Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e7e330-e498-49fe-8087-afb08f836dc8/1/IuX-9ND8pDdYv5V3YVI_j5rg_2M.mft
File:                     IuX-9ND8pDdYv5V3YVI_j5rg_2M.mft (raw, json)
Hash identifier:          ecMMH07P0XtHmbaIieTdoTw42fbqtZRYec21IfFUbLE=
Subject key identifier:   A7:E2:7A:6A:82:D3:9F:68:22:AA:CB:F6:71:A8:65:04:90:87:59:8E
Authority key identifier: 22:E5:FE:F4:D0:FC:A4:37:58:BF:95:77:61:52:3F:8F:9A:E0:FF:63
Certificate issuer:       /CN=22e5fef4d0fca43758bf957761523f8f9ae0ff63
Certificate serial:       917460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IuX-9ND8pDdYv5V3YVI_j5rg_2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e7e330-e498-49fe-8087-afb08f836dc8/1/IuX-9ND8pDdYv5V3YVI_j5rg_2M.mft
Manifest number:          B7
Signing time:             Tue 17 May 2022 12:57:39 +0000
Manifest this update:     Tue 17 May 2022 12:57:39 +0000
Manifest next update:     Wed 18 May 2022 12:57:39 +0000
Files and hashes:         1: IuX-9ND8pDdYv5V3YVI_j5rg_2M.crl (hash: uPJAh+H8k82iPdk+qc9QFGTfpyT0OcsLR0MWR7YkdP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9532512 (0x917460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e5fef4d0fca43758bf957761523f8f9ae0ff63
        Validity
            Not Before: May 17 12:57:39 2022 GMT
            Not After : May 18 12:57:39 2022 GMT
        Subject: CN=a7e27a6a82d39f6822aacbf671a865049087598e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:1c:c4:0c:d9:b4:a5:46:aa:93:da:3f:25:
                    af:4d:0e:23:fb:7b:cc:94:30:1b:2b:b8:ce:2b:53:
                    49:34:1d:e7:c5:b0:f1:1a:f0:6d:2b:f3:75:64:02:
                    d9:c0:fc:fc:3e:f5:3d:63:44:f6:69:14:9f:c1:75:
                    d0:2c:6f:15:30:54:2d:87:99:b1:43:c7:6e:f8:ce:
                    75:d3:bf:46:37:56:5b:fd:55:49:7b:7d:b0:98:19:
                    7a:5a:9a:19:ae:03:aa:8a:9d:78:6f:73:6c:bb:7a:
                    13:42:58:88:57:3c:9c:96:1e:6a:95:4e:e5:1a:a2:
                    07:79:d3:49:81:76:61:30:c8:46:38:03:80:80:26:
                    04:96:c5:81:32:4a:de:03:59:ab:29:7b:34:71:8a:
                    ff:41:cd:7a:4b:7f:22:35:44:68:9e:2c:2d:da:b9:
                    6f:30:77:7b:0a:cd:ad:b0:71:aa:1f:8a:fc:ea:40:
                    39:58:05:5f:64:6f:52:55:7b:82:18:1f:26:e7:ab:
                    7f:75:02:29:01:5b:27:7c:47:a6:47:3e:a7:97:35:
                    89:42:fe:36:e7:2c:5c:23:a3:dc:69:6a:18:d6:fe:
                    ab:91:5f:d3:db:6d:0c:54:d1:e5:f1:c1:2e:64:63:
                    cd:de:f3:3d:e6:6b:0a:73:a6:db:de:11:f5:d9:1b:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:7A:6A:82:D3:9F:68:22:AA:CB:F6:71:A8:65:04:90:87:59:8E
            X509v3 Authority Key Identifier:
                keyid:22:E5:FE:F4:D0:FC:A4:37:58:BF:95:77:61:52:3F:8F:9A:E0:FF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuX-9ND8pDdYv5V3YVI_j5rg_2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e7e330-e498-49fe-8087-afb08f836dc8/1/IuX-9ND8pDdYv5V3YVI_j5rg_2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e7e330-e498-49fe-8087-afb08f836dc8/1/IuX-9ND8pDdYv5V3YVI_j5rg_2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:aa:a6:d2:5e:30:b4:8e:bc:c7:06:c0:09:d4:d7:63:6f:16:
         94:b5:85:e2:61:de:0e:62:18:1a:9b:b9:97:2d:2c:8d:95:36:
         36:f8:b9:4b:c5:b5:0c:52:c8:d4:cb:5c:da:57:02:fb:f1:b8:
         c4:ff:00:ad:3d:5d:64:f0:38:c4:60:e9:a3:bc:59:6c:5d:4b:
         f6:98:2c:c7:1a:2c:56:9e:0e:e8:2c:c2:df:9d:93:af:4e:2c:
         ed:42:06:fa:bd:fa:4a:fb:ea:87:3f:1c:88:c3:e7:f5:08:c2:
         46:16:2a:2a:9a:b4:24:cd:d8:9f:39:88:95:8a:66:b6:e1:ea:
         58:92:5a:eb:1d:bb:d2:cc:fd:c4:39:87:c7:87:c6:61:63:f8:
         fc:5d:92:f4:b3:b7:b6:e8:78:5e:67:bc:c0:f5:31:c5:20:8a:
         69:53:76:ca:3b:bf:5f:80:dc:01:98:3d:85:bf:08:3a:f0:a4:
         02:3a:17:25:23:45:9c:1e:1e:79:67:5c:46:88:63:71:df:68:
         0e:95:26:2a:3c:13:86:1f:f1:7d:af:fb:53:43:da:60:e7:5d:
         9f:99:f3:68:1c:e4:51:32:c2:75:c1:7f:42:e4:b9:c8:ba:2c:
         3a:44:10:b0:1c:32:ad:87:2e:9f:fa:14:55:4d:19:c6:2e:c5:
         60:a4:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----