Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/97d3dc-7245-4fb3-8f4e-9ee46aeaa4ce/1/Qf91M6G1ObTOyHkYuHipphwCYJI.mft
File:                     Qf91M6G1ObTOyHkYuHipphwCYJI.mft (raw, json)
Hash identifier:          aB6vsb/sZmYqGq4TxQAILfrERiREN4p1LI1i9LZOgX8=
Subject key identifier:   7C:86:FF:B7:41:48:E2:CB:73:CC:75:81:44:03:A3:0C:27:81:FD:B2
Authority key identifier: 41:FF:75:33:A1:B5:39:B4:CE:C8:79:18:B8:78:A9:A6:1C:02:60:92
Certificate issuer:       /CN=41ff7533a1b539b4cec87918b878a9a61c026092
Certificate serial:       0182C972EB42F86D85FFB65A2CE1C0686DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qf91M6G1ObTOyHkYuHipphwCYJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/97d3dc-7245-4fb3-8f4e-9ee46aeaa4ce/1/Qf91M6G1ObTOyHkYuHipphwCYJI.mft
Manifest number:          0403
Signing time:             Tue 23 Aug 2022 06:45:27 +0000
Manifest this update:     Tue 23 Aug 2022 06:45:27 +0000
Manifest next update:     Wed 24 Aug 2022 06:45:27 +0000
Files and hashes:         1: Qf91M6G1ObTOyHkYuHipphwCYJI.crl (hash: e+OYcRwWeKKZ0Le29NmzXgVx6kKD4kVMITe6Z7AZJoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c9:72:eb:42:f8:6d:85:ff:b6:5a:2c:e1:c0:68:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ff7533a1b539b4cec87918b878a9a61c026092
        Validity
            Not Before: Aug 23 06:45:27 2022 GMT
            Not After : Aug 24 06:45:27 2022 GMT
        Subject: CN=7c86ffb74148e2cb73cc75814403a30c2781fdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:32:57:bb:48:0a:4b:06:03:92:9f:29:c8:
                    1d:0e:e1:1a:f5:ab:69:f9:e7:c9:ce:63:10:25:52:
                    7d:b0:94:c1:34:f4:6b:4d:87:0e:c0:55:91:d9:0b:
                    8c:06:1c:24:fc:67:2f:bd:ad:11:24:6c:05:d3:c8:
                    0b:a7:e9:09:80:31:e4:33:df:43:a8:03:23:b5:6d:
                    d3:72:9d:1a:ee:56:33:e9:cb:ca:1d:83:7f:2b:a9:
                    a0:29:06:ec:c6:2e:74:54:e8:5f:c5:24:1f:e6:38:
                    fb:e3:98:b4:c1:de:f8:34:b2:b4:b4:30:b5:cf:30:
                    f0:a8:fa:b4:6e:4e:95:a4:d9:c3:2b:06:00:01:1c:
                    be:a9:c6:1a:49:46:36:6a:39:6e:df:e0:c7:b1:5f:
                    2a:4b:78:d0:52:0e:4c:fa:2a:25:eb:e2:36:40:0e:
                    b9:f4:86:87:20:77:ea:e2:ad:82:73:04:58:e6:36:
                    46:1c:0b:cf:37:4b:38:7b:22:91:20:a2:22:99:23:
                    16:01:59:50:b1:cb:f1:27:3f:e4:ee:dc:96:32:5c:
                    bb:74:b0:b3:64:53:86:aa:83:1e:50:ef:6c:db:7b:
                    48:1c:a8:6c:13:77:29:8f:c9:d5:53:87:4d:43:00:
                    62:0f:a8:8b:59:71:25:2c:e4:8f:99:42:75:b9:fe:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:86:FF:B7:41:48:E2:CB:73:CC:75:81:44:03:A3:0C:27:81:FD:B2
            X509v3 Authority Key Identifier:
                keyid:41:FF:75:33:A1:B5:39:B4:CE:C8:79:18:B8:78:A9:A6:1C:02:60:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf91M6G1ObTOyHkYuHipphwCYJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/97d3dc-7245-4fb3-8f4e-9ee46aeaa4ce/1/Qf91M6G1ObTOyHkYuHipphwCYJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/97d3dc-7245-4fb3-8f4e-9ee46aeaa4ce/1/Qf91M6G1ObTOyHkYuHipphwCYJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:8d:4a:b7:00:46:8e:ed:0b:dd:22:c2:f5:0d:76:76:52:17:
         72:6b:d9:88:0d:ff:a9:82:3a:3f:a5:cf:7c:97:a9:0a:ae:30:
         74:d5:47:1a:1d:16:1c:71:25:0f:d6:2e:8b:1e:a0:98:f9:07:
         00:80:63:c4:4b:b4:47:4a:27:c4:73:c8:29:37:c9:44:5b:85:
         c4:e1:e0:07:bc:32:e6:f1:03:7e:8c:03:cc:7c:3b:5d:9b:12:
         73:c3:e6:60:43:34:aa:9e:29:de:58:2a:72:a1:19:08:ff:1a:
         74:17:c9:f5:e9:ed:e6:fe:8b:8f:ab:7e:cc:ea:a5:e3:29:5d:
         cf:24:bb:fd:cb:c4:ff:28:1f:fd:dc:18:a6:56:04:f5:ea:94:
         38:4e:d2:a6:92:07:f0:8d:14:88:73:ce:e9:1e:d8:17:bb:53:
         3c:36:78:36:9a:22:56:16:40:18:c7:b6:0d:24:b1:37:81:c7:
         03:a4:fa:09:2e:ae:44:19:88:64:1c:4a:72:c7:d0:b9:76:ea:
         a0:01:00:91:78:65:09:f1:c6:be:3e:af:87:c4:d0:14:30:a5:
         46:94:a6:1e:2f:ab:72:f6:e8:66:97:b9:1d:ec:ff:1b:08:69:
         23:90:65:70:d3:85:ea:20:1a:bb:f3:9b:08:79:a0:a9:d1:87:
         a8:48:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----