Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/07-ucJpTeCozFlUluXWFVBGgiXw.mft
File:                     07-ucJpTeCozFlUluXWFVBGgiXw.mft (raw, json)
Hash identifier:          yQr0esXyY4pZhMQ7Gu7ZjlLK3MtKGpBa0VnlfPKX8pc=
Subject key identifier:   36:AB:71:E5:69:47:D3:AF:F8:A3:93:80:8A:56:DD:94:69:D2:E6:02
Authority key identifier: D3:BF:AE:70:9A:53:78:2A:33:16:55:25:B9:75:85:54:11:A0:89:7C
Certificate issuer:       /CN=d3bfae709a53782a33165525b975855411a0897c
Certificate serial:       01850A7F20CFCFFEE6CB4F295457EFE7E381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07-ucJpTeCozFlUluXWFVBGgiXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/07-ucJpTeCozFlUluXWFVBGgiXw.mft
Manifest number:          0BBF
Signing time:             Tue 13 Dec 2022 07:59:41 +0000
Manifest this update:     Tue 13 Dec 2022 07:59:41 +0000
Manifest next update:     Wed 14 Dec 2022 07:59:41 +0000
Files and hashes:         1: 07-ucJpTeCozFlUluXWFVBGgiXw.crl (hash: 3S3nu5cgHOQOzDmpOv4M2htyRPB9N8AoOnyANWSew1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0a:7f:20:cf:cf:fe:e6:cb:4f:29:54:57:ef:e7:e3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bfae709a53782a33165525b975855411a0897c
        Validity
            Not Before: Dec 13 07:59:41 2022 GMT
            Not After : Dec 14 07:59:41 2022 GMT
        Subject: CN=36ab71e56947d3aff8a393808a56dd9469d2e602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:db:95:3e:0d:cd:74:aa:7c:4d:e4:02:55:
                    a0:14:9e:99:77:bf:12:67:ca:57:b7:cc:d3:41:d7:
                    78:ab:1e:5c:64:d8:aa:0c:dc:ad:2b:de:e0:96:d7:
                    64:26:5b:e8:59:d1:8d:30:bb:c4:45:5b:92:ac:2a:
                    c4:46:b2:2c:14:f5:4a:b7:78:b0:1a:31:5e:0d:7d:
                    d5:62:59:43:72:3f:eb:d7:e7:8f:c7:64:47:26:56:
                    5a:9d:19:03:14:96:18:b5:2c:de:42:31:81:0a:7d:
                    1f:88:06:1d:65:a8:f9:01:f0:4c:87:72:95:82:44:
                    1b:59:3b:ef:2c:e3:d8:62:08:dd:57:ab:e9:a2:cf:
                    66:47:9d:61:62:da:47:84:29:04:45:25:0e:16:49:
                    04:3a:ac:7d:ab:5d:0e:8f:c9:af:b5:bd:67:ed:bc:
                    32:29:77:9c:28:9b:c3:9c:1d:10:e9:c8:a1:69:f2:
                    c7:6d:50:e2:07:f5:ef:cb:6e:34:f8:90:e2:34:1b:
                    50:25:58:04:c2:25:bf:a2:c9:e0:53:f3:2e:1c:f3:
                    d5:41:8a:6c:f2:bd:f1:0d:3e:5a:0a:71:82:6e:65:
                    46:66:4a:9d:06:14:fc:13:fd:12:32:07:9d:44:a2:
                    14:a7:a7:a1:b0:95:9f:89:8c:46:65:69:63:12:6e:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AB:71:E5:69:47:D3:AF:F8:A3:93:80:8A:56:DD:94:69:D2:E6:02
            X509v3 Authority Key Identifier:
                keyid:D3:BF:AE:70:9A:53:78:2A:33:16:55:25:B9:75:85:54:11:A0:89:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07-ucJpTeCozFlUluXWFVBGgiXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/07-ucJpTeCozFlUluXWFVBGgiXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/07-ucJpTeCozFlUluXWFVBGgiXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ef:f1:23:de:7f:80:b1:89:0b:54:32:2a:82:51:f8:06:de:
         41:37:48:85:cb:33:74:33:01:c7:85:0d:01:6e:17:84:74:60:
         32:14:30:7b:48:20:15:a2:97:5f:11:ff:e3:e8:88:d6:f2:44:
         43:7e:85:f1:bd:a4:b6:cf:98:70:82:82:48:a1:df:fe:55:2b:
         0c:70:ef:35:2b:28:52:18:82:8c:80:3a:3f:70:ab:11:b8:60:
         bf:24:d6:54:00:29:48:13:90:4e:d1:79:63:86:ca:d6:6a:ac:
         bf:5a:2e:6f:cb:8d:26:33:07:ff:bc:9a:81:d7:1f:5b:31:58:
         ed:2b:45:0d:ba:7b:d4:fb:86:b8:2e:61:b0:e3:33:0d:7c:d4:
         0e:dc:7f:ba:8d:31:3f:78:77:ff:d2:74:fa:46:01:b5:4a:1c:
         2a:3f:fc:4c:c1:56:25:c3:ad:9f:20:02:a8:ab:d1:b2:67:5b:
         58:55:9e:8a:e5:78:53:89:e6:b7:3c:fb:ad:6d:6b:20:29:cc:
         37:c8:93:ad:0c:bb:e9:cd:ee:7c:e8:e7:58:32:7b:dc:fa:a4:
         f4:c2:6e:bb:0c:67:d0:d9:17:74:96:12:9b:54:41:e3:aa:dd:
         c6:30:25:82:23:e1:fd:29:14:bc:9d:c5:27:91:f5:30:00:1f:
         b9:8b:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----