Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/9x-b3axMNAeNjQ-rnhTRdqQW-WM.mft
File:                     9x-b3axMNAeNjQ-rnhTRdqQW-WM.mft (raw, json)
Hash identifier:          mBdbk0ckBUhcqiNpATg2XrlaPDeY1SbonF7KY6xWBmY=
Subject key identifier:   2A:53:84:5B:3D:64:32:78:3D:20:1F:49:1C:2D:90:B1:FC:01:D7:9E
Authority key identifier: F7:1F:9B:DD:AC:4C:34:07:8D:8D:0F:AB:9E:14:D1:76:A4:16:F9:63
Certificate issuer:       /CN=f71f9bddac4c34078d8d0fab9e14d176a416f963
Certificate serial:       0DB02F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x-b3axMNAeNjQ-rnhTRdqQW-WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/9x-b3axMNAeNjQ-rnhTRdqQW-WM.mft
Manifest number:          099A
Signing time:             Wed 01 Jun 2022 07:38:23 +0000
Manifest this update:     Wed 01 Jun 2022 07:38:23 +0000
Manifest next update:     Thu 02 Jun 2022 07:38:23 +0000
Files and hashes:         1: 9x-b3axMNAeNjQ-rnhTRdqQW-WM.crl (hash: 0t/Kg2rgUc+0sj4BtBCoawyiW/yvyNIfxxaLlPadWlA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229650244 (0xdb02f44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71f9bddac4c34078d8d0fab9e14d176a416f963
        Validity
            Not Before: Jun  1 07:38:23 2022 GMT
            Not After : Jun  2 07:38:23 2022 GMT
        Subject: CN=2a53845b3d6432783d201f491c2d90b1fc01d79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:7c:b7:20:e9:79:a9:b9:a9:be:d5:43:5d:
                    6d:ea:12:a7:4c:53:1c:d3:a5:98:e1:79:85:45:02:
                    17:f8:fc:5b:6e:f2:b1:39:a2:df:e1:b7:84:3a:b6:
                    1a:34:fd:71:b0:ca:fd:47:04:da:35:12:c1:8c:5c:
                    c4:d5:97:ed:c2:f8:9d:39:9d:e0:e7:22:e3:70:c5:
                    8a:22:02:9c:fa:48:d9:54:ee:42:15:6a:65:56:6d:
                    82:d3:1e:86:fa:f8:9f:f4:34:fd:c9:42:73:4c:d5:
                    00:7e:e6:9a:a8:44:db:f6:d8:1e:25:68:a9:29:20:
                    32:2a:46:15:0b:a3:75:6b:c8:ff:ac:90:aa:1d:bd:
                    50:e2:c2:2c:2d:34:d5:46:c5:14:d0:36:6d:f9:42:
                    99:bb:74:2c:fd:89:00:dc:d0:ed:0a:aa:0c:c2:9b:
                    f8:87:5d:08:24:06:e7:39:12:a6:9a:c7:d7:53:ba:
                    4a:65:69:fc:8c:32:5d:71:5e:83:f0:7b:f0:c7:f8:
                    9e:8d:c8:b4:5b:70:5c:31:c6:02:94:6b:2f:5e:5c:
                    4b:5c:f2:63:82:d8:28:9b:92:df:63:25:c4:d5:ce:
                    d3:f3:67:ed:ce:67:98:83:5c:a9:ca:f9:8f:d5:26:
                    58:73:eb:9a:55:38:78:bf:25:d2:bc:a9:ad:4b:94:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:53:84:5B:3D:64:32:78:3D:20:1F:49:1C:2D:90:B1:FC:01:D7:9E
            X509v3 Authority Key Identifier:
                keyid:F7:1F:9B:DD:AC:4C:34:07:8D:8D:0F:AB:9E:14:D1:76:A4:16:F9:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x-b3axMNAeNjQ-rnhTRdqQW-WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/9x-b3axMNAeNjQ-rnhTRdqQW-WM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/9x-b3axMNAeNjQ-rnhTRdqQW-WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:9a:e1:ed:8e:c7:67:1b:0c:fb:85:45:11:ca:99:16:cf:
         29:f8:bb:68:65:10:36:48:c2:04:8a:58:ce:24:1b:b5:68:f9:
         e1:76:d1:50:28:57:fd:7a:d1:01:7a:a7:a0:bd:e5:06:ad:f3:
         4b:b3:18:f0:6b:08:0a:3d:6f:22:6a:88:18:85:d0:3f:a0:43:
         06:5b:60:68:c3:e7:98:7a:9d:70:33:e9:7a:7c:2f:f6:01:8b:
         ac:0c:15:a3:21:a4:31:31:bf:e9:a3:da:dd:44:f6:f6:3a:77:
         5e:27:9a:44:e9:f0:17:56:8b:ed:84:00:64:b3:1d:2a:a5:da:
         69:4f:4c:35:f5:24:b2:a2:93:44:6a:99:8b:19:f7:ec:e8:b6:
         14:43:05:aa:40:90:cd:6e:aa:32:37:1c:0c:97:66:ed:98:52:
         7b:90:9e:53:ed:a4:2c:b4:78:37:99:81:00:87:a7:3d:84:fe:
         a9:92:ea:f4:ff:ed:f4:24:7f:06:2b:4a:36:f4:c5:51:52:4e:
         98:f3:da:80:a5:d3:1f:0e:ae:2a:a4:a3:69:ba:bf:be:d9:23:
         2a:2c:99:6c:f3:d4:bc:c6:5f:62:41:d6:a3:cd:56:4e:da:bf:
         09:c5:e1:20:8b:09:46:ba:a3:0f:16:49:35:4e:3b:4e:b5:df:
         7d:47:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----