Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f01c68-e1e9-4549-9881-91b4ee2537be/1/5IDLAQoGoaMsJZO9KyjxqRD5ee0.mft
File:                     5IDLAQoGoaMsJZO9KyjxqRD5ee0.mft (raw, json)
Hash identifier:          psKWgimZ8r31U2Pxrsl7v9F6jDW5xTXlFyT5S98Xnow=
Subject key identifier:   F2:07:C0:B0:24:8B:E4:BC:C9:64:E1:0F:39:24:73:EF:C4:28:03:FA
Authority key identifier: E4:80:CB:01:0A:06:A1:A3:2C:25:93:BD:2B:28:F1:A9:10:F9:79:ED
Certificate issuer:       /CN=e480cb010a06a1a32c2593bd2b28f1a910f979ed
Certificate serial:       026F6EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IDLAQoGoaMsJZO9KyjxqRD5ee0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f01c68-e1e9-4549-9881-91b4ee2537be/1/5IDLAQoGoaMsJZO9KyjxqRD5ee0.mft
Manifest number:          033F
Signing time:             Fri 11 Mar 2022 08:32:54 +0000
Manifest this update:     Fri 11 Mar 2022 08:32:54 +0000
Manifest next update:     Sat 12 Mar 2022 08:32:54 +0000
Files and hashes:         1: 5IDLAQoGoaMsJZO9KyjxqRD5ee0.crl (hash: vc594gz0w7vrCOQ4FiDLZAxVRXzOmbUJqEKrYxE55JU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40857314 (0x26f6ee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e480cb010a06a1a32c2593bd2b28f1a910f979ed
        Validity
            Not Before: Mar 11 08:32:54 2022 GMT
            Not After : Mar 12 08:32:54 2022 GMT
        Subject: CN=f207c0b0248be4bcc964e10f392473efc42803fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:2e:31:92:75:8f:53:00:f7:f9:fc:c0:81:
                    7e:b1:9a:b4:d8:ad:70:1e:5a:ff:94:24:63:21:7d:
                    9f:f6:90:f6:d7:6a:a1:f6:89:9d:b0:b7:32:2f:4b:
                    e1:48:9e:fa:79:dc:25:27:ca:d1:5f:59:00:c3:2e:
                    da:9d:7c:08:36:ca:af:65:2c:3a:92:61:31:d5:90:
                    88:c8:2d:ab:b7:7f:61:e5:61:e6:e6:52:bf:31:ab:
                    f2:2c:03:af:ec:4d:56:0d:c9:1a:c2:70:71:25:db:
                    02:86:42:4a:c3:5e:c7:77:f4:c0:9f:c0:fa:63:30:
                    c8:f5:55:2f:43:25:32:ba:80:f7:1e:1a:41:d7:bb:
                    e0:72:1f:b5:cb:b5:0e:a7:88:1a:71:6d:70:45:b5:
                    1d:f9:21:af:35:4d:fd:a5:a1:3f:a2:43:1b:6b:57:
                    e9:52:06:67:32:9d:f5:28:e5:cc:6e:ba:50:32:c5:
                    d4:98:94:35:3c:4c:5a:14:b8:3d:5c:41:bc:99:17:
                    4c:82:98:cc:fd:86:45:0d:62:ac:1b:fc:3b:70:2a:
                    34:7b:be:9f:5e:15:0f:e3:3c:bb:21:6c:16:1f:3a:
                    79:14:bf:c9:35:60:e9:89:9e:99:5f:fd:aa:fb:05:
                    7a:bb:6b:8b:f5:64:9b:ac:59:8a:fa:24:fd:82:a5:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:07:C0:B0:24:8B:E4:BC:C9:64:E1:0F:39:24:73:EF:C4:28:03:FA
            X509v3 Authority Key Identifier:
                keyid:E4:80:CB:01:0A:06:A1:A3:2C:25:93:BD:2B:28:F1:A9:10:F9:79:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IDLAQoGoaMsJZO9KyjxqRD5ee0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f01c68-e1e9-4549-9881-91b4ee2537be/1/5IDLAQoGoaMsJZO9KyjxqRD5ee0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f01c68-e1e9-4549-9881-91b4ee2537be/1/5IDLAQoGoaMsJZO9KyjxqRD5ee0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ee:34:8d:8d:d1:6c:8e:af:99:4e:42:3f:67:59:a3:5f:26:
         a4:a5:23:c7:36:a2:5a:e8:e3:27:34:9e:0d:32:96:44:6e:70:
         33:f5:ca:29:c3:b9:f0:d4:97:15:41:7f:f7:77:93:f4:bb:31:
         28:2d:3e:2a:b7:ca:d5:e5:dc:76:87:0d:c7:d0:75:d0:d5:2a:
         c7:fa:97:cc:20:5c:d4:41:53:cb:12:6e:7a:db:28:bd:1b:21:
         82:ad:2e:c2:e8:e8:f2:ee:9f:48:50:37:89:58:98:48:59:9b:
         c0:dd:6e:e4:f6:94:7f:75:40:03:81:30:e6:c9:c7:ff:74:f7:
         c0:ab:af:2c:74:23:98:4c:6e:e2:35:72:aa:95:4c:f5:57:e1:
         8e:4b:51:74:d3:df:e9:e4:b7:84:42:48:b0:a8:9c:8c:c3:8b:
         70:d1:67:5a:b0:a0:d4:99:bb:7b:da:bf:50:1a:d0:2a:36:0c:
         e9:db:03:55:1c:4e:d9:c3:38:c3:7b:83:2b:bf:7f:c2:f6:3f:
         58:1f:31:cd:3d:4b:b5:c8:eb:eb:89:65:c3:01:96:74:a3:7d:
         12:4e:6b:b0:1f:99:26:9c:d3:31:a4:9f:27:32:8a:b7:a2:0c:
         94:01:9c:4d:de:56:bc:6f:2a:ed:4f:3a:15:de:76:8d:1d:0d:
         50:06:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----