Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/926186-99a8-4ee4-90b8-1a05cdb1cb51/1/NqXrJDWmx_yO92P8fE6WVQeXBRM.mft
File:                     NqXrJDWmx_yO92P8fE6WVQeXBRM.mft (raw, json)
Hash identifier:          +evO0uDlpCCpB6hGM4+8ZdgGFIRJJ5Q1BEd8GZsl3Og=
Subject key identifier:   5E:EF:34:E5:A7:F3:1F:96:DD:A4:D8:E3:27:04:7E:FC:85:D7:9D:1B
Authority key identifier: 36:A5:EB:24:35:A6:C7:FC:8E:F7:63:FC:7C:4E:96:55:07:97:05:13
Certificate issuer:       /CN=36a5eb2435a6c7fc8ef763fc7c4e965507970513
Certificate serial:       0183D06451E7BED04212A54DD62491988F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NqXrJDWmx_yO92P8fE6WVQeXBRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/926186-99a8-4ee4-90b8-1a05cdb1cb51/1/NqXrJDWmx_yO92P8fE6WVQeXBRM.mft
Manifest number:          01F5
Signing time:             Thu 13 Oct 2022 08:09:38 +0000
Manifest this update:     Thu 13 Oct 2022 08:09:38 +0000
Manifest next update:     Fri 14 Oct 2022 08:09:38 +0000
Files and hashes:         1: NqXrJDWmx_yO92P8fE6WVQeXBRM.crl (hash: Y3YPyqH6FQFqlGhNYrOX5fnz2Uu53S5JQljpQ5OHMs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d0:64:51:e7:be:d0:42:12:a5:4d:d6:24:91:98:8f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a5eb2435a6c7fc8ef763fc7c4e965507970513
        Validity
            Not Before: Oct 13 08:09:38 2022 GMT
            Not After : Oct 14 08:09:38 2022 GMT
        Subject: CN=5eef34e5a7f31f96dda4d8e327047efc85d79d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2d:f8:23:cb:bd:79:5f:87:e0:be:ed:18:c9:
                    a4:29:53:73:94:fd:19:36:af:96:f2:d7:35:51:0f:
                    27:86:aa:80:ca:6e:f6:d9:88:57:fd:e4:e8:c6:c0:
                    1e:c1:c8:38:0c:b8:5a:9b:ed:79:56:c9:0b:19:1e:
                    59:7d:ea:71:70:22:d8:64:e1:04:9b:6d:fe:a2:6c:
                    b3:69:e4:e8:b1:76:89:b8:3c:9c:2b:9c:8f:38:66:
                    e7:fe:b1:4d:b3:f2:89:44:4c:ff:ae:24:2e:17:01:
                    14:da:0a:85:64:d1:49:e7:60:7f:48:7e:5a:f7:1d:
                    e0:7f:84:e8:40:5d:75:5d:9f:5b:58:9e:27:90:18:
                    21:1a:10:ec:67:86:03:5b:48:de:20:ac:27:d7:0a:
                    3b:e5:6c:d6:78:36:58:d2:70:fd:e9:ad:bd:3f:07:
                    ef:9a:7d:7e:46:c7:8f:0e:e5:3b:ef:0a:19:c0:2c:
                    ba:30:e5:32:f5:0e:fb:e9:7a:fc:2b:f0:bb:99:2c:
                    d4:c1:7f:90:14:39:00:2a:5c:72:3b:7a:3b:f2:cd:
                    74:9c:60:cc:10:3a:a6:b3:7d:46:52:5c:a5:79:d7:
                    2e:81:68:f9:a2:26:33:71:d0:e8:41:b5:5e:9a:cd:
                    d4:19:d4:b4:e4:1a:20:e8:f3:bd:b8:06:99:28:9e:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EF:34:E5:A7:F3:1F:96:DD:A4:D8:E3:27:04:7E:FC:85:D7:9D:1B
            X509v3 Authority Key Identifier:
                keyid:36:A5:EB:24:35:A6:C7:FC:8E:F7:63:FC:7C:4E:96:55:07:97:05:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqXrJDWmx_yO92P8fE6WVQeXBRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/926186-99a8-4ee4-90b8-1a05cdb1cb51/1/NqXrJDWmx_yO92P8fE6WVQeXBRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/926186-99a8-4ee4-90b8-1a05cdb1cb51/1/NqXrJDWmx_yO92P8fE6WVQeXBRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:b7:e3:48:fd:48:2f:d2:4b:7e:c9:4e:98:c9:0c:5e:be:
         e3:6f:6e:bc:d5:9a:a9:41:0b:88:30:ab:99:18:b8:ea:93:b6:
         53:d9:98:39:7a:39:77:e5:9e:b3:ac:36:d0:a3:76:0c:35:9a:
         03:0e:49:39:70:6b:a8:9a:c4:21:ea:3f:ac:14:0e:bb:1c:60:
         e2:a6:2c:62:4b:b9:20:77:0f:51:b7:86:39:a8:ee:22:fc:05:
         41:9a:ea:f4:4d:ba:e3:5b:89:13:d9:76:fb:c8:78:73:3a:a8:
         ea:4b:06:21:63:dd:22:10:4b:ab:94:ff:9f:77:f7:3b:bf:08:
         96:9a:57:3b:20:07:b9:c6:f0:98:f3:07:76:60:91:ea:98:a0:
         f1:6e:64:6e:af:2b:4a:7f:93:e0:f2:e9:75:19:27:d6:53:69:
         d4:1c:27:f3:19:5a:f1:d2:2f:e9:85:b8:9e:e6:9e:0c:b9:b3:
         2b:87:3a:2d:32:b0:9e:59:a7:3d:2b:0c:7a:01:ad:ae:cc:a5:
         16:54:e6:3c:98:d7:97:b5:a5:9e:1f:0f:c2:85:b1:94:fa:f1:
         06:4e:8d:fc:a0:40:c0:12:d8:a5:9b:20:c4:60:83:c1:75:ff:
         86:6d:41:bd:d6:72:df:86:a6:55:3d:dc:ea:14:85:2d:00:e6:
         7c:ab:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----