Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft
File:                     pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft (raw, json)
Hash identifier:          qYKuzvBATXVtGOzRazVMnTrYXBchY5GnCIVmsjpC5nw=
Subject key identifier:   7E:6E:D6:76:CF:E0:EF:64:EA:92:B0:99:AD:CC:E2:5D:1E:ED:A0:A8
Authority key identifier: A7:0A:EC:A1:1D:B7:3D:CF:47:75:E2:9A:45:74:2B:57:73:E4:9B:8F
Certificate issuer:       /CN=a70aeca11db73dcf4775e29a45742b5773e49b8f
Certificate serial:       018505A9BDD5F1A9A591DE50603100D67191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pwrsoR23Pc9HdeKaRXQrV3Pkm48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft
Manifest number:          0750
Signing time:             Mon 12 Dec 2022 09:28:08 +0000
Manifest this update:     Mon 12 Dec 2022 09:28:08 +0000
Manifest next update:     Tue 13 Dec 2022 09:28:08 +0000
Files and hashes:         1: pwrsoR23Pc9HdeKaRXQrV3Pkm48.crl (hash: Epzs/+x7UnyzSEvMvTUpJ24zh0VcCaFNbbFCpSJTVkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:05:a9:bd:d5:f1:a9:a5:91:de:50:60:31:00:d6:71:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a70aeca11db73dcf4775e29a45742b5773e49b8f
        Validity
            Not Before: Dec 12 09:28:08 2022 GMT
            Not After : Dec 13 09:28:08 2022 GMT
        Subject: CN=7e6ed676cfe0ef64ea92b099adcce25d1eeda0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:04:9d:21:b1:81:1b:ba:ef:88:b7:34:db:
                    83:6e:84:4f:19:b8:74:02:8f:87:1d:2e:ea:d0:59:
                    22:7a:1f:13:ae:d2:0d:b3:c1:62:1d:06:c1:a2:b2:
                    9b:27:35:3b:69:81:e9:cc:37:c7:0a:94:53:66:a2:
                    c4:76:5d:80:01:9f:f4:d5:5e:ae:10:e7:ce:8e:cb:
                    29:8a:23:00:30:6c:e4:bb:5f:13:01:6b:e7:f6:62:
                    b1:35:92:2a:db:5e:38:43:a8:5e:b3:54:0d:5a:11:
                    cd:21:0b:9b:ba:79:95:0a:fe:96:ee:97:db:60:e9:
                    11:56:f9:5c:c0:77:25:dc:6d:7e:8b:63:66:87:82:
                    b9:a9:28:90:3a:f4:dc:43:8a:48:df:34:6d:c4:df:
                    c8:95:fe:80:27:3a:b6:fc:98:36:45:c7:38:84:49:
                    1c:58:7a:72:2a:e2:ee:0d:74:6c:94:fc:6a:c8:9f:
                    1f:c8:fd:bc:b7:a5:4a:28:c0:6d:be:88:30:22:74:
                    a4:03:78:23:a8:0c:f5:fe:3b:52:e0:b9:d2:94:4e:
                    b5:c5:12:24:ae:ad:dd:eb:8d:8b:93:2f:8d:c4:3b:
                    ec:13:8f:ed:80:15:01:6a:47:38:7e:15:fe:3b:59:
                    bf:05:3c:99:03:be:0e:37:38:c7:ea:e5:5a:33:cf:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:D6:76:CF:E0:EF:64:EA:92:B0:99:AD:CC:E2:5D:1E:ED:A0:A8
            X509v3 Authority Key Identifier:
                keyid:A7:0A:EC:A1:1D:B7:3D:CF:47:75:E2:9A:45:74:2B:57:73:E4:9B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pwrsoR23Pc9HdeKaRXQrV3Pkm48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:89:9f:cd:dc:38:ab:5c:0b:d9:6e:d3:a8:1d:d2:e0:81:64:
         93:9d:af:c3:f7:5d:7d:68:17:01:e8:59:38:ea:2a:06:ed:b4:
         39:2a:be:ba:8a:b9:f4:dc:f5:0c:f2:e7:10:59:74:04:33:b7:
         8d:d5:88:93:67:b0:af:2b:64:59:09:90:3c:c9:8f:6f:26:28:
         96:e1:0c:d9:ad:0b:f9:92:6e:78:bb:a5:bf:e9:1a:7c:14:56:
         ec:3f:59:aa:ce:4a:38:10:24:57:b4:04:7d:33:35:48:b1:20:
         b6:a8:aa:d0:68:b3:48:c8:8c:ca:f2:da:2e:ea:77:68:c8:08:
         f7:19:c5:d3:2a:0d:db:db:5b:0a:6d:66:08:c5:9d:fb:7b:95:
         61:1b:12:e7:48:14:00:cc:8c:b1:22:c3:2d:b1:d1:15:25:b4:
         2a:49:a9:cd:bd:db:ed:83:fa:63:b7:88:9e:be:b2:69:5d:61:
         a6:58:92:83:ca:ce:0f:53:ff:76:b0:be:6e:5e:fc:14:4e:45:
         5a:6c:16:45:1d:cb:af:9d:c8:c2:aa:d1:63:c9:de:bc:6d:a6:
         bf:20:a2:5d:0c:c6:e6:85:6d:0e:83:96:82:31:b0:2e:23:00:
         4b:3f:b8:48:94:92:7a:da:d7:8e:10:0d:6a:a8:e6:ab:19:87:
         80:82:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----