Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c731b3-b23e-4c28-8bfb-06c1a47a525e/1/qgI9olN5STeTwxDeVasWj2OJm1s.mft
File:                     qgI9olN5STeTwxDeVasWj2OJm1s.mft (raw, json)
Hash identifier:          Jr0FWIxw3QEWHgAYGZZK7/G16aztYNH7Ud79ZPDLKq4=
Subject key identifier:   DC:6C:25:C2:AE:05:19:68:2E:63:C1:75:05:CD:8A:26:05:AB:DB:3A
Authority key identifier: AA:02:3D:A2:53:79:49:37:93:C3:10:DE:55:AB:16:8F:63:89:9B:5B
Certificate issuer:       /CN=aa023da25379493793c310de55ab168f63899b5b
Certificate serial:       0185C8455B68FA977B66BC3DFCCED824091F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgI9olN5STeTwxDeVasWj2OJm1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c731b3-b23e-4c28-8bfb-06c1a47a525e/1/qgI9olN5STeTwxDeVasWj2OJm1s.mft
Manifest number:          096F
Signing time:             Thu 19 Jan 2023 04:24:26 +0000
Manifest this update:     Thu 19 Jan 2023 04:24:26 +0000
Manifest next update:     Fri 20 Jan 2023 04:24:26 +0000
Files and hashes:         1: qgI9olN5STeTwxDeVasWj2OJm1s.crl (hash: hOohZVvIwvAvIy9gXQxv+skkovxkkA35viz6pt+aAiA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c8:45:5b:68:fa:97:7b:66:bc:3d:fc:ce:d8:24:09:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa023da25379493793c310de55ab168f63899b5b
        Validity
            Not Before: Jan 19 04:24:26 2023 GMT
            Not After : Jan 20 04:24:26 2023 GMT
        Subject: CN=dc6c25c2ae0519682e63c17505cd8a2605abdb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:40:b2:84:85:4e:4f:fc:e7:85:eb:f7:98:
                    9d:9a:be:1b:68:f0:d3:75:e0:47:c2:6a:03:85:3b:
                    f9:a7:ea:ca:88:d4:ed:18:fc:11:25:ad:18:28:49:
                    47:dd:d2:74:a0:a2:b8:33:bf:1a:f2:ca:ee:dc:c2:
                    63:ed:6f:d7:6e:39:be:91:61:e8:14:d0:25:6b:00:
                    26:43:04:76:b6:23:3e:2e:0b:6d:90:de:ab:2c:b7:
                    7a:fa:7a:cc:e8:73:ae:c2:eb:78:08:4e:4a:96:2e:
                    3a:df:13:fb:c8:c1:8f:a2:17:24:f9:e4:08:3f:4e:
                    5e:2e:73:c3:b9:4b:70:ed:af:47:c2:0e:3e:d9:37:
                    f9:6c:0f:b9:19:ab:e1:70:9a:81:1e:37:cc:9b:6a:
                    74:36:64:94:40:d9:86:37:ee:bf:6d:9f:8b:05:44:
                    2d:98:b8:66:db:06:c8:c3:35:67:c6:37:b6:c9:e2:
                    0c:3f:11:53:9f:16:54:7a:7a:4e:58:16:d2:f5:1a:
                    e4:10:8e:1c:dd:4e:c0:c9:b1:dd:ea:44:b1:2d:46:
                    d5:5f:26:33:6e:8e:4b:5d:2c:5c:cc:ff:f4:34:13:
                    1f:f2:21:35:1e:f8:49:9e:ca:02:91:de:0d:73:72:
                    06:83:f6:bf:83:52:58:26:70:21:41:ca:db:87:4b:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6C:25:C2:AE:05:19:68:2E:63:C1:75:05:CD:8A:26:05:AB:DB:3A
            X509v3 Authority Key Identifier:
                keyid:AA:02:3D:A2:53:79:49:37:93:C3:10:DE:55:AB:16:8F:63:89:9B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgI9olN5STeTwxDeVasWj2OJm1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c731b3-b23e-4c28-8bfb-06c1a47a525e/1/qgI9olN5STeTwxDeVasWj2OJm1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c731b3-b23e-4c28-8bfb-06c1a47a525e/1/qgI9olN5STeTwxDeVasWj2OJm1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a9:8a:8e:1a:a8:82:a0:04:fc:1e:f9:42:d7:70:eb:c1:08:
         8a:14:f3:46:0a:21:52:33:c5:6a:56:16:bf:c3:1a:01:25:3c:
         30:ef:f0:c7:60:66:30:44:50:a1:1d:c4:aa:29:27:54:e0:af:
         e3:e6:57:48:f2:0d:79:d6:58:81:69:ba:8b:0f:da:dc:1f:c2:
         1e:da:21:89:e3:f9:6d:bb:89:69:51:95:a7:24:99:f1:ac:87:
         c5:a9:f2:84:d0:80:ad:89:80:72:0c:84:4b:c0:37:73:94:f4:
         71:df:9c:44:af:a9:66:a1:f8:ae:34:7d:f2:55:c5:4d:1f:db:
         a6:6e:3d:c4:7d:46:3d:e2:c3:39:0a:f8:2b:05:ff:7b:a7:cf:
         25:31:37:17:9a:5d:8a:3f:f9:7b:40:14:ef:94:ab:70:6c:ba:
         3c:9b:7d:aa:40:14:7e:67:a9:11:e0:b4:e1:6f:34:8e:4c:fc:
         8d:6c:72:3b:1d:06:58:76:24:5d:f9:80:77:65:aa:a8:79:55:
         1a:d8:98:37:52:11:5b:0a:da:90:3c:10:66:ac:e0:fd:8b:5e:
         02:5c:cd:28:01:5e:1e:7c:24:28:35:a1:3d:1a:a1:99:10:9c:
         fe:19:80:91:08:b2:c5:29:13:1f:d2:cf:81:b6:43:53:82:3d:
         99:8e:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----