Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f1375d-ff7c-4989-833b-d493a11a3262/1/3v4NjvT33odAmZRx7biSPBxoWhc.mft
File:                     3v4NjvT33odAmZRx7biSPBxoWhc.mft (raw, json)
Hash identifier:          UmaxIYJIy/Ve1gs1xQ1gFCMcLXguGy6FoOoHQEJXLCo=
Subject key identifier:   03:B6:5B:E8:9B:73:A9:31:B1:74:3E:62:68:B6:33:5A:25:25:77:C0
Authority key identifier: DE:FE:0D:8E:F4:F7:DE:87:40:99:94:71:ED:B8:92:3C:1C:68:5A:17
Certificate issuer:       /CN=defe0d8ef4f7de8740999471edb8923c1c685a17
Certificate serial:       01845AFF85A9370321D4B8A495578F9DAEA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3v4NjvT33odAmZRx7biSPBxoWhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f1375d-ff7c-4989-833b-d493a11a3262/1/3v4NjvT33odAmZRx7biSPBxoWhc.mft
Manifest number:          01B1
Signing time:             Wed 09 Nov 2022 06:06:45 +0000
Manifest this update:     Wed 09 Nov 2022 06:06:45 +0000
Manifest next update:     Thu 10 Nov 2022 06:06:45 +0000
Files and hashes:         1: 3v4NjvT33odAmZRx7biSPBxoWhc.crl (hash: bBgYLev57TnXHdtJbeKR7TVSQ7v4JOoM1A38DBF/dHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5a:ff:85:a9:37:03:21:d4:b8:a4:95:57:8f:9d:ae:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defe0d8ef4f7de8740999471edb8923c1c685a17
        Validity
            Not Before: Nov  9 06:06:45 2022 GMT
            Not After : Nov 10 06:06:45 2022 GMT
        Subject: CN=03b65be89b73a931b1743e6268b6335a252577c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:a2:8b:cb:44:9c:38:20:d6:ba:90:be:c1:
                    65:a6:f2:7a:a7:c3:56:d8:8e:4e:08:97:8b:61:3a:
                    13:19:48:4b:3e:fb:5b:8e:3d:de:19:cc:a8:63:bd:
                    73:e3:2d:03:26:e0:5b:42:4b:51:f4:a9:9c:3d:ee:
                    e3:12:4e:ad:31:06:51:fe:c8:0c:41:0c:e7:5c:e4:
                    99:9c:61:36:9e:23:00:ae:5d:b4:51:62:13:0b:38:
                    20:69:10:00:f6:9c:fb:12:b9:49:31:7f:2f:67:aa:
                    08:0e:37:5f:aa:d0:f0:0f:15:54:2a:df:1c:46:df:
                    58:94:bf:88:be:11:93:09:3f:c0:b9:72:d6:e7:67:
                    91:6f:24:49:d3:d1:a8:59:32:7f:14:a2:c6:87:91:
                    9b:31:42:bc:75:7c:28:98:59:2f:e5:6a:21:32:d0:
                    2b:3b:47:c0:1c:db:32:02:35:e1:d6:1b:42:46:68:
                    0d:c7:95:20:ab:a6:d9:16:fb:7b:73:d8:28:57:a1:
                    53:4b:61:fc:f5:da:03:7c:da:b6:d3:39:90:d1:bf:
                    c9:cd:ac:78:6a:c0:09:34:7a:db:8c:c0:3b:29:60:
                    bc:73:bc:cc:75:2b:fe:1f:30:32:29:d3:6e:89:37:
                    df:13:aa:25:73:40:ca:25:5c:e9:fc:eb:06:68:28:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B6:5B:E8:9B:73:A9:31:B1:74:3E:62:68:B6:33:5A:25:25:77:C0
            X509v3 Authority Key Identifier:
                keyid:DE:FE:0D:8E:F4:F7:DE:87:40:99:94:71:ED:B8:92:3C:1C:68:5A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3v4NjvT33odAmZRx7biSPBxoWhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f1375d-ff7c-4989-833b-d493a11a3262/1/3v4NjvT33odAmZRx7biSPBxoWhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f1375d-ff7c-4989-833b-d493a11a3262/1/3v4NjvT33odAmZRx7biSPBxoWhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:51:fe:1b:a8:35:23:34:0c:76:8c:6e:74:81:e4:52:1b:d5:
         78:6e:ca:06:a5:d6:74:03:ff:e5:40:91:80:97:3b:ce:ba:5a:
         77:e9:b7:11:a4:4f:ce:d4:8c:30:05:a7:9f:07:2e:62:8d:45:
         76:fa:0e:ae:39:6d:c8:d6:ff:3c:05:76:73:8a:8e:c9:a9:be:
         ab:d3:9f:07:8e:76:d2:cb:bf:95:e7:ff:fd:b6:fc:ee:2f:d9:
         64:10:a8:81:a6:fc:c6:98:70:ed:69:77:58:55:e5:78:80:e6:
         0b:44:c8:5b:f2:77:f9:e1:28:4b:fb:19:3b:d9:0e:3a:4f:10:
         b4:e9:43:b2:d6:67:64:2d:ae:73:07:70:41:df:c2:23:91:0d:
         02:48:27:51:4b:f1:b5:95:aa:d0:5d:07:da:bc:4b:8d:37:ba:
         2f:86:52:40:a9:dc:dc:ab:76:cb:e0:2d:a9:b5:0f:2c:f7:e1:
         f5:48:70:e7:fc:ff:ec:bd:db:94:ca:77:6c:f0:46:da:de:c9:
         04:79:31:28:5f:dc:2e:1f:09:87:8a:e2:a6:f9:1a:e2:00:81:
         1c:f4:b6:77:26:2c:db:f5:ca:3d:14:f0:07:09:07:fd:63:6d:
         05:33:23:b4:96:6b:7b:e1:7d:af:09:69:3c:97:d5:0d:05:34:
         69:43:df:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----