Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/827ef5-8c3b-441e-81fb-bedccbc0d2ce/1/78QqxOCioCzO1NF9REl2a2e2o-U.mft
File:                     78QqxOCioCzO1NF9REl2a2e2o-U.mft (raw, json)
Hash identifier:          p+5lPLVyXkT91C9okzZdsOIABUxlHeKN9U4ZHOnXS4s=
Subject key identifier:   82:86:6F:23:AA:86:07:16:8E:E0:D5:3E:C8:67:60:0B:84:55:FE:12
Authority key identifier: EF:C4:2A:C4:E0:A2:A0:2C:CE:D4:D1:7D:44:49:76:6B:67:B6:A3:E5
Certificate issuer:       /CN=efc42ac4e0a2a02cced4d17d4449766b67b6a3e5
Certificate serial:       0146B1C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78QqxOCioCzO1NF9REl2a2e2o-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/827ef5-8c3b-441e-81fb-bedccbc0d2ce/1/78QqxOCioCzO1NF9REl2a2e2o-U.mft
Manifest number:          01A1
Signing time:             Tue 07 Jun 2022 07:08:31 +0000
Manifest this update:     Tue 07 Jun 2022 07:08:31 +0000
Manifest next update:     Wed 08 Jun 2022 07:08:31 +0000
Files and hashes:         1: 78QqxOCioCzO1NF9REl2a2e2o-U.crl (hash: GC8lWnc2so1eZsKsWrt8iUIJgbnP+wGivo9c2mn3BYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21410249 (0x146b1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc42ac4e0a2a02cced4d17d4449766b67b6a3e5
        Validity
            Not Before: Jun  7 07:08:31 2022 GMT
            Not After : Jun  8 07:08:31 2022 GMT
        Subject: CN=82866f23aa8607168ee0d53ec867600b8455fe12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:e8:06:82:a7:63:ae:c5:38:11:c0:51:a0:
                    65:f0:be:41:7f:84:fc:62:4e:0f:d9:4f:2b:20:51:
                    47:3d:8d:af:89:7a:78:58:4b:31:7a:f1:ab:b6:4a:
                    61:54:64:ad:be:af:91:93:41:64:15:6d:2b:a0:9c:
                    54:57:b0:4e:a9:42:43:bf:5f:72:08:4f:bc:6c:fa:
                    77:6d:47:ab:de:9e:1b:ea:70:c4:a4:87:dc:b8:42:
                    d9:ab:4b:ba:1c:b7:3d:b8:49:07:25:8d:ea:4b:46:
                    97:63:71:05:0d:90:77:12:2c:e0:a0:6a:dd:5c:b9:
                    b5:a8:8e:5d:cb:64:ba:7e:11:70:24:40:df:0a:82:
                    28:e5:3e:4e:2d:c2:a1:b7:46:52:93:89:28:4a:54:
                    1d:9d:7e:f3:f4:4b:b1:d0:42:63:57:7d:d0:d5:26:
                    8b:46:dd:56:d0:6d:d1:cb:7f:26:5e:32:08:d4:aa:
                    6a:63:3d:f6:73:0d:91:58:2c:d7:31:c9:b5:22:fe:
                    c5:1e:76:87:c8:bf:b2:e6:a2:b1:6a:99:ea:29:a1:
                    d1:30:2d:59:87:e6:8a:9e:4e:87:84:0a:2c:ff:04:
                    eb:66:67:64:45:d7:b0:40:87:99:06:00:13:18:75:
                    45:50:cb:df:49:e1:1e:86:cc:4d:26:7a:54:35:03:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:86:6F:23:AA:86:07:16:8E:E0:D5:3E:C8:67:60:0B:84:55:FE:12
            X509v3 Authority Key Identifier:
                keyid:EF:C4:2A:C4:E0:A2:A0:2C:CE:D4:D1:7D:44:49:76:6B:67:B6:A3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78QqxOCioCzO1NF9REl2a2e2o-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/827ef5-8c3b-441e-81fb-bedccbc0d2ce/1/78QqxOCioCzO1NF9REl2a2e2o-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/827ef5-8c3b-441e-81fb-bedccbc0d2ce/1/78QqxOCioCzO1NF9REl2a2e2o-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:b8:b6:4d:68:7e:23:27:3b:1b:f8:f6:25:03:3a:2b:73:
         10:fa:8e:40:f6:84:98:34:30:fc:81:50:89:ec:dd:f5:84:05:
         14:78:6b:fc:ef:6b:02:a2:c2:3e:58:a9:04:93:f5:07:2d:cd:
         a9:7e:f4:37:99:a3:08:23:f6:45:55:98:82:5a:2e:ba:28:73:
         c8:a4:a6:97:2c:0c:10:4b:aa:3e:99:bc:44:c6:0c:52:eb:ec:
         58:0c:69:fe:b9:ac:ba:23:56:ad:9c:4b:3b:0d:e0:5f:65:7a:
         b0:07:94:db:ee:83:b4:2d:9f:13:b7:b0:3c:a0:56:92:4e:49:
         20:b7:05:9f:b5:eb:33:d8:fc:21:10:72:89:32:0a:0f:5e:bc:
         e3:b8:56:95:37:5d:76:f9:64:94:56:88:3a:32:fa:fa:6a:e9:
         d8:e9:7e:61:e8:03:38:19:c2:6f:ef:fc:cb:1f:ff:75:ab:a1:
         9e:0d:d5:68:44:43:8e:a7:8b:2d:b9:97:2f:f8:2c:b0:18:a8:
         13:05:52:d0:27:5d:c0:13:60:29:ef:24:07:04:4e:26:59:2c:
         fc:96:f9:f6:a4:bf:3d:ed:79:59:f9:51:ac:3f:15:ed:b1:b7:
         8a:c8:44:e6:32:c9:d0:47:8f:1a:17:5c:1d:fd:03:ee:be:47:
         16:81:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----