Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d40ddf-de5b-4e20-923c-480279cfb22b/1/2wLhy_ge_WJkxY-IVgI1zEdBVOg.mft
File:                     2wLhy_ge_WJkxY-IVgI1zEdBVOg.mft (raw, json)
Hash identifier:          o0mhjpa4ynne/v7BzvxQKuaMhJvGB3digUSdFXo6qAA=
Subject key identifier:   B8:08:CD:86:4E:E2:14:7E:30:AE:CA:7B:6E:5B:15:3A:86:C2:26:9C
Authority key identifier: DB:02:E1:CB:F8:1E:FD:62:64:C5:8F:88:56:02:35:CC:47:41:54:E8
Certificate issuer:       /CN=db02e1cbf81efd6264c58f88560235cc474154e8
Certificate serial:       01837CE96BF6033E8DFF9C4D987C432E9F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wLhy_ge_WJkxY-IVgI1zEdBVOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d40ddf-de5b-4e20-923c-480279cfb22b/1/2wLhy_ge_WJkxY-IVgI1zEdBVOg.mft
Manifest number:          0AEE
Signing time:             Tue 27 Sep 2022 03:06:55 +0000
Manifest this update:     Tue 27 Sep 2022 03:06:55 +0000
Manifest next update:     Wed 28 Sep 2022 03:06:55 +0000
Files and hashes:         1: 2wLhy_ge_WJkxY-IVgI1zEdBVOg.crl (hash: LWO7YdUJ1xmYDBW/9HMFYRJOJdgxjxpmg5Kue1GXaxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7c:e9:6b:f6:03:3e:8d:ff:9c:4d:98:7c:43:2e:9f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db02e1cbf81efd6264c58f88560235cc474154e8
        Validity
            Not Before: Sep 27 03:06:55 2022 GMT
            Not After : Sep 28 03:06:55 2022 GMT
        Subject: CN=b808cd864ee2147e30aeca7b6e5b153a86c2269c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:56:b6:b8:21:f5:36:74:23:4f:83:20:22:
                    87:16:44:18:af:e6:24:c4:a8:c5:ac:f6:e2:fb:20:
                    6b:14:72:9c:af:b8:89:53:12:5a:39:7d:6f:fc:79:
                    de:b1:dd:55:89:10:c9:6c:e9:38:2f:3a:dd:97:ac:
                    77:59:cf:c0:1d:2c:23:9a:ab:65:ff:ff:7a:c4:0f:
                    fd:42:c5:6f:17:fc:ed:3e:4f:e0:49:7e:a0:95:eb:
                    d0:41:e1:1e:65:27:5b:8e:2a:25:32:ac:f5:c0:f0:
                    8c:44:2c:87:17:d1:a5:7b:7c:3d:5c:f1:c7:3f:24:
                    e8:5c:53:de:7e:68:8d:95:bb:70:02:11:82:92:d2:
                    f1:bf:6f:d0:f3:a5:f3:ec:bb:3f:ef:58:2c:a4:9e:
                    9a:82:aa:33:00:a6:ef:a0:2a:fc:60:11:3a:6f:1f:
                    34:8d:bf:4a:44:08:ae:73:e5:61:53:16:c4:ad:d0:
                    9f:e9:64:00:fc:13:47:51:a7:09:7e:f7:a9:25:92:
                    58:cd:b2:ce:bc:61:3e:b8:15:ad:4e:55:66:d9:85:
                    36:c6:a1:c4:1d:7a:d1:2a:5e:c6:0c:c7:da:e9:8f:
                    b6:af:f3:63:06:ac:39:c1:db:df:bf:21:4b:44:79:
                    e5:38:71:ac:bc:38:e4:14:95:06:bb:fd:62:af:dc:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:08:CD:86:4E:E2:14:7E:30:AE:CA:7B:6E:5B:15:3A:86:C2:26:9C
            X509v3 Authority Key Identifier:
                keyid:DB:02:E1:CB:F8:1E:FD:62:64:C5:8F:88:56:02:35:CC:47:41:54:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wLhy_ge_WJkxY-IVgI1zEdBVOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d40ddf-de5b-4e20-923c-480279cfb22b/1/2wLhy_ge_WJkxY-IVgI1zEdBVOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d40ddf-de5b-4e20-923c-480279cfb22b/1/2wLhy_ge_WJkxY-IVgI1zEdBVOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:da:1c:64:bc:59:67:1f:bb:6b:a7:28:9b:b7:f2:d4:21:42:
         75:5f:7e:ce:10:d0:fe:dd:88:40:b3:e8:7c:21:45:0d:f3:2d:
         82:31:37:0f:12:98:a3:d6:94:26:91:02:85:00:6a:ae:44:38:
         32:3b:8f:8b:1d:38:ff:37:18:c3:14:dd:df:86:f8:ff:87:fc:
         61:ea:ac:9c:90:5d:2f:0c:22:e7:61:ef:e7:35:a4:46:03:0d:
         6d:a3:fe:5d:e2:1b:6b:c4:74:45:ae:84:d7:15:67:94:9f:eb:
         3e:4e:0e:59:df:22:b3:8f:b3:a5:c4:c7:28:4f:7e:c7:be:11:
         e6:27:3c:78:74:10:73:ed:2a:9a:41:03:21:2e:5f:2b:d1:99:
         54:49:e6:2e:71:67:5d:ff:25:81:2c:f9:14:48:da:44:76:b8:
         63:82:bb:bc:6c:50:6c:ac:7f:c2:a3:af:97:2f:ba:a6:9e:ee:
         3c:1a:c2:e1:fc:b6:42:d2:b5:94:a9:d7:88:74:f2:01:c3:2a:
         84:50:f1:dd:14:1d:e0:e0:5e:90:04:34:c1:9b:8a:84:fe:6f:
         ad:0d:64:d9:2f:24:ac:24:2a:2c:1b:87:24:46:b4:ca:5a:74:
         fc:77:bc:b1:12:b7:c3:6c:e8:a6:d4:b4:42:78:1e:5a:ab:59:
         06:fc:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----