Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/5955a3-2d2d-4920-9148-1768f3d435c4/1/3N6tV9c-pvfeIUMLzT8nokvD9BU.mft
File:                     3N6tV9c-pvfeIUMLzT8nokvD9BU.mft (raw, json)
Hash identifier:          PmCXvSbseL9VOG9C/Nmwy97gf8OLf/rjxu1sVD2DoMs=
Subject key identifier:   69:FC:45:9D:62:55:AC:C0:68:DF:52:88:93:99:39:DB:36:E3:8E:AE
Authority key identifier: DC:DE:AD:57:D7:3E:A6:F7:DE:21:43:0B:CD:3F:27:A2:4B:C3:F4:15
Certificate issuer:       /CN=dcdead57d73ea6f7de21430bcd3f27a24bc3f415
Certificate serial:       018300777A6A5B54361AE1031D82A0DB30DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3N6tV9c-pvfeIUMLzT8nokvD9BU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/5955a3-2d2d-4920-9148-1768f3d435c4/1/3N6tV9c-pvfeIUMLzT8nokvD9BU.mft
Manifest number:          DB
Signing time:             Fri 02 Sep 2022 23:09:33 +0000
Manifest this update:     Fri 02 Sep 2022 23:09:33 +0000
Manifest next update:     Sat 03 Sep 2022 23:09:33 +0000
Files and hashes:         1: 3N6tV9c-pvfeIUMLzT8nokvD9BU.crl (hash: UB402lFcFunkWPOWcsWG5qiTO7WK4JY0E8gTPmZdx0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:00:77:7a:6a:5b:54:36:1a:e1:03:1d:82:a0:db:30:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcdead57d73ea6f7de21430bcd3f27a24bc3f415
        Validity
            Not Before: Sep  2 23:09:33 2022 GMT
            Not After : Sep  3 23:09:33 2022 GMT
        Subject: CN=69fc459d6255acc068df5288939939db36e38eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:6c:7d:21:56:5c:93:be:12:5f:02:62:da:
                    16:ac:cf:76:65:17:0b:76:8c:d2:a6:17:3a:dc:79:
                    08:b8:bc:b6:d3:2d:6c:f7:90:ac:7b:73:12:2c:23:
                    2f:35:17:bd:5a:12:1e:7d:e1:0b:96:f5:59:73:08:
                    d1:5b:62:0d:fb:88:13:a0:ac:88:91:31:0f:2d:39:
                    6e:4b:f0:f3:7d:e5:cf:c4:6e:2e:43:07:64:03:f6:
                    7c:4e:05:69:16:26:a1:5a:ff:d0:f1:d3:28:72:79:
                    b1:9e:a2:9a:e8:47:ce:34:b6:9f:f7:30:ab:c5:f1:
                    b0:85:63:13:60:51:c1:f2:e2:72:95:96:4e:b1:24:
                    07:b1:cd:db:a0:f2:ef:24:6f:71:02:1c:bf:46:9e:
                    23:3b:92:4a:73:ce:44:eb:b0:17:43:08:1e:23:c9:
                    c4:21:26:e8:08:21:c9:79:aa:fc:0c:2e:08:66:c5:
                    6c:bf:d6:4a:11:d3:b4:7d:80:b3:59:e0:f0:84:c4:
                    f8:39:b4:cc:61:87:00:2e:ea:45:f3:a8:d2:a2:c1:
                    ef:c9:f6:62:07:c2:24:70:81:c6:9d:68:9e:9a:5a:
                    77:d7:bc:59:64:97:45:a4:0b:98:15:c9:e6:a3:cc:
                    84:e9:14:e7:54:1c:60:66:0c:5a:0f:93:e8:8c:85:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FC:45:9D:62:55:AC:C0:68:DF:52:88:93:99:39:DB:36:E3:8E:AE
            X509v3 Authority Key Identifier:
                keyid:DC:DE:AD:57:D7:3E:A6:F7:DE:21:43:0B:CD:3F:27:A2:4B:C3:F4:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N6tV9c-pvfeIUMLzT8nokvD9BU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/5955a3-2d2d-4920-9148-1768f3d435c4/1/3N6tV9c-pvfeIUMLzT8nokvD9BU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/5955a3-2d2d-4920-9148-1768f3d435c4/1/3N6tV9c-pvfeIUMLzT8nokvD9BU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:79:82:64:76:10:82:4d:c4:48:2b:32:6f:88:dc:b4:9b:40:
         c7:94:16:1a:4a:e0:e2:ee:ce:ab:b8:59:eb:79:44:bb:64:2b:
         6f:ee:d6:e6:c0:ae:9d:df:b4:69:87:9a:39:03:5a:d0:ff:7e:
         11:87:9e:dc:14:ef:71:7d:4a:79:56:57:cf:51:e3:b0:07:be:
         fb:da:14:1a:c0:3c:d3:b9:d4:c5:8a:ab:7b:c0:f8:f7:aa:d7:
         1a:96:4a:7e:f0:cc:93:cb:2d:b1:bd:6a:6d:e7:49:c5:09:32:
         0a:ab:79:ee:07:8c:10:aa:d0:9f:b6:b5:1b:f9:46:f0:4f:f6:
         c0:82:8d:df:12:06:4d:35:a4:f2:47:41:49:09:9d:4f:c5:44:
         99:55:21:39:73:a7:1a:69:64:4d:f7:0f:2d:55:bc:81:53:61:
         19:11:2f:eb:98:c6:6e:19:02:a1:52:50:db:58:7f:3b:99:bb:
         40:e9:03:78:1d:7d:05:a1:82:e1:74:e4:c2:ed:8f:e5:5c:3e:
         eb:f9:a0:91:dc:63:1c:2c:71:b2:d1:44:b2:d7:a9:95:bb:f0:
         d6:ff:2a:c6:cb:1f:80:f0:80:9d:2d:c7:96:d9:2d:95:47:2e:
         56:44:17:b4:f7:05:0e:b3:11:ff:6f:36:5c:e0:51:c2:53:b7:
         1f:26:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----