Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/00bfe0-c745-47b7-b41b-cad78db5a9fd/1/bJK0Bom5KBVuyjR34k_0_DIK_-Y.mft
File:                     bJK0Bom5KBVuyjR34k_0_DIK_-Y.mft (raw, json)
Hash identifier:          RWkN/zy3wIr05BwXZBwHQc4WYhUbwrONgWcjegCC0Jw=
Subject key identifier:   19:25:35:33:51:77:80:9F:58:FA:BA:73:DD:62:CD:82:59:7D:E2:65
Authority key identifier: 6C:92:B4:06:89:B9:28:15:6E:CA:34:77:E2:4F:F4:FC:32:0A:FF:E6
Certificate issuer:       /CN=6c92b40689b928156eca3477e24ff4fc320affe6
Certificate serial:       01850699189362FE586D6E9E002393C7EC11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJK0Bom5KBVuyjR34k_0_DIK_-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/00bfe0-c745-47b7-b41b-cad78db5a9fd/1/bJK0Bom5KBVuyjR34k_0_DIK_-Y.mft
Manifest number:          086C
Signing time:             Mon 12 Dec 2022 13:49:34 +0000
Manifest this update:     Mon 12 Dec 2022 13:49:34 +0000
Manifest next update:     Tue 13 Dec 2022 13:49:34 +0000
Files and hashes:         1: bJK0Bom5KBVuyjR34k_0_DIK_-Y.crl (hash: /vUhMQ0f3KcOhePbMJjStPG1y2gX+M/x+HBN+8tS4z8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:06:99:18:93:62:fe:58:6d:6e:9e:00:23:93:c7:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c92b40689b928156eca3477e24ff4fc320affe6
        Validity
            Not Before: Dec 12 13:49:34 2022 GMT
            Not After : Dec 13 13:49:34 2022 GMT
        Subject: CN=192535335177809f58faba73dd62cd82597de265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:a9:25:0d:b3:85:2a:21:fd:1b:94:68:30:
                    e1:b5:4f:d2:ea:c3:c4:9b:85:d1:19:f6:38:65:27:
                    6a:bf:fa:e9:b2:fa:fb:e7:45:0b:21:4e:e5:53:ce:
                    fd:2c:e9:f0:87:00:d3:fb:e7:a9:ff:0a:69:a7:09:
                    80:62:a0:7c:c5:d4:bf:7b:28:30:e6:14:22:95:16:
                    e6:0c:ff:82:91:01:9a:28:44:ef:d0:87:f9:66:45:
                    62:15:8e:c5:5f:a4:e0:cb:dd:36:0a:1f:69:8b:70:
                    96:0e:86:18:56:23:4e:d8:71:cd:24:64:b3:d2:83:
                    53:2d:c2:cc:61:67:6e:26:53:c0:75:f2:1a:d1:ec:
                    7d:f0:20:15:ca:12:85:8d:f7:c2:dc:e6:4d:69:bb:
                    92:eb:d0:5d:ae:7c:b8:50:2d:7e:7e:d7:1a:89:dd:
                    52:ef:17:4d:bb:e4:86:99:ad:7d:e9:00:e2:e8:45:
                    b6:05:11:5a:98:ba:4a:5d:ff:92:9d:9d:f2:96:e7:
                    2e:07:c8:e9:40:1b:58:11:de:08:3d:54:c3:36:02:
                    05:34:1f:01:5a:08:ed:77:dc:90:34:90:10:1c:8f:
                    5e:3e:2e:5b:78:e1:d8:70:c4:b7:b8:03:cb:9e:80:
                    5d:e0:34:a1:b3:5f:17:82:58:ec:d0:af:08:f8:7f:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:35:33:51:77:80:9F:58:FA:BA:73:DD:62:CD:82:59:7D:E2:65
            X509v3 Authority Key Identifier:
                keyid:6C:92:B4:06:89:B9:28:15:6E:CA:34:77:E2:4F:F4:FC:32:0A:FF:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJK0Bom5KBVuyjR34k_0_DIK_-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/00bfe0-c745-47b7-b41b-cad78db5a9fd/1/bJK0Bom5KBVuyjR34k_0_DIK_-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/00bfe0-c745-47b7-b41b-cad78db5a9fd/1/bJK0Bom5KBVuyjR34k_0_DIK_-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:3b:b8:c1:00:41:74:2f:5a:ae:5e:19:23:d6:ad:21:8f:0f:
         8e:87:1c:de:75:9b:63:80:67:66:3a:77:66:ff:01:65:e8:6a:
         9b:1d:1b:f9:2a:44:0f:26:c9:07:8b:a6:21:fb:9a:16:4c:c5:
         2b:aa:50:24:b4:8a:19:00:0d:ab:6e:f2:02:cc:0a:80:59:db:
         00:a2:9c:0a:51:7e:d3:cd:6c:1f:6d:e5:d1:7f:4e:65:21:1c:
         c0:5c:e1:fd:23:62:0b:12:47:1c:5c:cd:9f:6d:66:82:2f:f9:
         f5:c2:48:42:85:c1:d5:fe:42:d1:d9:20:08:1c:c0:82:21:8f:
         68:f3:83:01:27:0c:c1:71:88:5c:51:68:1d:41:94:68:21:a2:
         b0:6a:ab:65:f7:67:31:9e:30:7d:1b:e9:7b:30:dc:bd:3b:62:
         3c:e8:6a:ed:86:75:03:20:1f:2f:f4:44:8b:12:31:00:d6:dd:
         38:99:5e:2d:20:7a:dc:ca:96:b5:87:0e:a7:bc:f4:76:0c:3f:
         ba:9d:ff:f9:6f:44:c7:09:66:2e:9b:de:f5:d1:9d:34:d3:8a:
         ab:bb:da:52:50:e1:60:90:bb:5f:a8:11:6c:2f:42:d9:08:34:
         2f:94:45:7b:5d:d4:cc:53:b4:67:00:cb:4d:a0:b7:dc:9c:dc:
         23:4d:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----