Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.mft
File:                     gjx1fl_73lY_J6ldbZekmMMSJS4.mft (raw, json)
Hash identifier:          5kWX3w6aYSRddX+vcq4pLgIKVMvWG7vAW7WGIoXVl/0=
Subject key identifier:   F2:D3:0F:75:BD:9C:AD:F5:B4:B0:55:0C:C0:10:A9:9C:29:63:7F:65
Authority key identifier: 82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
Certificate issuer:       /CN=823c757e5ffbde563f27a95d6d97a498c312252e
Certificate serial:       0181EBAFF58AC723AE001BE3F4AE822F4413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.mft
Manifest number:          09FB
Signing time:             Mon 11 Jul 2022 05:16:26 +0000
Manifest this update:     Mon 11 Jul 2022 05:16:26 +0000
Manifest next update:     Tue 12 Jul 2022 05:16:26 +0000
Files and hashes:         1: gjx1fl_73lY_J6ldbZekmMMSJS4.crl (hash: /xYqWi9KJPIQiPywkyhaZmaYz+LQCO/deDmrp3Qk+T0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:eb:af:f5:8a:c7:23:ae:00:1b:e3:f4:ae:82:2f:44:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823c757e5ffbde563f27a95d6d97a498c312252e
        Validity
            Not Before: Jul 11 05:16:26 2022 GMT
            Not After : Jul 12 05:16:26 2022 GMT
        Subject: CN=f2d30f75bd9cadf5b4b0550cc010a99c29637f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:98:d3:1d:a7:a5:ad:f1:c6:3b:c4:48:f9:
                    11:b2:4f:d6:14:87:21:1e:18:65:05:be:a8:aa:93:
                    ed:82:73:23:d9:15:eb:6b:f6:45:f9:a7:da:40:a1:
                    0c:db:e1:b7:de:5c:30:d9:b8:64:c9:74:43:c3:1c:
                    96:41:31:1b:2e:a5:a2:76:bf:d8:ea:ef:2b:8a:02:
                    f7:1f:30:6c:5f:90:48:2b:1b:c0:a7:a2:39:51:56:
                    f2:76:55:48:99:9a:54:3d:28:01:36:4c:92:44:80:
                    3e:34:eb:e9:64:ee:31:1c:fc:e2:4b:63:10:f1:8f:
                    a9:75:4b:74:a4:aa:37:6d:a2:8b:cf:b8:fb:d6:4d:
                    68:73:c4:57:18:7d:fb:ec:be:68:1e:b7:24:ed:b8:
                    d7:77:43:62:f8:13:1c:e5:71:83:1b:93:ef:f5:ac:
                    f5:18:38:0d:ef:5d:c9:25:5e:84:bf:e8:56:63:1f:
                    3f:b1:09:33:e5:74:2b:f2:c4:63:ce:24:49:bf:55:
                    85:a1:42:eb:3d:04:2c:4b:a6:3d:d9:7f:93:8d:ee:
                    fb:c5:87:71:87:42:d0:e8:f9:90:87:1f:1c:13:32:
                    20:d4:d7:5e:51:40:71:c7:94:72:b9:f0:c4:85:1c:
                    ff:ab:3c:06:7a:a4:89:ae:00:d9:d3:f4:6b:9e:54:
                    c8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D3:0F:75:BD:9C:AD:F5:B4:B0:55:0C:C0:10:A9:9C:29:63:7F:65
            X509v3 Authority Key Identifier:
                keyid:82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ef:6a:53:4e:71:09:ef:1f:00:6f:9a:2d:d3:52:7e:bc:cc:
         b7:d8:97:53:d9:f5:88:d7:3d:e2:a2:c8:b2:a8:30:ef:47:c2:
         53:54:b4:82:88:55:d8:7f:1e:65:b7:02:b5:ac:7d:59:9d:47:
         0e:5f:20:9e:7b:b6:92:33:7c:2f:69:7d:48:88:79:4e:54:c0:
         45:ae:1e:b2:f3:9b:46:3f:51:69:3a:7e:04:b5:1a:3e:a1:f1:
         9a:b5:5c:f7:bf:9f:90:fe:e7:bd:86:0b:c7:49:8f:a1:5d:a2:
         18:bd:af:ea:6c:ed:24:b7:26:b5:fe:8e:c9:5e:47:dc:ca:f7:
         45:00:5a:7d:af:86:87:97:af:c5:59:7c:33:cc:3b:7c:00:e9:
         ef:40:ea:56:c3:3d:15:0f:3b:62:d5:91:06:3f:76:bd:d7:ed:
         bf:68:73:77:8e:53:8a:2a:d0:67:f4:0c:7d:3c:c5:5f:f2:aa:
         fa:f9:da:fc:f6:fb:f1:fd:bc:b5:b1:7f:c1:49:0f:d6:b8:c1:
         86:e1:8f:c3:19:eb:af:56:4c:b5:c8:0c:80:19:6d:40:ed:c8:
         11:c5:3f:f6:b7:8e:44:08:f8:f1:4b:c1:dc:17:ec:26:4c:7d:
         97:86:84:2c:dd:51:54:13:d2:02:92:6a:38:61:68:f6:61:88:
         b4:2e:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----