Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/fe23ca-ad4a-40ba-a1a8-e061ffa001b8/1/xQcGejzDj4r3RYJG5EnHZHaWGwI.mft
File:                     xQcGejzDj4r3RYJG5EnHZHaWGwI.mft (raw, json)
Hash identifier:          6gKSQgHgy4GKEVE03ZeuF6+rTGZVve4OoJzaBnbeoGA=
Subject key identifier:   28:61:8A:80:E2:46:20:2A:81:F5:F0:21:DF:20:81:53:98:40:A5:B6
Authority key identifier: C5:07:06:7A:3C:C3:8F:8A:F7:45:82:46:E4:49:C7:64:76:96:1B:02
Certificate issuer:       /CN=c507067a3cc38f8af7458246e449c76476961b02
Certificate serial:       0184A8DEB8C903BC64A45DE7552E3CC1B4AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQcGejzDj4r3RYJG5EnHZHaWGwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/fe23ca-ad4a-40ba-a1a8-e061ffa001b8/1/xQcGejzDj4r3RYJG5EnHZHaWGwI.mft
Manifest number:          03D2
Signing time:             Thu 24 Nov 2022 09:01:19 +0000
Manifest this update:     Thu 24 Nov 2022 09:01:19 +0000
Manifest next update:     Fri 25 Nov 2022 09:01:19 +0000
Files and hashes:         1: xQcGejzDj4r3RYJG5EnHZHaWGwI.crl (hash: BkSptyisa5czgJ4A13rn3xFHdQz1OC8wPzPbJUuaCjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a8:de:b8:c9:03:bc:64:a4:5d:e7:55:2e:3c:c1:b4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c507067a3cc38f8af7458246e449c76476961b02
        Validity
            Not Before: Nov 24 09:01:19 2022 GMT
            Not After : Nov 25 09:01:19 2022 GMT
        Subject: CN=28618a80e246202a81f5f021df2081539840a5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:31:5d:b7:9d:5e:d8:db:4d:b3:78:7c:d2:
                    83:94:8c:00:64:1c:06:db:48:71:b8:89:6e:2c:98:
                    79:43:74:5c:a9:ae:b3:85:f7:4d:5c:09:14:91:ea:
                    a6:a2:39:6b:6b:42:48:42:60:40:fb:76:7b:c2:f8:
                    dd:7e:e3:e7:2c:2a:6d:a0:47:2c:fc:76:e0:25:73:
                    55:81:ef:43:d5:3b:e5:a1:44:5b:6e:2f:34:b6:7c:
                    5b:ab:18:1d:1f:8c:68:2b:38:92:a1:16:2d:22:89:
                    f7:1a:34:d2:cd:26:15:7f:06:cb:70:77:ea:58:70:
                    f7:3c:20:ca:b2:50:cd:bf:74:e8:ba:40:8b:84:43:
                    92:3c:74:23:68:ba:02:60:1b:fc:61:40:35:52:60:
                    48:21:a4:9b:89:b3:84:d6:6e:48:9b:55:fb:e6:5b:
                    46:56:9f:d3:9a:46:59:3b:64:e8:44:e3:53:ff:f0:
                    16:94:06:2a:77:b1:fa:e8:48:2c:19:f2:a5:40:68:
                    0f:c8:32:cc:6c:ad:77:19:b5:e3:de:39:5c:c0:62:
                    64:23:1a:ed:7c:04:a4:1e:90:54:2a:2e:41:53:00:
                    a5:41:14:5f:39:1b:29:b8:d2:33:d7:6c:96:78:d1:
                    6d:1e:d5:4c:06:4b:2d:7b:fe:af:cd:22:ab:48:77:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:61:8A:80:E2:46:20:2A:81:F5:F0:21:DF:20:81:53:98:40:A5:B6
            X509v3 Authority Key Identifier:
                keyid:C5:07:06:7A:3C:C3:8F:8A:F7:45:82:46:E4:49:C7:64:76:96:1B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQcGejzDj4r3RYJG5EnHZHaWGwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/fe23ca-ad4a-40ba-a1a8-e061ffa001b8/1/xQcGejzDj4r3RYJG5EnHZHaWGwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/fe23ca-ad4a-40ba-a1a8-e061ffa001b8/1/xQcGejzDj4r3RYJG5EnHZHaWGwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:17:38:ad:ca:98:32:19:9a:47:b8:f3:ee:3e:68:a9:7f:74:
         3d:ec:45:56:6b:c4:7b:b9:e2:00:d7:e7:8a:2c:58:01:a5:5a:
         04:58:35:92:16:15:18:0a:3e:ee:a8:ff:c5:0d:ef:51:75:bd:
         5d:13:cd:4a:ff:ee:7c:3d:76:26:79:b7:b1:11:1b:fc:98:df:
         54:8e:a0:01:67:21:70:1b:fc:74:ac:87:10:56:a8:fe:a2:1b:
         30:df:ae:f2:08:a9:c7:d0:ba:d8:93:e2:61:39:9d:85:6d:a6:
         28:c1:df:93:e4:30:93:d8:1b:c7:de:61:68:45:76:f0:5f:f5:
         35:63:28:dc:6b:4d:ce:8e:b8:94:e0:74:ef:f9:d2:40:77:5a:
         ed:0b:4d:ec:e8:ae:ff:f3:83:c4:14:5e:d3:ff:8e:c8:5a:dc:
         a6:2a:d3:ce:3f:da:a3:56:59:e7:4e:2d:da:15:43:94:4b:dd:
         4e:ca:0d:58:fa:2e:d6:97:e6:b0:cc:19:ff:86:5f:e9:fa:d4:
         69:96:f2:b3:70:08:fe:6e:0d:ea:45:0b:ef:78:b7:a6:f5:fc:
         ba:e2:63:f6:f6:5b:16:81:11:aa:60:b6:dc:f7:f8:58:a8:65:
         52:b1:b6:85:18:4c:d1:4f:21:67:66:fa:90:ac:ea:30:09:ca:
         fd:2a:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----