Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/278531-9fe8-472c-a1a4-60e361463bc9/1/5-PNr_42vsXkaBd_G2QU0glkc_E.mft
File:                     5-PNr_42vsXkaBd_G2QU0glkc_E.mft (raw, json)
Hash identifier:          lL5vhsCRd3GD4Q6jq+/XvFX9h+zKhlp+uWfTUf7LlcM=
Subject key identifier:   2D:32:52:E3:92:BF:0D:C2:E4:F6:6E:8E:58:A2:A8:DB:54:86:2C:11
Authority key identifier: E7:E3:CD:AF:FE:36:BE:C5:E4:68:17:7F:1B:64:14:D2:09:64:73:F1
Certificate issuer:       /CN=e7e3cdaffe36bec5e468177f1b6414d2096473f1
Certificate serial:       0A5DC706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-PNr_42vsXkaBd_G2QU0glkc_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/278531-9fe8-472c-a1a4-60e361463bc9/1/5-PNr_42vsXkaBd_G2QU0glkc_E.mft
Manifest number:          08DF
Signing time:             Wed 06 Apr 2022 08:13:10 +0000
Manifest this update:     Wed 06 Apr 2022 08:13:10 +0000
Manifest next update:     Thu 07 Apr 2022 08:13:10 +0000
Files and hashes:         1: 5-PNr_42vsXkaBd_G2QU0glkc_E.crl (hash: 1mjskUN5O8HBZzw9LLca+KccTR5nzaf5K6y/knykOoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173917958 (0xa5dc706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e3cdaffe36bec5e468177f1b6414d2096473f1
        Validity
            Not Before: Apr  6 08:13:10 2022 GMT
            Not After : Apr  7 08:13:10 2022 GMT
        Subject: CN=2d3252e392bf0dc2e4f66e8e58a2a8db54862c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:43:e3:a4:23:21:3f:bb:fb:b4:b1:25:1b:
                    46:fc:20:e8:67:ec:f2:41:2f:a9:a7:03:23:87:e0:
                    a5:30:86:a0:fd:87:21:43:79:7a:86:84:d3:0d:dd:
                    69:14:4d:64:bc:d7:a7:de:1d:91:10:a3:bd:a7:cc:
                    80:b3:26:94:cd:28:e2:6f:20:f8:59:c2:ee:7f:0e:
                    91:23:bb:86:98:85:2f:32:ef:69:db:51:48:90:ca:
                    d0:64:f0:30:5f:dd:cb:36:fa:32:49:26:20:e0:87:
                    f6:8e:9e:76:49:09:fe:e6:87:24:a5:ac:20:cd:eb:
                    47:d0:f9:1f:fc:e1:da:07:7a:70:fc:8c:d6:8e:81:
                    11:9a:81:3c:ab:59:0c:54:21:2d:0e:8a:a2:57:10:
                    e5:49:7d:b2:7f:38:20:ef:63:45:4f:d4:3b:20:a0:
                    59:f0:64:5d:a6:6d:9f:b3:36:af:65:02:66:42:00:
                    62:db:c2:3b:6c:06:87:1d:a9:c9:f4:23:fc:83:c5:
                    c4:ca:aa:95:69:93:1c:1d:37:18:05:ef:4a:6d:be:
                    e3:95:b5:b5:58:ed:98:37:fc:a8:53:b3:b8:d8:fd:
                    4b:dc:09:02:4e:b8:cc:12:79:6d:8c:c5:69:87:88:
                    aa:0b:17:e9:1d:2e:4d:b4:21:e8:66:f6:de:b0:5c:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:52:E3:92:BF:0D:C2:E4:F6:6E:8E:58:A2:A8:DB:54:86:2C:11
            X509v3 Authority Key Identifier:
                keyid:E7:E3:CD:AF:FE:36:BE:C5:E4:68:17:7F:1B:64:14:D2:09:64:73:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-PNr_42vsXkaBd_G2QU0glkc_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/278531-9fe8-472c-a1a4-60e361463bc9/1/5-PNr_42vsXkaBd_G2QU0glkc_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/278531-9fe8-472c-a1a4-60e361463bc9/1/5-PNr_42vsXkaBd_G2QU0glkc_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:44:4b:29:9d:db:ce:f2:da:ff:a8:fb:c1:09:31:6a:31:61:
         87:45:9f:56:9c:35:bf:99:4b:e8:ea:6c:0c:9a:74:67:3d:5a:
         4d:81:0f:f0:5b:fa:92:1f:ed:a4:7a:75:02:e7:fb:31:b5:ba:
         1f:e2:cf:4e:a6:04:19:73:94:f2:00:84:76:34:72:65:57:ec:
         40:ab:c6:a2:0a:a3:af:27:2d:45:3d:e0:9e:3d:4b:a7:f1:44:
         11:ea:64:a0:86:49:44:93:1a:34:fc:29:22:13:c8:a2:44:15:
         22:3c:9a:4d:ee:bb:1c:6d:be:75:7e:f2:fe:b4:30:32:72:65:
         f0:ee:c5:cf:d8:97:64:66:fb:40:07:4e:69:2d:01:0a:f1:9f:
         f3:7a:0e:dc:df:36:3f:32:23:40:6a:eb:f2:de:00:2d:94:6e:
         d0:f2:1b:f7:43:4d:d7:22:9a:f3:c3:41:f5:02:05:c1:89:34:
         80:3a:aa:ea:05:1f:70:3f:4a:63:f3:38:8c:89:a8:15:5c:5f:
         35:c9:2f:e5:55:d4:df:e1:66:6b:0d:cc:ff:c1:b4:40:e9:5e:
         cd:3f:fb:0f:0f:34:23:46:63:fd:2c:3e:70:a8:a2:b5:aa:76:
         18:68:bc:73:c6:fd:9e:f1:00:8f:54:35:f0:e4:03:27:f3:6f:
         85:d5:89:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----