Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ff0c62-1be4-4c5e-98bb-62559d0e4566/1/lzimBYws6NLA1l7G5tczPokGDxU.mft
File:                     lzimBYws6NLA1l7G5tczPokGDxU.mft (raw, json)
Hash identifier:          p9CDDs/Na19DSPD9NA+AaLu7kQd2po2X7RFEDdD21BI=
Subject key identifier:   25:58:18:42:E0:93:C1:34:89:61:59:18:03:91:12:17:1D:8A:9E:81
Authority key identifier: 97:38:A6:05:8C:2C:E8:D2:C0:D6:5E:C6:E6:D7:33:3E:89:06:0F:15
Certificate issuer:       /CN=9738a6058c2ce8d2c0d65ec6e6d7333e89060f15
Certificate serial:       04FAE0F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzimBYws6NLA1l7G5tczPokGDxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ff0c62-1be4-4c5e-98bb-62559d0e4566/1/lzimBYws6NLA1l7G5tczPokGDxU.mft
Manifest number:          0687
Signing time:             Tue 01 Mar 2022 06:16:55 +0000
Manifest this update:     Tue 01 Mar 2022 06:16:55 +0000
Manifest next update:     Wed 02 Mar 2022 06:16:55 +0000
Files and hashes:         1: lzimBYws6NLA1l7G5tczPokGDxU.crl (hash: gHNfp8irs3V+ReYfsEj3iMNkMQwmKrc++c4uAHwSs40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83550450 (0x4fae0f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9738a6058c2ce8d2c0d65ec6e6d7333e89060f15
        Validity
            Not Before: Mar  1 06:16:55 2022 GMT
            Not After : Mar  2 06:16:55 2022 GMT
        Subject: CN=25581842e093c13489615918039112171d8a9e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:18:6a:4c:5b:82:d9:e9:ef:f6:66:d8:40:
                    06:f2:07:ec:36:64:66:e8:2d:a4:71:20:25:6f:78:
                    3a:b8:49:12:37:18:a8:bc:ed:7c:95:1f:6c:12:d4:
                    2c:17:fc:2d:2e:5e:eb:60:59:29:e1:00:7c:83:0c:
                    5d:f5:cd:f8:05:5b:20:c2:f4:be:0b:fe:c9:39:15:
                    cb:16:68:64:91:b3:e3:a0:59:e6:ce:5c:b5:fe:cd:
                    12:f4:ef:65:68:b4:e7:24:ef:ef:df:6d:21:eb:5f:
                    96:17:99:8a:ee:4e:fb:e4:5d:ac:a2:df:31:15:86:
                    23:b4:2d:a7:5a:84:36:37:f1:da:7b:7b:0c:f1:fc:
                    86:03:8e:28:58:86:7f:36:d3:07:8d:a1:79:25:8c:
                    1c:55:98:84:31:f1:42:e7:07:4d:16:90:d0:8f:be:
                    85:81:3b:d4:6f:f2:3e:bc:66:ee:72:6e:72:87:8c:
                    aa:cb:06:02:bb:95:3d:ab:2b:c0:62:1f:bf:29:36:
                    f0:f9:e5:29:54:fc:f3:b7:51:68:a3:f8:21:cd:64:
                    4e:4f:1e:87:7a:00:06:95:04:f6:82:f7:99:cf:f6:
                    21:13:66:85:62:7e:5e:95:f0:46:7c:30:26:09:d9:
                    93:4d:2b:b2:71:ee:f1:5b:e3:58:d8:05:46:16:66:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:18:42:E0:93:C1:34:89:61:59:18:03:91:12:17:1D:8A:9E:81
            X509v3 Authority Key Identifier:
                keyid:97:38:A6:05:8C:2C:E8:D2:C0:D6:5E:C6:E6:D7:33:3E:89:06:0F:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzimBYws6NLA1l7G5tczPokGDxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ff0c62-1be4-4c5e-98bb-62559d0e4566/1/lzimBYws6NLA1l7G5tczPokGDxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ff0c62-1be4-4c5e-98bb-62559d0e4566/1/lzimBYws6NLA1l7G5tczPokGDxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:ff:de:8b:0a:f7:e3:ae:a2:9a:e0:78:b4:8e:2e:7d:e4:
         08:f2:18:7f:b7:e2:ad:77:28:82:34:68:ba:57:3f:45:f3:3e:
         19:06:cb:99:0a:6a:57:3e:56:03:0f:e0:c9:bb:c8:85:fd:ed:
         01:96:da:77:fd:bb:e0:e5:d2:1e:ef:d9:48:a1:94:0a:4a:b2:
         96:ce:a0:b6:af:02:ad:de:61:af:7b:b5:83:81:e3:14:70:08:
         ce:45:53:a5:3f:bc:24:34:a6:69:a3:66:21:ce:45:70:65:96:
         42:e4:31:15:88:0b:98:81:b2:94:bc:3d:51:9b:51:9f:77:95:
         88:cb:20:4e:f5:8e:7d:c0:8f:47:e5:16:3a:62:8b:15:13:21:
         4b:6f:67:44:3b:f4:46:a5:7a:f8:6c:83:ce:50:83:a2:d9:f5:
         27:41:d6:79:2a:5f:d3:ba:b8:83:b0:f4:98:95:1a:19:ae:49:
         09:1e:c8:12:54:5a:44:8d:72:66:e6:8f:48:cc:f0:0d:e3:cd:
         a0:a8:18:87:9f:6e:91:6a:9d:7a:c1:c0:41:89:b3:15:f5:19:
         12:e2:be:f3:1c:88:cc:31:56:4d:51:5d:a1:ca:04:82:67:10:
         81:d1:1b:d5:cc:a0:c8:c3:0d:1d:87:87:c6:ca:be:c6:3b:84:
         4b:70:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----