Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/749c0b-5aa6-46f7-ad1e-9b12cc1bc2c2/1/2OunMPYQPv2ZMmqaJf1e3v5evpM.mft
File:                     2OunMPYQPv2ZMmqaJf1e3v5evpM.mft (raw, json)
Hash identifier:          HmFuu/03/PqO7RI8bbFZ+J0O0lyNLnEPFPQGOZoVwNo=
Subject key identifier:   8A:88:5E:69:5F:79:07:57:0F:B7:25:0F:0B:0F:3C:04:D2:60:B9:AA
Authority key identifier: D8:EB:A7:30:F6:10:3E:FD:99:32:6A:9A:25:FD:5E:DE:FE:5E:BE:93
Certificate issuer:       /CN=d8eba730f6103efd99326a9a25fd5edefe5ebe93
Certificate serial:       3A832F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2OunMPYQPv2ZMmqaJf1e3v5evpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/749c0b-5aa6-46f7-ad1e-9b12cc1bc2c2/1/2OunMPYQPv2ZMmqaJf1e3v5evpM.mft
Manifest number:          43
Signing time:             Thu 19 May 2022 01:56:21 +0000
Manifest this update:     Thu 19 May 2022 01:56:21 +0000
Manifest next update:     Fri 20 May 2022 01:56:21 +0000
Files and hashes:         1: 2OunMPYQPv2ZMmqaJf1e3v5evpM.crl (hash: kQsEYJt5Za8eE0jStErxBqIpfT//3qi+QxKmaB7h8tc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3834671 (0x3a832f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8eba730f6103efd99326a9a25fd5edefe5ebe93
        Validity
            Not Before: May 19 01:56:21 2022 GMT
            Not After : May 20 01:56:21 2022 GMT
        Subject: CN=8a885e695f7907570fb7250f0b0f3c04d260b9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:47:66:98:bd:67:63:50:ba:20:2f:d5:fa:
                    91:00:15:4a:d5:90:6c:4a:c6:6b:e4:55:93:c2:82:
                    60:56:e1:8f:e5:20:70:b2:7c:a3:c1:10:c5:a8:d8:
                    e0:d1:2d:85:40:c4:bf:3e:35:a7:ff:1c:34:b8:99:
                    a8:f6:a3:ba:5e:eb:0f:fc:b5:b3:58:db:a5:78:80:
                    66:c7:89:95:f5:be:9e:e0:8a:ee:27:a2:1e:25:67:
                    de:c7:b8:46:10:ac:cc:b6:60:3f:12:8c:d4:3b:15:
                    6a:0d:4d:8d:d0:a9:1f:72:1b:3b:31:3b:1b:f2:9e:
                    7b:af:ae:66:4d:c1:c3:34:b7:c6:2b:7d:ec:18:eb:
                    1a:2b:40:ae:b1:8c:94:72:af:4e:09:11:4c:f2:2d:
                    9a:a3:71:46:34:e6:9b:84:bb:2a:06:bd:34:71:36:
                    ef:16:77:df:ef:f1:42:b3:8d:18:84:89:af:ca:9a:
                    f6:bf:94:3b:44:42:53:1a:d9:d2:59:de:35:f8:46:
                    20:d6:2c:1f:ff:ef:04:6c:f7:50:51:cd:64:33:74:
                    19:c6:1e:90:de:c2:85:af:f0:d1:e8:c6:67:ec:98:
                    c2:ff:9c:70:16:b2:73:db:31:be:81:81:2b:44:20:
                    a5:54:72:dd:0a:c2:18:fe:2c:42:fc:c1:e0:cc:a5:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:88:5E:69:5F:79:07:57:0F:B7:25:0F:0B:0F:3C:04:D2:60:B9:AA
            X509v3 Authority Key Identifier:
                keyid:D8:EB:A7:30:F6:10:3E:FD:99:32:6A:9A:25:FD:5E:DE:FE:5E:BE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OunMPYQPv2ZMmqaJf1e3v5evpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/749c0b-5aa6-46f7-ad1e-9b12cc1bc2c2/1/2OunMPYQPv2ZMmqaJf1e3v5evpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/749c0b-5aa6-46f7-ad1e-9b12cc1bc2c2/1/2OunMPYQPv2ZMmqaJf1e3v5evpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:fe:d5:33:90:d7:0c:91:c0:60:bb:d4:2b:af:43:58:bf:c9:
         ad:24:98:6c:7b:47:15:85:b4:c9:ad:61:3a:7b:a5:b9:dd:aa:
         df:d6:af:62:ad:ea:b2:b6:93:73:6b:65:d2:d0:95:9d:8c:fe:
         5c:d5:26:be:5d:32:d3:1f:50:01:35:18:62:7d:2f:80:ad:bb:
         ee:90:bb:1c:fb:03:7d:cb:e4:c0:e1:ef:54:33:4e:51:57:62:
         91:cb:af:f0:e1:43:e6:2d:80:f8:35:2f:12:3e:85:b7:b9:89:
         a6:24:c8:b8:66:ab:d5:b0:19:a6:32:d8:95:68:93:c3:7f:6b:
         bf:34:ac:59:d9:77:06:46:fd:f3:dd:66:98:7c:c1:00:5f:f8:
         1c:52:a9:2a:a9:65:3c:da:f8:08:d1:fe:97:55:31:9b:5a:b7:
         3b:6b:de:b1:ac:62:95:82:59:ec:cb:1d:64:d5:30:f2:31:cf:
         c6:81:43:28:48:78:cb:05:b9:3a:5f:61:c2:28:60:7e:94:4d:
         ee:52:92:b0:48:bc:a0:8e:94:a5:7f:6f:6b:2e:87:0b:fa:00:
         c4:e8:6a:75:61:fc:16:9e:60:a3:3a:fe:0d:1a:27:15:6f:03:
         b6:7e:9b:16:86:8b:21:d4:17:63:4f:03:21:6d:77:2a:c6:72:
         2b:20:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----