Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39e8a4-a979-4081-873f-8138779af68e/1/6Q5yYn-z_BdvOct7Jljy0l0zre8.mft
File:                     6Q5yYn-z_BdvOct7Jljy0l0zre8.mft (raw, json)
Hash identifier:          9N3/k2+iIFEs0HbCgj+25S3IfzQGV72cJ/OPCgBGLOw=
Subject key identifier:   B3:7F:EC:0F:E6:C0:0D:75:CD:61:20:F6:95:E9:61:34:3F:C5:3A:53
Authority key identifier: E9:0E:72:62:7F:B3:FC:17:6F:39:CB:7B:26:58:F2:D2:5D:33:AD:EF
Certificate issuer:       /CN=e90e72627fb3fc176f39cb7b2658f2d25d33adef
Certificate serial:       17DF9629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Q5yYn-z_BdvOct7Jljy0l0zre8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/39e8a4-a979-4081-873f-8138779af68e/1/6Q5yYn-z_BdvOct7Jljy0l0zre8.mft
Manifest number:          096D
Signing time:             Wed 25 May 2022 09:28:11 +0000
Manifest this update:     Wed 25 May 2022 09:28:11 +0000
Manifest next update:     Thu 26 May 2022 09:28:11 +0000
Files and hashes:         1: 6Q5yYn-z_BdvOct7Jljy0l0zre8.crl (hash: mlXNOjRllCZlMXSqlb2sk6XKcE+6SvgdKHIZazUO/TQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400528937 (0x17df9629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90e72627fb3fc176f39cb7b2658f2d25d33adef
        Validity
            Not Before: May 25 09:28:11 2022 GMT
            Not After : May 26 09:28:11 2022 GMT
        Subject: CN=b37fec0fe6c00d75cd6120f695e961343fc53a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:37:2c:a3:16:5d:77:11:1b:26:eb:ab:3b:
                    19:f3:87:ea:3f:56:2b:57:b5:a6:a5:50:48:d2:f3:
                    67:f6:b8:7f:99:65:fa:d4:19:bc:ee:57:59:db:d5:
                    e5:50:4c:f7:f1:3c:4a:b6:a1:f2:3d:05:18:17:3b:
                    4c:ae:3f:18:85:f3:92:b4:ba:3c:06:bf:49:50:68:
                    db:b7:10:09:fc:42:4e:25:ab:3f:69:f6:2c:14:dd:
                    1c:fe:a7:ca:02:b6:11:11:41:ad:c5:de:9e:ca:72:
                    35:15:19:1f:e2:24:9b:40:d7:ee:a4:56:0b:fc:28:
                    92:27:1d:be:47:bb:04:ca:47:3f:39:23:54:51:3c:
                    24:d1:8e:1c:10:43:0b:b8:67:09:d3:d5:b7:be:4a:
                    8c:12:f6:32:0b:3c:31:37:0e:27:aa:b9:2e:f3:28:
                    7a:82:74:e7:a6:e1:52:73:9d:ae:41:e5:a1:ef:cf:
                    03:b4:9b:3f:ac:0b:74:8f:d0:2e:4d:4f:2e:9b:00:
                    82:24:81:63:2e:28:62:7c:be:a6:d3:3f:eb:90:98:
                    58:9a:3a:30:74:d9:ca:72:7e:a0:5a:f5:4f:ae:7d:
                    93:d8:15:76:e7:3d:01:a8:2e:d3:ec:e3:e5:dd:6f:
                    fd:aa:57:ca:80:ed:49:69:2c:b5:9a:fc:09:31:4b:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7F:EC:0F:E6:C0:0D:75:CD:61:20:F6:95:E9:61:34:3F:C5:3A:53
            X509v3 Authority Key Identifier:
                keyid:E9:0E:72:62:7F:B3:FC:17:6F:39:CB:7B:26:58:F2:D2:5D:33:AD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Q5yYn-z_BdvOct7Jljy0l0zre8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39e8a4-a979-4081-873f-8138779af68e/1/6Q5yYn-z_BdvOct7Jljy0l0zre8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39e8a4-a979-4081-873f-8138779af68e/1/6Q5yYn-z_BdvOct7Jljy0l0zre8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:a7:90:5d:7d:52:5a:81:58:5b:6c:1e:cf:de:5b:b5:d9:
         bb:f3:58:09:53:1c:66:e9:a5:d9:81:ef:c8:86:8e:28:a0:04:
         02:9b:fa:55:26:59:fc:f1:7f:fe:ea:b8:1e:4a:e2:b3:f2:f3:
         a9:a1:65:d6:59:f2:62:a2:d7:e8:a3:5b:e6:d5:ec:90:6e:85:
         85:df:cf:40:15:c7:f4:f6:c3:05:30:a0:9c:c1:0f:f5:10:ae:
         f6:45:b7:0a:11:5e:2a:a7:a9:25:a4:3a:6a:21:c5:58:34:7c:
         f5:a9:5a:82:8c:fd:51:0c:4b:87:6d:a8:ed:fe:2b:b0:7c:86:
         18:70:ca:19:99:63:0a:73:f3:6b:1b:93:45:55:2b:01:84:6a:
         06:d4:ac:64:51:d6:b4:5c:c5:3c:a0:5c:c1:8b:6a:2d:d3:48:
         f8:f8:d5:1c:cf:02:ee:05:0e:7b:f2:2f:20:86:aa:0a:5f:1c:
         2a:d0:d4:93:a6:e6:59:c6:61:ec:2c:8c:c0:af:24:ae:20:d1:
         dc:37:71:ca:55:24:e9:6e:52:3d:b3:84:a4:0c:77:c6:be:94:
         45:c6:65:62:d1:4b:f3:94:25:d4:5b:0e:81:f7:36:7e:96:83:
         3e:5f:57:29:28:19:88:e1:db:4c:86:ff:d9:ed:24:71:92:13:
         65:28:b2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----