Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/78337c-b7fb-4941-be82-70d2a0ef603f/1/9a-rriEz0xerPZdTD0suFV9v3P4.mft
File:                     9a-rriEz0xerPZdTD0suFV9v3P4.mft (raw, json)
Hash identifier:          7lCXYRL7NpstFTKUk+7qX1qAnbuMEBvdit2fn3hPcBM=
Subject key identifier:   FF:DF:D6:76:E7:AA:87:B0:DE:50:1E:07:43:15:02:01:E4:C4:5E:CB
Authority key identifier: F5:AF:AB:AE:21:33:D3:17:AB:3D:97:53:0F:4B:2E:15:5F:6F:DC:FE
Certificate issuer:       /CN=f5afabae2133d317ab3d97530f4b2e155f6fdcfe
Certificate serial:       07E36224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9a-rriEz0xerPZdTD0suFV9v3P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/78337c-b7fb-4941-be82-70d2a0ef603f/1/9a-rriEz0xerPZdTD0suFV9v3P4.mft
Manifest number:          08C5
Signing time:             Tue 29 Mar 2022 04:50:27 +0000
Manifest this update:     Tue 29 Mar 2022 04:50:27 +0000
Manifest next update:     Wed 30 Mar 2022 04:50:27 +0000
Files and hashes:         1: 9a-rriEz0xerPZdTD0suFV9v3P4.crl (hash: YZYnCMT3c10p5YWiSnAQ6txUe8V86HV6sM0muIXbJg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132342308 (0x7e36224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5afabae2133d317ab3d97530f4b2e155f6fdcfe
        Validity
            Not Before: Mar 29 04:50:27 2022 GMT
            Not After : Mar 30 04:50:27 2022 GMT
        Subject: CN=ffdfd676e7aa87b0de501e0743150201e4c45ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:a8:22:58:7b:d0:3e:99:39:7b:66:61:90:
                    33:be:2b:80:71:1b:d6:20:e8:0f:25:fd:28:5f:79:
                    7e:b3:09:5a:12:8d:34:c6:21:7f:11:4a:b4:bf:1d:
                    ee:e6:9a:e3:b6:e0:4a:d9:a4:c9:5a:eb:e3:16:33:
                    f9:4a:3d:b5:02:a5:f3:69:7a:18:ac:4b:3b:7e:f7:
                    87:5e:1e:f6:d8:33:06:05:7b:d2:f0:09:ef:94:97:
                    59:7b:1b:ba:0e:8d:80:c4:c7:84:b3:cd:b7:59:1e:
                    d3:d8:2e:67:55:ba:f8:38:ce:0d:da:f4:3e:ab:be:
                    45:38:5c:d7:d7:18:00:be:61:14:32:b1:9f:bb:2a:
                    ad:a8:87:ea:33:44:ba:cf:d7:eb:66:2a:e1:bf:6d:
                    1a:ac:d5:0e:ab:4a:a5:6d:04:13:d4:ec:d5:b8:34:
                    71:a1:9c:5f:18:30:a2:5e:be:66:ae:60:a5:67:de:
                    fc:53:06:e0:4d:eb:0c:2f:9b:1b:d6:7d:47:87:a7:
                    02:1e:c5:3e:bd:ff:0c:11:67:de:5f:77:6a:b4:a3:
                    78:6a:83:65:5a:f0:9e:f8:0b:37:40:58:5f:81:42:
                    44:6a:be:e9:43:2a:7e:f2:14:d6:4b:46:66:21:55:
                    68:79:61:d6:c1:b6:fa:a9:a4:60:8f:6d:2e:89:10:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:D6:76:E7:AA:87:B0:DE:50:1E:07:43:15:02:01:E4:C4:5E:CB
            X509v3 Authority Key Identifier:
                keyid:F5:AF:AB:AE:21:33:D3:17:AB:3D:97:53:0F:4B:2E:15:5F:6F:DC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a-rriEz0xerPZdTD0suFV9v3P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/78337c-b7fb-4941-be82-70d2a0ef603f/1/9a-rriEz0xerPZdTD0suFV9v3P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/78337c-b7fb-4941-be82-70d2a0ef603f/1/9a-rriEz0xerPZdTD0suFV9v3P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:fb:fa:f6:87:34:9b:d2:ec:b7:73:94:ab:98:53:d8:79:85:
         49:a6:e2:5b:c3:2e:74:2d:22:52:57:38:66:01:cc:2a:a4:07:
         12:18:00:c0:6c:d3:d7:f3:60:ef:cc:f4:fd:52:ba:53:27:a8:
         f2:df:d8:7b:8e:6a:a4:f2:dd:c4:0e:c3:e1:7e:38:c2:f5:94:
         13:3b:28:d9:64:eb:ea:2c:df:75:32:92:e5:c3:8a:94:14:f0:
         73:29:fa:31:35:8a:f8:03:d1:8c:53:0a:f6:49:db:49:6e:c2:
         28:6b:3a:b7:b7:5d:40:fa:b7:ff:9f:60:43:ec:c7:86:9a:53:
         68:1e:0e:8b:45:92:54:90:34:63:f4:e8:c0:6c:df:28:59:0f:
         4d:53:f6:37:bf:f2:a5:f4:f5:bb:61:10:ea:3e:c3:7d:19:1e:
         a7:ef:06:1d:f9:0e:24:60:6f:33:03:bf:b3:30:03:46:d6:76:
         ca:88:29:18:e0:97:c0:9f:b4:63:8b:d1:eb:5f:47:07:2e:14:
         e6:97:b6:31:74:7d:38:f4:c9:8b:94:82:19:28:3c:68:08:1c:
         a3:a2:e8:75:fc:f1:e7:9d:f2:d0:69:8c:99:98:7f:1a:da:2e:
         e8:0b:78:f8:71:b9:bd:12:ae:26:17:1e:98:5f:eb:d6:59:54:
         52:ff:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----