Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.mft
File:                     dQCQWovTATKNCBSFwDNMN0CKtXI.mft (raw, json)
Hash identifier:          eBiRGwN0fII8+udzOhNmVvxMTzoDIlvcL05KUXna6t0=
Subject key identifier:   E3:E2:10:DC:C3:3F:EC:CB:62:A9:16:B1:61:53:36:69:3C:B8:21:A9
Authority key identifier: 75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72
Certificate issuer:       /CN=7500905a8bd301328d081485c0334c37408ab572
Certificate serial:       01840D438B08788389587596E3A1B5A9DE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQCQWovTATKNCBSFwDNMN0CKtXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.mft
Manifest number:          064B
Signing time:             Tue 25 Oct 2022 03:50:40 +0000
Manifest this update:     Tue 25 Oct 2022 03:50:40 +0000
Manifest next update:     Wed 26 Oct 2022 03:50:40 +0000
Files and hashes:         1: dQCQWovTATKNCBSFwDNMN0CKtXI.crl (hash: issA1L5xRSdlUEXdu55GzyzmA00sAu5SCnDnVsosQx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:43:8b:08:78:83:89:58:75:96:e3:a1:b5:a9:de:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500905a8bd301328d081485c0334c37408ab572
        Validity
            Not Before: Oct 25 03:50:40 2022 GMT
            Not After : Oct 26 03:50:40 2022 GMT
        Subject: CN=e3e210dcc33feccb62a916b1615336693cb821a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:f6:f7:04:c0:1e:10:ab:59:1f:72:38:45:
                    7c:dd:f8:e8:9e:4f:87:aa:27:49:c6:3c:36:e6:f9:
                    65:ab:6b:53:42:0c:51:82:d5:34:5d:54:dd:20:f3:
                    94:f1:d3:82:46:1b:76:4d:29:52:f2:c8:61:8b:22:
                    ac:21:c0:e6:9e:92:1e:15:8c:c7:21:04:36:65:68:
                    81:0b:e0:c5:aa:96:30:a1:88:2e:b0:3e:10:b1:32:
                    64:f8:57:9b:f8:43:d2:5a:8f:8d:aa:09:71:e1:89:
                    12:2e:ff:69:b9:97:fc:65:71:a8:c9:ba:ef:64:b8:
                    e4:0e:64:7f:22:af:73:cd:c6:c7:19:33:32:70:be:
                    9b:22:a9:50:29:75:f5:1e:41:5f:9c:23:da:31:7f:
                    3a:ff:5e:a8:c0:4c:05:7a:de:e4:81:9d:90:7e:ba:
                    1c:c3:0d:b4:2d:1e:20:95:e2:71:a9:c2:3f:04:20:
                    be:49:3f:c1:d8:9e:15:6c:b7:67:37:4a:49:ae:d2:
                    0c:6e:40:89:18:fb:cc:22:e0:79:48:bc:bd:d9:19:
                    5c:dd:4b:2c:e1:ff:11:55:23:db:3a:8c:b7:f7:c1:
                    c8:55:f2:50:04:6e:76:39:7d:4d:68:97:0d:0a:9d:
                    77:70:85:9b:ec:36:c4:f5:1e:00:68:db:cc:7c:67:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:10:DC:C3:3F:EC:CB:62:A9:16:B1:61:53:36:69:3C:B8:21:A9
            X509v3 Authority Key Identifier:
                keyid:75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQCQWovTATKNCBSFwDNMN0CKtXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:57:eb:e7:08:df:41:5c:bd:e6:a3:6b:c1:7e:45:2d:af:
         15:3d:bb:11:a6:a1:71:0f:e5:b4:31:28:78:0d:11:cd:26:72:
         45:98:4b:33:16:08:f6:9e:6d:23:16:c7:75:25:87:37:f8:8d:
         08:0d:e0:65:d2:fd:71:ea:06:a5:bc:87:0d:cd:11:5e:aa:63:
         2f:45:e8:6a:98:9c:46:b1:81:39:5a:43:73:35:01:06:d5:65:
         54:c8:81:5b:c2:c8:23:75:af:ff:b5:95:93:81:a4:f1:d5:98:
         2e:0f:e3:91:5e:54:53:59:59:ff:c7:a3:e5:05:e9:17:7b:f4:
         b8:1b:f0:87:db:4e:cf:a3:e4:d3:ca:e6:16:83:6d:a5:b4:04:
         4e:bf:16:48:d4:fa:e7:51:40:68:02:27:08:e9:08:d2:3f:b5:
         c8:07:84:2e:dd:a3:37:c5:56:8e:c4:2d:12:a5:3d:bd:81:fe:
         32:63:21:4f:05:1b:ce:40:bf:74:73:6c:9d:dc:1b:59:57:ae:
         6d:5e:83:da:ca:8e:12:4b:4b:cb:65:e9:be:41:64:86:53:32:
         2e:df:51:6c:30:7a:af:ba:43:5d:d2:a4:b5:d8:ca:ae:b1:10:
         14:18:4b:de:83:4e:47:09:57:f2:04:a9:93:47:4a:77:62:bf:
         d6:71:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----