Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/37ff69-235d-4217-abaa-df922683295d/1/ZKqN8pJZWLxNL5W59r2-UQESXQA.mft
File:                     ZKqN8pJZWLxNL5W59r2-UQESXQA.mft (raw, json)
Hash identifier:          oXnkEGJ2e3SK8W/446Q+KeEsYAnhD8FjGkSn8m0S8eA=
Subject key identifier:   27:67:84:F6:D4:5B:E6:DC:06:2B:B6:EF:3A:2E:C9:0C:64:B1:03:29
Authority key identifier: 64:AA:8D:F2:92:59:58:BC:4D:2F:95:B9:F6:BD:BE:51:01:12:5D:00
Certificate issuer:       /CN=64aa8df2925958bc4d2f95b9f6bdbe5101125d00
Certificate serial:       0183EF92340C04A3F162FBBD50E40A2BACFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKqN8pJZWLxNL5W59r2-UQESXQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/37ff69-235d-4217-abaa-df922683295d/1/ZKqN8pJZWLxNL5W59r2-UQESXQA.mft
Manifest number:          0B1E
Signing time:             Wed 19 Oct 2022 09:27:59 +0000
Manifest this update:     Wed 19 Oct 2022 09:27:59 +0000
Manifest next update:     Thu 20 Oct 2022 09:27:59 +0000
Files and hashes:         1: ZKqN8pJZWLxNL5W59r2-UQESXQA.crl (hash: e5UzyI6WWFtDdiXWxSrB+ADSoJv3DX1EqWg7jWa99lg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ef:92:34:0c:04:a3:f1:62:fb:bd:50:e4:0a:2b:ac:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64aa8df2925958bc4d2f95b9f6bdbe5101125d00
        Validity
            Not Before: Oct 19 09:27:59 2022 GMT
            Not After : Oct 20 09:27:59 2022 GMT
        Subject: CN=276784f6d45be6dc062bb6ef3a2ec90c64b10329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:a5:c0:55:a6:60:93:26:cf:2a:1b:17:07:
                    d6:63:79:34:be:4f:3f:08:0b:25:1f:2a:57:f7:33:
                    9f:24:9c:e7:2d:81:2e:d1:a0:08:b5:14:6a:b3:5f:
                    0c:c7:c1:7f:de:29:21:6a:e9:aa:df:3b:0b:43:dc:
                    88:87:c0:17:e0:bf:da:97:5c:4b:79:e9:ae:09:d9:
                    60:25:42:19:70:68:96:c6:63:37:8f:e1:c7:ff:71:
                    e5:29:fe:7a:6e:8c:a2:f6:11:36:03:d7:d2:d7:df:
                    b7:7f:1a:6e:4f:6b:c7:b3:e9:29:68:0b:95:86:a6:
                    ee:21:d7:a9:09:c8:5c:c8:53:09:c1:c9:83:80:1b:
                    20:eb:07:b2:60:a6:37:cd:4e:b9:3b:63:55:b8:c9:
                    be:37:76:96:6c:e2:93:af:bd:c2:07:c6:4b:7d:e6:
                    95:76:03:39:d9:35:cc:c8:f3:5e:21:b2:bb:93:94:
                    ba:eb:0a:36:c5:17:3d:8a:8d:fd:5c:ab:44:61:df:
                    3c:64:b2:c1:83:88:c5:8a:28:c2:e7:05:48:fa:1c:
                    51:69:dd:f6:ae:ce:96:0e:af:76:81:5a:40:01:af:
                    9f:5e:9f:da:56:db:d8:9d:8a:67:8d:dd:71:33:0a:
                    47:4b:a7:05:3c:50:13:8b:c7:74:99:52:f9:13:72:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:67:84:F6:D4:5B:E6:DC:06:2B:B6:EF:3A:2E:C9:0C:64:B1:03:29
            X509v3 Authority Key Identifier:
                keyid:64:AA:8D:F2:92:59:58:BC:4D:2F:95:B9:F6:BD:BE:51:01:12:5D:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKqN8pJZWLxNL5W59r2-UQESXQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/37ff69-235d-4217-abaa-df922683295d/1/ZKqN8pJZWLxNL5W59r2-UQESXQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/37ff69-235d-4217-abaa-df922683295d/1/ZKqN8pJZWLxNL5W59r2-UQESXQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cd:5b:b9:28:e3:61:a5:f1:9f:59:0e:48:a7:b9:6d:97:48:
         77:74:e5:e7:79:fa:06:36:11:e4:30:9b:99:61:bc:b3:e8:13:
         04:6f:1d:51:f3:ce:70:be:df:5f:5c:47:c6:a5:62:f3:c5:25:
         c0:a8:8b:63:ba:d5:94:06:a3:65:a8:13:df:5a:8a:af:ee:65:
         8a:c9:c7:91:46:73:aa:fe:12:fd:9e:6f:7e:97:53:33:fb:d3:
         b1:5b:b0:79:f5:7c:79:7b:23:78:b5:fc:74:8e:39:44:45:9c:
         72:61:2b:71:c3:15:f8:c2:ba:a4:ed:95:9f:96:2d:0f:64:1e:
         6b:59:c1:47:4c:0b:a0:54:6d:e4:2e:fb:6f:fa:0d:c2:e8:95:
         c9:a2:f9:42:48:4a:2b:c1:24:db:39:60:43:2e:15:27:42:39:
         69:e0:27:95:cc:c8:70:5b:ed:2e:e6:8c:5d:68:92:d7:d4:e5:
         66:f2:a7:e0:d1:77:21:56:af:e4:da:ef:53:55:70:eb:12:cc:
         da:94:bf:63:89:9c:11:e8:a5:31:06:23:65:00:b1:39:bb:ab:
         95:8d:5d:ba:50:c3:36:7a:41:5b:25:f1:17:04:9a:82:21:3d:
         3b:c9:9d:36:0f:3e:44:3d:47:1a:da:c3:9a:2d:7b:3a:4c:2b:
         c4:92:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----