Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/904813-af74-45bd-a8c3-a5d3a5b5b36e/1/30HRvhl9tQeyGLiv6ZN4H_iHyR4.mft
File:                     30HRvhl9tQeyGLiv6ZN4H_iHyR4.mft (raw, json)
Hash identifier:          9K3cy0098QKKG7cNbZYlsDwxRVIW6bRBTvTsaohyOHw=
Subject key identifier:   8C:01:56:AF:B9:81:EC:3B:3E:D6:48:25:19:9C:E0:CA:90:86:B3:19
Authority key identifier: DF:41:D1:BE:19:7D:B5:07:B2:18:B8:AF:E9:93:78:1F:F8:87:C9:1E
Certificate issuer:       /CN=df41d1be197db507b218b8afe993781ff887c91e
Certificate serial:       018479759F980AF55E2F7707CE22C9DB5C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30HRvhl9tQeyGLiv6ZN4H_iHyR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/904813-af74-45bd-a8c3-a5d3a5b5b36e/1/30HRvhl9tQeyGLiv6ZN4H_iHyR4.mft
Manifest number:          062A
Signing time:             Tue 15 Nov 2022 04:04:22 +0000
Manifest this update:     Tue 15 Nov 2022 04:04:22 +0000
Manifest next update:     Wed 16 Nov 2022 04:04:22 +0000
Files and hashes:         1: 30HRvhl9tQeyGLiv6ZN4H_iHyR4.crl (hash: ZnDpt0bFK0Xum5BQ7d67RI0Uw2FsmNNIiBqedVGGuDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:79:75:9f:98:0a:f5:5e:2f:77:07:ce:22:c9:db:5c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df41d1be197db507b218b8afe993781ff887c91e
        Validity
            Not Before: Nov 15 04:04:22 2022 GMT
            Not After : Nov 16 04:04:22 2022 GMT
        Subject: CN=8c0156afb981ec3b3ed64825199ce0ca9086b319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:e6:f2:9d:b6:40:ef:95:cc:8c:16:04:81:
                    76:ab:d7:78:80:a6:4e:f6:bd:fe:09:4e:d9:b2:97:
                    61:d8:b2:fe:ec:45:a1:fd:8c:03:17:aa:9f:26:90:
                    12:58:99:72:64:fe:9e:3d:ab:13:ae:1c:2f:20:2b:
                    3c:c1:24:0a:a1:a3:52:0e:da:93:a2:6d:4f:3a:82:
                    fa:f7:4b:a3:b0:36:34:9b:1f:4a:c2:ef:b0:7e:c0:
                    46:75:d8:a0:32:8d:8e:02:69:51:78:ca:6a:a1:75:
                    f5:5c:02:18:55:a7:85:73:0a:9e:57:de:5c:2e:63:
                    37:a5:43:c9:d8:ce:ae:97:c7:6f:0d:44:ab:ec:c8:
                    11:27:1f:85:5e:ef:a4:1a:c4:ca:bb:43:57:77:e1:
                    aa:03:dc:9f:61:f5:f4:6e:24:ae:0f:a4:6d:e1:db:
                    d4:16:12:2e:5a:08:b8:39:e2:78:1d:64:98:17:62:
                    ca:15:5d:ce:53:b0:23:9d:44:3b:24:28:32:d8:4c:
                    65:b3:43:87:45:ef:cb:65:bb:79:85:c6:5b:77:41:
                    11:98:fe:eb:79:0f:bb:ed:a5:39:58:62:8e:eb:dc:
                    f3:0f:f5:b3:38:ae:59:89:b3:fc:6b:b5:90:0e:11:
                    ba:71:13:77:f7:3e:69:01:de:04:9d:bf:40:fa:4a:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:01:56:AF:B9:81:EC:3B:3E:D6:48:25:19:9C:E0:CA:90:86:B3:19
            X509v3 Authority Key Identifier:
                keyid:DF:41:D1:BE:19:7D:B5:07:B2:18:B8:AF:E9:93:78:1F:F8:87:C9:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30HRvhl9tQeyGLiv6ZN4H_iHyR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/904813-af74-45bd-a8c3-a5d3a5b5b36e/1/30HRvhl9tQeyGLiv6ZN4H_iHyR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/904813-af74-45bd-a8c3-a5d3a5b5b36e/1/30HRvhl9tQeyGLiv6ZN4H_iHyR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:96:95:97:64:0a:6e:f4:3d:45:b3:e9:91:2c:ae:78:31:
         39:6b:c5:74:ca:0b:df:c7:04:f3:a3:ba:8e:b5:8e:1c:8a:61:
         c3:a5:49:c2:eb:20:14:0a:7b:81:56:de:7b:c9:e5:64:2e:4e:
         6d:6d:62:a9:c1:ff:2d:a4:50:3d:1e:a7:02:0e:7f:1c:d2:b6:
         41:a2:82:94:c9:b4:b2:fc:03:af:22:2a:1e:19:90:21:d7:d2:
         60:a7:c9:87:e8:94:5d:73:5c:9d:5d:00:0d:63:df:0a:a8:fe:
         0e:12:3f:c0:8c:92:8b:3b:d3:e0:db:db:b9:2b:38:7a:d4:a3:
         7a:b5:9f:ae:fb:2c:0f:8b:62:30:4c:e9:6e:a3:1b:4b:61:cd:
         9f:a6:58:0a:eb:37:2b:ba:8b:6b:db:db:ee:3f:d8:00:c9:f4:
         fe:9b:2d:81:0d:98:18:e0:0f:2c:ec:5f:0d:1f:ec:fd:b9:33:
         cb:c9:4e:74:5a:66:52:4f:a7:55:fb:a4:1a:26:e1:03:e9:40:
         e8:28:c5:4f:7c:a3:15:f1:11:a8:5b:93:c7:39:de:6b:2d:ac:
         ea:1d:90:7d:b3:f8:ca:da:d4:3a:0c:86:7e:ae:7b:dc:e2:96:
         d2:2c:e9:97:e7:a0:ac:ab:e5:60:da:df:9e:80:32:e4:79:19:
         2e:dd:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----