Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec3573-cebb-4b75-a0f2-7ad81b246141/1/6EG1W_v4lG5P65UcNF69I3aUWt8.mft
File:                     6EG1W_v4lG5P65UcNF69I3aUWt8.mft (raw, json)
Hash identifier:          tz+3QJA9jgaAiR7S0Z/pRYEMYTG7grdQrGeityYd89c=
Subject key identifier:   F1:52:00:3E:38:5D:59:B0:34:86:DF:DE:57:54:4E:F3:4C:72:81:0F
Authority key identifier: E8:41:B5:5B:FB:F8:94:6E:4F:EB:95:1C:34:5E:BD:23:76:94:5A:DF
Certificate issuer:       /CN=e841b55bfbf8946e4feb951c345ebd2376945adf
Certificate serial:       082139D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EG1W_v4lG5P65UcNF69I3aUWt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ec3573-cebb-4b75-a0f2-7ad81b246141/1/6EG1W_v4lG5P65UcNF69I3aUWt8.mft
Manifest number:          0920
Signing time:             Thu 28 Apr 2022 09:11:53 +0000
Manifest this update:     Thu 28 Apr 2022 09:11:53 +0000
Manifest next update:     Fri 29 Apr 2022 09:11:53 +0000
Files and hashes:         1: 6EG1W_v4lG5P65UcNF69I3aUWt8.crl (hash: lzAmL3a5qUgyxHhqO9/Gdk0kzEwbhBUdb6vXz0K9XEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136395219 (0x82139d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e841b55bfbf8946e4feb951c345ebd2376945adf
        Validity
            Not Before: Apr 28 09:11:53 2022 GMT
            Not After : Apr 29 09:11:53 2022 GMT
        Subject: CN=f152003e385d59b03486dfde57544ef34c72810f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:54:6a:a0:6c:1c:a7:37:b6:e1:69:56:f0:
                    83:20:51:4d:6d:64:8c:58:c2:7b:a7:09:7e:85:f4:
                    3f:10:70:76:cf:e3:f8:b2:0a:14:83:37:89:a4:0d:
                    01:17:08:f1:cd:db:e6:51:33:11:fe:09:53:b0:eb:
                    d2:d9:6a:a1:b8:23:51:88:c0:cc:d8:17:fa:c3:39:
                    29:71:7a:68:8b:b9:10:ee:6b:96:38:52:00:28:ee:
                    97:03:44:2c:58:c9:1d:18:0a:d1:fc:98:eb:aa:ac:
                    77:89:89:73:b0:a9:df:f4:d9:28:17:3e:77:99:9c:
                    b7:65:b6:5d:7a:f8:17:19:8f:5b:fc:62:03:8b:37:
                    47:21:e5:2d:f7:86:4d:3d:8e:a4:2c:68:a3:f2:be:
                    eb:c9:75:99:4a:72:3e:2d:18:48:9c:af:ba:4c:a3:
                    5b:4e:98:ea:35:48:3f:86:a7:cc:9b:60:e4:9b:44:
                    d4:89:50:6e:e2:b6:1b:cc:13:ca:8a:14:ed:64:8e:
                    9a:57:f3:a2:3c:07:39:77:ab:17:5b:35:44:64:bf:
                    1a:71:09:4f:51:7d:b9:6b:62:18:5d:b7:03:45:f5:
                    02:54:4d:ad:22:b1:d4:f6:8a:5b:a9:43:0f:82:69:
                    50:0c:b3:bf:82:89:fb:e9:14:dc:a5:d1:e4:07:52:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:52:00:3E:38:5D:59:B0:34:86:DF:DE:57:54:4E:F3:4C:72:81:0F
            X509v3 Authority Key Identifier:
                keyid:E8:41:B5:5B:FB:F8:94:6E:4F:EB:95:1C:34:5E:BD:23:76:94:5A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EG1W_v4lG5P65UcNF69I3aUWt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec3573-cebb-4b75-a0f2-7ad81b246141/1/6EG1W_v4lG5P65UcNF69I3aUWt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec3573-cebb-4b75-a0f2-7ad81b246141/1/6EG1W_v4lG5P65UcNF69I3aUWt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2b:50:a2:22:91:83:03:11:4e:6c:5f:cf:3c:6e:76:cb:32:
         e9:2d:67:bc:0e:c6:ce:58:6a:11:39:fb:21:1d:00:ee:b0:6e:
         d1:1e:52:40:33:1b:a9:fa:99:c9:0d:19:a7:a4:39:2c:44:d6:
         1c:57:b0:bd:fb:13:f4:7b:d5:58:0c:d2:91:c3:fd:9b:69:3d:
         47:ad:a0:83:e7:44:76:25:05:e9:76:e3:32:fd:9b:8a:12:ba:
         57:c9:65:c9:e8:7d:8f:59:c0:cf:42:e4:fc:42:4d:25:af:32:
         d6:dd:7a:61:b5:c7:bf:9b:1b:fd:d4:d0:a1:0d:69:f1:99:d5:
         7f:61:fd:ea:a0:8c:eb:22:db:1b:05:5e:79:72:b6:ee:68:1b:
         f4:7c:86:d6:e0:2d:98:fa:33:9f:7f:7c:12:5a:ee:c1:10:dd:
         9f:95:14:77:ea:fb:00:17:46:c1:3d:2e:fc:a3:08:cb:84:7a:
         ec:5b:8f:d1:73:c9:2e:b8:a0:05:e1:65:aa:dd:d9:2d:07:8e:
         6e:2d:b9:9d:00:a2:a7:ec:e1:4c:49:56:e5:d4:0f:ad:64:b5:
         29:0c:68:89:5d:90:55:23:31:98:da:5c:b2:4e:40:2d:0c:69:
         87:fb:be:c1:51:69:f9:ea:5e:07:b1:02:25:7c:1a:9b:4b:b6:
         78:ff:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----