87:0a:15:ba:0b:db:41:ab:f8:4b:3a:aa:c9:
                    f2:22:6e:fe:1f:de:26:a9:e2:92:9e:a2:31:84:1b:
                    f0:15:20:6d:8d:26:d5:f5:4f:96:91:64:96:16:90:
                    16:0d:64:61:c3:d8:4a:38:26:7f:9b:11:ed:33:0f:
                    e7:52:01:d9:5b:cf:94:6d:d1:12:0f:46:a7:59:66:
                    da:49:1d:c2:4f:72:28:79:45:4f:69:d3:ba:ec:63:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:55:A3:4E:D3:C6:83:B2:39:23:20:6A:23:17:17:50:02:36:5F:3F
            X509v3 Authority Key Identifier:
                keyid:4C:59:B3:31:BC:75:D2:EB:2F:F1:A0:AE:6C:FC:7E:2F:17:3D:41:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFmzMbx10usv8aCubPx-Lxc9QV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:91:bc:ab:f3:ab:68:f2:ae:ee:7f:0f:35:19:22:5b:aa:8f:
         d0:8a:b5:ec:b9:4a:71:d9:47:b9:f8:c2:7d:f1:3b:1b:eb:70:
         7e:07:e3:62:ea:80:11:67:5e:8b:f3:50:a6:26:1e:1a:9f:e3:
         ea:26:7a:d8:c0:5f:00:a0:91:16:52:e5:ae:ad:91:f2:7a:08:
         7d:43:6e:a0:df:17:d5:7f:f3:c2:be:1f:fc:a1:f4:ec:36:0c:
         02:85:e5:9c:91:57:d6:6c:63:e6:59:85:55:5d:d1:64:88:67:
         43:22:21:6f:11:05:ab:a0:78:36:4f:ba:87:f1:17:38:aa:50:
         35:d1:5d:c2:11:59:5a:97:5a:20:42:5b:09:44:35:41:91:64:
         7c:62:c1:97:a9:1e:71:e7:8d:11:09:b2:3c:d1:4e:8a:79:3c:
         51:0a:f9:f9:44:c4:77:6e:e4:3e:81:f2:06:5e:46:d8:20:1b:
         63:c6:7b:6a:52:54:df:bd:0d:e8:e4:b6:cd:1c:f5:07:8a:ce:
         e1:32:4a:b9:24:64:12:fe:bb:2e:79:da:19:85:69:c9:78:b7:
         48:2d:f0:ae:1f:c1:16:46:94:c5:4e:07:9c:1c:01:21:e2:6c:
         d7:d5:32:d7:ea:fe:f3:29:cd:da:7d:3a:fa:f1:94:51:5b:97:
         07:27:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----