Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/1a2443-cc8c-414b-b895-94b15cf20d26/1/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.mft
File:                     t7ZD6pFmRwwnSb0HKe8KI_x4KwE.mft (raw, json)
Hash identifier:          1P/JqVHJZsYpmcMD5c5QQItMeQY1mH2N9ofa18ozq30=
Subject key identifier:   A1:4F:76:DB:BD:94:23:B6:3C:C1:B1:E8:6E:55:7D:36:F2:8B:9C:A5
Authority key identifier: B7:B6:43:EA:91:66:47:0C:27:49:BD:07:29:EF:0A:23:FC:78:2B:01
Certificate issuer:       /CN=b7b643ea9166470c2749bd0729ef0a23fc782b01
Certificate serial:       03339A9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/1a2443-cc8c-414b-b895-94b15cf20d26/1/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.mft
Manifest number:          0444
Signing time:             Tue 22 Feb 2022 05:39:00 +0000
Manifest this update:     Tue 22 Feb 2022 05:39:00 +0000
Manifest next update:     Wed 23 Feb 2022 05:39:00 +0000
Files and hashes:         1: t7ZD6pFmRwwnSb0HKe8KI_x4KwE.crl (hash: Ac7RbEsb6pG1B4cSEyddym0x4cuGsIGQILCTtrvcf5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53713562 (0x3339a9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b643ea9166470c2749bd0729ef0a23fc782b01
        Validity
            Not Before: Feb 22 05:39:00 2022 GMT
            Not After : Feb 23 05:39:00 2022 GMT
        Subject: CN=a14f76dbbd9423b63cc1b1e86e557d36f28b9ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:2d:64:8e:9c:2a:a2:b7:2c:9a:c2:ed:df:
                    ed:e8:dc:b5:1c:e8:12:c4:b0:a4:15:4a:fc:07:a3:
                    c9:6a:b1:14:15:74:a2:e3:95:24:cc:7d:e7:8c:53:
                    28:3f:c9:bb:15:16:cf:dc:d5:74:d0:3d:06:79:11:
                    30:fd:16:84:3f:e2:4c:69:4b:34:b1:61:7f:bd:c2:
                    30:b4:32:c2:49:65:28:55:da:18:79:74:9f:fd:52:
                    de:cf:fb:d6:9f:75:1e:fa:db:65:bb:d4:c7:21:e8:
                    e0:fc:6b:0b:0e:51:df:89:81:53:98:98:16:d3:13:
                    5b:02:dc:e6:4f:9a:51:a8:5b:8e:8a:b7:18:c1:01:
                    af:5d:9d:e7:de:06:7f:94:7d:7f:8a:54:85:7b:88:
                    d0:12:4f:0b:2c:0c:18:77:81:65:67:89:f0:3c:c0:
                    fc:db:d2:4f:c4:5e:69:23:28:05:e0:06:39:59:d3:
                    7f:c2:12:42:bd:a5:5a:b7:9f:e5:c6:e6:bf:ae:b5:
                    72:de:bd:2f:22:a6:2b:db:61:8e:79:fa:9c:ad:05:
                    7d:f4:2a:c7:09:9d:7e:a9:47:c2:c5:d7:ce:22:53:
                    81:fa:ea:a4:cd:36:d8:05:96:46:72:28:66:b2:07:
                    cf:fd:66:dc:38:77:a0:42:31:7f:f3:44:e0:b4:2e:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4F:76:DB:BD:94:23:B6:3C:C1:B1:E8:6E:55:7D:36:F2:8B:9C:A5
            X509v3 Authority Key Identifier:
                keyid:B7:B6:43:EA:91:66:47:0C:27:49:BD:07:29:EF:0A:23:FC:78:2B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/1a2443-cc8c-414b-b895-94b15cf20d26/1/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/1a2443-cc8c-414b-b895-94b15cf20d26/1/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:99:79:c7:6c:67:ee:74:10:d4:2e:b8:5c:bd:a3:51:33:
         4a:77:51:94:47:ab:7e:d8:96:ab:b9:27:41:19:05:9c:b1:0c:
         25:97:5c:a9:36:53:46:e8:f7:5b:c5:21:9c:23:d3:17:39:fc:
         e7:0b:b1:ea:06:e4:25:20:cc:b0:b6:c3:d5:8d:72:21:d6:ea:
         ba:5c:f7:25:0b:59:f4:cb:c4:a8:87:6f:f4:e5:c9:59:36:f9:
         6a:64:2e:1e:4b:4a:a7:61:14:00:69:28:43:7c:14:12:8d:25:
         1c:b5:09:94:91:a4:a5:e3:f9:47:c2:6d:f2:0c:f9:c8:e4:d2:
         70:ee:fe:d6:31:21:1c:a0:7e:5e:46:4f:9d:55:c2:49:1b:9c:
         64:0f:7e:38:57:bc:ab:90:c3:3c:a5:c2:03:30:07:13:6d:50:
         18:2a:49:33:03:bf:c0:f6:a8:f0:f3:a8:ae:9d:ac:31:5b:25:
         df:bb:d0:a1:18:30:8d:60:db:d2:98:f1:c6:56:07:a9:c9:8c:
         d9:ff:cb:34:ac:e8:31:32:eb:ad:96:a3:f2:9f:1e:9d:f4:ae:
         96:d0:23:75:2c:ff:5e:d8:d7:c9:a5:17:9b:89:71:90:c6:79:
         fa:06:7f:cc:f7:a4:fc:96:aa:85:31:74:cc:8c:c6:b4:b1:2f:
         97:40:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----