Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/08FBQvyIVwjQzyjVgM0sFtvBSiU.mft
File:                     08FBQvyIVwjQzyjVgM0sFtvBSiU.mft (raw, json)
Hash identifier:          UmdRdIgdaypV1C5Hu3aQFXmtq92w03L84gb0qA4YZvk=
Subject key identifier:   0E:1D:F4:2A:65:F8:60:D6:C0:09:9E:57:EE:65:73:32:D5:B4:23:8A
Authority key identifier: D3:C1:41:42:FC:88:57:08:D0:CF:28:D5:80:CD:2C:16:DB:C1:4A:25
Certificate issuer:       /CN=d3c14142fc885708d0cf28d580cd2c16dbc14a25
Certificate serial:       01CA4098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08FBQvyIVwjQzyjVgM0sFtvBSiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/08FBQvyIVwjQzyjVgM0sFtvBSiU.mft
Manifest number:          025A
Signing time:             Fri 27 May 2022 14:56:13 +0000
Manifest this update:     Fri 27 May 2022 14:56:13 +0000
Manifest next update:     Sat 28 May 2022 14:56:13 +0000
Files and hashes:         1: 08FBQvyIVwjQzyjVgM0sFtvBSiU.crl (hash: 6hVI9okvaTuYf+GvQhI4rEEMtHz2s0tn/Lq7nwamJR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30032024 (0x1ca4098)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c14142fc885708d0cf28d580cd2c16dbc14a25
        Validity
            Not Before: May 27 14:56:13 2022 GMT
            Not After : May 28 14:56:13 2022 GMT
        Subject: CN=0e1df42a65f860d6c0099e57ee657332d5b4238a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:a6:61:7e:2f:5f:15:69:cc:b9:26:f3:f6:
                    df:6b:99:ee:7f:65:b8:c8:2b:b2:7d:8c:c6:12:ed:
                    b4:79:46:e0:93:37:aa:7e:67:a0:61:99:c3:20:91:
                    d9:a2:58:55:71:fb:94:48:db:53:f7:e2:8f:f9:c4:
                    77:d9:1b:1e:e9:55:c2:ef:73:69:76:eb:8c:be:73:
                    60:01:e4:e3:1d:4d:58:db:7d:d2:ac:d6:ca:6a:0f:
                    a4:0d:2b:90:1f:ae:31:e1:f1:e9:51:27:dd:c0:25:
                    09:93:e9:98:20:07:8a:e2:2b:a8:25:19:a9:e8:68:
                    68:98:fa:b7:96:71:4c:87:f9:eb:eb:7a:c7:13:8b:
                    bc:4d:6e:cd:70:6f:13:70:54:17:0a:9e:a0:f2:42:
                    f9:5f:d9:5e:5b:5f:f4:92:c9:e6:9d:eb:d3:9b:26:
                    d2:b5:c3:8d:55:64:89:a7:95:fd:58:dd:9e:34:81:
                    d6:b8:53:2d:82:d0:86:42:9c:c1:f5:d6:cb:9c:f7:
                    7c:a4:8e:96:8c:d0:98:0d:be:47:ac:ad:a5:f4:0e:
                    74:db:6d:fc:06:65:85:6c:9d:f2:cb:86:b0:0e:c8:
                    81:67:50:b6:fa:14:15:f6:58:2b:1b:a3:9d:92:2c:
                    04:39:7a:5d:92:73:50:5f:2a:59:ab:89:ae:ec:6e:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1D:F4:2A:65:F8:60:D6:C0:09:9E:57:EE:65:73:32:D5:B4:23:8A
            X509v3 Authority Key Identifier:
                keyid:D3:C1:41:42:FC:88:57:08:D0:CF:28:D5:80:CD:2C:16:DB:C1:4A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08FBQvyIVwjQzyjVgM0sFtvBSiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/08FBQvyIVwjQzyjVgM0sFtvBSiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/08FBQvyIVwjQzyjVgM0sFtvBSiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:24:4b:38:1d:a0:2f:1d:38:24:66:b2:a6:7d:97:38:e2:3e:
         53:80:e1:34:bb:a5:24:9e:25:94:30:e6:33:f3:dd:90:67:8c:
         3f:51:72:df:bb:be:ee:b8:36:ac:48:49:87:cf:44:0c:16:22:
         cc:78:d3:d6:4a:f6:d5:03:3b:08:26:62:bc:bc:9a:8e:16:18:
         da:b7:a4:27:1a:f1:96:c6:29:df:96:57:ca:3d:9c:1a:b6:06:
         e9:cd:2f:51:10:21:ca:a1:39:86:70:fd:64:0f:0e:16:28:53:
         36:68:ee:85:a5:39:8f:48:a8:06:8b:b0:62:9a:87:d8:7e:35:
         06:f3:f3:3f:2c:dd:e6:44:46:5d:92:26:1a:bc:63:6d:eb:84:
         a7:43:e6:b6:8f:13:40:f7:a3:c1:65:e2:55:65:33:60:b9:46:
         7a:09:ee:62:49:c4:8e:55:a2:ef:a3:7c:eb:70:48:d3:e2:0c:
         d5:75:0c:71:98:2d:7b:8f:e9:34:8a:0b:dc:8d:2e:16:ca:d1:
         a5:60:d8:69:3c:6e:17:da:54:17:da:6a:cc:c7:46:4e:30:7e:
         4b:cc:fa:2e:82:83:f0:19:aa:36:7e:62:b0:59:6a:00:b4:ce:
         26:72:d5:43:e8:fb:6b:39:be:6d:ad:79:22:9c:a2:ad:0c:96:
         7f:83:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----