Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/232c0a-2739-48ff-a373-13da45d1577e/1/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.mft
File:                     n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.mft (raw, json)
Hash identifier:          eFd+kJ5vZMQGjykM+MnHJktuhMrvGILRj/0J0+6PSqU=
Subject key identifier:   A4:EA:05:73:19:07:AD:6A:B8:A6:94:74:F7:8B:43:8F:45:B6:24:91
Authority key identifier: 9F:91:AE:DE:54:C2:0A:69:A5:CE:57:3C:76:F1:2E:34:E9:B4:A1:74
Certificate issuer:       /CN=9f91aede54c20a69a5ce573c76f12e34e9b4a174
Certificate serial:       0E2726A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/232c0a-2739-48ff-a373-13da45d1577e/1/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.mft
Manifest number:          090B
Signing time:             Thu 21 Apr 2022 06:56:12 +0000
Manifest this update:     Thu 21 Apr 2022 06:56:12 +0000
Manifest next update:     Fri 22 Apr 2022 06:56:12 +0000
Files and hashes:         1: n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.crl (hash: Sfjv+uEqwRaeXXHQG6VfDKp1cAoxv0+XZO/2HdVN6AE=)
                          2: qBDxdNnQ_aSomMmBymjbeEui5ZM.roa (hash: erKKs7RoHHWcA05v60ZAPKtYus6D7O7wGQ4tUxmK9AY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237446816 (0xe2726a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f91aede54c20a69a5ce573c76f12e34e9b4a174
        Validity
            Not Before: Apr 21 06:56:12 2022 GMT
            Not After : Apr 22 06:56:12 2022 GMT
        Subject: CN=a4ea05731907ad6ab8a69474f78b438f45b62491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:1e:7c:26:84:7b:1e:23:35:54:25:05:a0:
                    a9:b4:fd:80:66:ca:35:3c:45:04:4f:71:4c:37:2c:
                    24:4a:3f:d0:df:1f:8f:7c:57:cd:2a:51:15:be:90:
                    6c:65:11:87:b7:0e:9c:6c:b4:e1:1f:b0:6e:d5:d2:
                    f3:89:83:38:2b:9e:88:15:9f:f7:5a:4e:73:11:5c:
                    7f:db:33:c7:b2:43:45:5e:5b:e0:d1:09:90:49:d5:
                    7a:5a:b6:64:ed:71:e8:7c:50:03:9d:01:70:90:b0:
                    4b:36:e2:8d:4e:18:ad:0d:61:fc:fd:55:65:76:1d:
                    6b:df:eb:07:2b:fa:dc:6e:6c:d1:af:7f:7f:ea:66:
                    7e:f3:f8:0e:da:99:78:c1:7b:8d:bc:b7:a9:74:b5:
                    ae:dc:13:01:f7:5c:e9:d7:36:96:de:1d:0d:16:a1:
                    98:d3:00:5a:a3:f4:13:40:b5:fc:6e:c8:45:4e:d1:
                    bf:c2:17:eb:e0:10:5d:65:c8:64:8e:e0:e6:10:67:
                    d6:91:df:98:2b:e6:62:00:7b:30:d0:86:84:d5:50:
                    48:68:2e:33:16:37:fb:05:05:42:dc:bc:e8:f2:36:
                    00:20:7c:5a:7f:62:ab:cd:65:50:cc:f1:ab:a8:a9:
                    94:2d:20:9a:eb:7e:92:10:ba:67:44:91:63:5c:2c:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:05:73:19:07:AD:6A:B8:A6:94:74:F7:8B:43:8F:45:B6:24:91
            X509v3 Authority Key Identifier:
                keyid:9F:91:AE:DE:54:C2:0A:69:A5:CE:57:3C:76:F1:2E:34:E9:B4:A1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/232c0a-2739-48ff-a373-13da45d1577e/1/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/232c0a-2739-48ff-a373-13da45d1577e/1/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:8d:a1:f5:c5:24:1f:1d:90:cf:d1:7b:38:25:0c:58:49:52:
         3d:9e:a4:3e:71:90:7d:ba:11:d3:10:93:0f:56:fe:69:fe:91:
         93:67:a6:0b:8b:89:84:dc:67:fc:47:bf:1b:52:f9:d2:87:97:
         2e:c3:d3:a8:9c:16:90:b8:84:cb:42:44:2c:0f:e0:78:5e:e9:
         84:c1:25:f3:c2:72:78:58:5b:bf:0d:1e:09:95:8c:67:c8:71:
         51:4f:d0:61:cf:d7:fc:df:15:e8:84:f7:e2:bd:95:5c:8b:61:
         84:d0:ab:4e:49:84:ac:10:15:6d:ee:d2:b2:da:17:13:33:ed:
         ec:e4:ee:c6:c5:dd:ee:7a:3a:7a:d9:6b:9d:9e:53:b9:47:83:
         1a:76:48:e1:fd:47:34:5e:ec:0b:bc:e3:0f:68:03:83:ef:ed:
         80:8d:82:01:82:60:78:c9:43:9d:0e:be:5d:ea:ad:a8:19:ba:
         91:f4:82:b5:74:b9:7e:76:f8:71:eb:73:9c:1a:59:f0:12:de:
         23:6b:40:db:4e:b8:52:3d:96:0d:fa:f3:4c:4d:57:cc:76:f0:
         7b:63:f1:30:fe:55:30:a9:3c:63:40:b0:be:50:fa:0b:47:59:
         64:67:90:f1:5c:fa:d5:0a:45:03:bf:61:af:6d:30:90:76:13:
         c1:1f:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----