Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ce32ed-6f0c-4321-b2cd-bbcc70a5e0cb/1/pMZrxXs0q1eu7md94mRfz-Xcv_M.mft
File:                     pMZrxXs0q1eu7md94mRfz-Xcv_M.mft (raw, json)
Hash identifier:          2JYnPO9Aft3YL9gqGB2Z5nulNwud220YhtbNZrL+fyU=
Subject key identifier:   F9:18:74:C6:45:2A:94:31:DC:B2:E4:E7:84:FF:D0:D3:54:F5:85:F2
Authority key identifier: A4:C6:6B:C5:7B:34:AB:57:AE:EE:67:7D:E2:64:5F:CF:E5:DC:BF:F3
Certificate issuer:       /CN=a4c66bc57b34ab57aeee677de2645fcfe5dcbff3
Certificate serial:       0649B3C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMZrxXs0q1eu7md94mRfz-Xcv_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ce32ed-6f0c-4321-b2cd-bbcc70a5e0cb/1/pMZrxXs0q1eu7md94mRfz-Xcv_M.mft
Manifest number:          083C
Signing time:             Thu 21 Apr 2022 02:36:18 +0000
Manifest this update:     Thu 21 Apr 2022 02:36:18 +0000
Manifest next update:     Fri 22 Apr 2022 02:36:18 +0000
Files and hashes:         1: pMZrxXs0q1eu7md94mRfz-Xcv_M.crl (hash: TNGDzEe60rblYIXF+cg+bL9vBEEj28pXwy9YBlw9HCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105493447 (0x649b3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c66bc57b34ab57aeee677de2645fcfe5dcbff3
        Validity
            Not Before: Apr 21 02:36:18 2022 GMT
            Not After : Apr 22 02:36:18 2022 GMT
        Subject: CN=f91874c6452a9431dcb2e4e784ffd0d354f585f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:d6:0b:84:7b:f1:1d:93:16:c7:73:68:16:
                    81:b7:37:6a:3f:62:6b:df:fa:92:5f:1f:9f:37:86:
                    a1:95:dd:f8:42:08:19:e7:ab:3d:3d:a6:03:82:9b:
                    39:09:a1:5c:1c:6a:7b:bf:f4:6e:8d:33:21:b5:f8:
                    de:d7:16:8d:67:69:ce:22:a1:8e:80:33:0d:d0:0e:
                    80:53:1e:3a:ef:9b:b1:d9:2f:ac:4e:9d:6e:a8:b9:
                    06:a9:ff:b7:24:b4:f8:25:db:bd:fa:65:6c:b5:5d:
                    e1:93:61:e3:e3:13:00:a8:80:c7:0f:05:c8:a2:d1:
                    d2:12:9c:52:aa:ff:d4:69:24:06:2e:db:2a:e6:89:
                    13:a5:b8:92:a6:f7:9e:67:af:59:13:d5:29:1d:19:
                    91:42:26:e4:25:7c:08:e7:3d:dc:7e:36:36:51:29:
                    01:7f:2e:c2:e8:2c:65:bd:a1:da:b2:e4:41:7b:4e:
                    51:89:b5:1f:12:01:35:45:32:09:9b:2a:57:42:f4:
                    51:6f:be:3c:05:a9:42:a1:8a:e7:fc:13:a8:40:a4:
                    a8:1f:8c:9f:34:ae:6a:5c:b4:85:d7:1e:46:47:50:
                    4e:07:ba:bb:0e:67:0a:ec:63:d2:12:0b:c5:e2:45:
                    57:7a:d5:e3:d6:22:f7:88:55:02:9e:8d:a3:64:84:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:18:74:C6:45:2A:94:31:DC:B2:E4:E7:84:FF:D0:D3:54:F5:85:F2
            X509v3 Authority Key Identifier:
                keyid:A4:C6:6B:C5:7B:34:AB:57:AE:EE:67:7D:E2:64:5F:CF:E5:DC:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMZrxXs0q1eu7md94mRfz-Xcv_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ce32ed-6f0c-4321-b2cd-bbcc70a5e0cb/1/pMZrxXs0q1eu7md94mRfz-Xcv_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ce32ed-6f0c-4321-b2cd-bbcc70a5e0cb/1/pMZrxXs0q1eu7md94mRfz-Xcv_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:72:21:63:f9:05:d7:b5:c1:09:9d:17:24:89:a3:89:c7:03:
         cc:91:8e:f9:4c:25:e8:f7:c1:e8:82:d2:d3:f1:c7:0d:63:55:
         39:d1:16:db:ff:46:de:cb:35:8d:96:88:56:99:f7:3f:26:6c:
         ee:e7:22:41:0b:09:84:3c:cc:f4:04:12:e8:78:45:6b:8e:9c:
         3c:83:18:27:22:18:e8:f9:1e:fc:ab:59:2c:a9:e7:19:5c:34:
         0a:cd:74:c0:0a:e2:0c:36:d7:bd:9e:6f:fc:95:39:b0:58:56:
         93:18:0b:fb:24:53:9e:b5:e3:61:00:43:8f:be:f4:a8:84:57:
         51:35:a5:16:96:b1:7c:e6:81:d6:da:37:39:92:ef:f0:e7:18:
         bf:6e:ea:65:f0:91:31:de:b8:37:44:3d:de:24:1d:68:62:91:
         52:12:0a:16:2b:d1:20:21:ce:d1:f1:71:ce:a2:1e:4a:51:6f:
         71:12:77:14:3e:a9:8e:cd:cf:f4:8c:fb:df:cf:b0:5d:54:9b:
         0e:50:a5:3f:60:a5:4e:ed:d4:ff:74:58:d2:74:7f:10:8a:da:
         a5:50:75:f5:eb:87:20:00:01:66:e9:32:37:ce:85:6f:07:6e:
         42:33:70:5a:4f:fa:18:b6:58:9d:15:1f:0a:9a:3a:dc:90:b9:
         3d:48:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----