Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/015cac-020e-41e8-b735-c4ccb8c24629/1/XTzPwStuIbKL55JAmmgAx5Gq-YA.mft
File:                     XTzPwStuIbKL55JAmmgAx5Gq-YA.mft (raw, json)
Hash identifier:          eeaekoe4893zv92pBHJ2MZTacRZwSD4DLXt0YMVSg/g=
Subject key identifier:   43:EC:72:7D:5A:8D:14:92:1C:1C:BC:BF:9F:97:06:31:07:DE:41:5F
Authority key identifier: 5D:3C:CF:C1:2B:6E:21:B2:8B:E7:92:40:9A:68:00:C7:91:AA:F9:80
Certificate issuer:       /CN=5d3ccfc12b6e21b28be792409a6800c791aaf980
Certificate serial:       0182C920A8BA8158FF66D33538E2459E6BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTzPwStuIbKL55JAmmgAx5Gq-YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/015cac-020e-41e8-b735-c4ccb8c24629/1/XTzPwStuIbKL55JAmmgAx5Gq-YA.mft
Manifest number:          0158
Signing time:             Tue 23 Aug 2022 05:15:36 +0000
Manifest this update:     Tue 23 Aug 2022 05:15:36 +0000
Manifest next update:     Wed 24 Aug 2022 05:15:36 +0000
Files and hashes:         1: XTzPwStuIbKL55JAmmgAx5Gq-YA.crl (hash: OsWQ6X/CkMuLdp5ocSmhFJKKvna7wZ481Md6v3LX2i0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c9:20:a8:ba:81:58:ff:66:d3:35:38:e2:45:9e:6b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3ccfc12b6e21b28be792409a6800c791aaf980
        Validity
            Not Before: Aug 23 05:15:36 2022 GMT
            Not After : Aug 24 05:15:36 2022 GMT
        Subject: CN=43ec727d5a8d14921c1cbcbf9f97063107de415f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:0d:3d:35:27:67:ba:57:49:ff:61:88:73:
                    5d:06:cd:e9:2f:14:1b:41:78:6b:89:6e:e7:5e:68:
                    7c:0e:1e:8d:c0:e2:6b:c0:8b:7c:d2:54:b8:cb:80:
                    70:f5:dd:74:43:9e:fd:95:43:66:38:69:18:d7:f5:
                    d8:89:1d:d7:be:d8:65:49:be:4c:9a:df:85:69:16:
                    38:c7:09:6b:cc:ed:44:6b:6e:e9:26:b8:ce:3a:b4:
                    3e:91:3e:a3:e1:7e:fb:66:58:f4:28:1c:b7:75:7a:
                    57:4b:db:99:2e:e9:19:ef:71:fb:db:39:bc:49:a5:
                    f1:c9:6a:7a:f1:3d:a1:67:7c:c8:2e:d8:37:02:32:
                    44:8b:00:e1:2c:d2:5c:d3:5a:1e:2d:59:10:df:30:
                    a2:4e:63:5a:0a:41:d1:b0:7e:70:ee:53:a7:05:4f:
                    fc:d6:2a:b0:f8:db:a5:84:8b:8a:03:1c:8b:ad:90:
                    62:c7:2b:47:49:ce:a0:26:ee:03:3b:64:69:0a:7e:
                    17:34:ea:5c:5b:34:3b:e9:d0:e2:f8:99:68:38:31:
                    c2:68:c6:bf:a2:59:85:83:98:7d:0d:ec:17:24:97:
                    60:6b:b0:ad:2e:f1:1f:f2:3f:59:22:ef:30:b1:3f:
                    32:3b:a4:b1:9d:57:28:e5:8a:4e:bd:9d:12:0c:4c:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:72:7D:5A:8D:14:92:1C:1C:BC:BF:9F:97:06:31:07:DE:41:5F
            X509v3 Authority Key Identifier:
                keyid:5D:3C:CF:C1:2B:6E:21:B2:8B:E7:92:40:9A:68:00:C7:91:AA:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTzPwStuIbKL55JAmmgAx5Gq-YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/015cac-020e-41e8-b735-c4ccb8c24629/1/XTzPwStuIbKL55JAmmgAx5Gq-YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/015cac-020e-41e8-b735-c4ccb8c24629/1/XTzPwStuIbKL55JAmmgAx5Gq-YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:36:13:68:9c:13:17:10:57:cd:d8:28:75:a2:15:c1:51:
         14:74:96:55:29:eb:f4:2f:0f:e6:2f:a0:bf:1f:38:bc:64:56:
         7c:57:68:b9:c6:ca:26:87:31:f8:d8:63:56:5e:ab:c5:d0:04:
         28:33:08:fa:f7:6c:d0:14:02:b4:77:de:db:bd:77:1b:32:ea:
         30:65:d2:af:06:c3:39:fc:09:b0:3e:0f:1a:47:6d:b9:e9:94:
         db:c1:2e:2c:08:f8:5b:31:26:29:70:dc:4a:83:d1:87:c1:53:
         ae:5c:ca:59:61:8f:ff:c9:df:fe:a9:01:d5:fe:4a:34:74:37:
         71:81:8a:e9:df:8b:60:f7:96:c3:58:1e:9d:92:da:d1:99:21:
         da:66:eb:1c:6a:d5:03:aa:15:ed:f0:9f:38:c3:14:98:66:59:
         f6:3a:3a:28:de:48:76:65:33:2f:b5:e2:cb:1b:c7:ce:b7:4a:
         2b:db:26:47:42:0d:77:b6:96:08:e9:98:ae:75:6a:57:76:f8:
         45:db:7d:27:75:56:81:0c:26:30:24:5f:66:c3:68:c9:f1:32:
         00:d0:ee:81:b6:f6:5e:63:19:81:1b:11:df:50:79:f5:01:33:
         ff:3c:c4:69:79:a6:e8:66:ba:69:c2:7f:39:37:f0:42:f8:03:
         f3:f0:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----