Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4fa53f-705a-40a5-876e-662cfe7249f8/1/X5MavaJTSBFAJ2Pk6f95OI7sLR8.mft
File:                     X5MavaJTSBFAJ2Pk6f95OI7sLR8.mft (raw, json)
Hash identifier:          ESb4Q/BUvH3qubaNMeo/7JI9QDwkzibG+Kt8uxYzGOU=
Subject key identifier:   E8:A1:8A:CB:D0:31:3A:91:48:D1:79:05:56:24:0B:81:F7:F0:78:E9
Authority key identifier: 5F:93:1A:BD:A2:53:48:11:40:27:63:E4:E9:FF:79:38:8E:EC:2D:1F
Certificate issuer:       /CN=5f931abda2534811402763e4e9ff79388eec2d1f
Certificate serial:       018235329E40085901193357908778771177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5MavaJTSBFAJ2Pk6f95OI7sLR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/4fa53f-705a-40a5-876e-662cfe7249f8/1/X5MavaJTSBFAJ2Pk6f95OI7sLR8.mft
Manifest number:          01E6
Signing time:             Mon 25 Jul 2022 11:51:25 +0000
Manifest this update:     Mon 25 Jul 2022 11:51:25 +0000
Manifest next update:     Tue 26 Jul 2022 11:51:25 +0000
Files and hashes:         1: X5MavaJTSBFAJ2Pk6f95OI7sLR8.crl (hash: UFB39g+52fZAC1M94OS1zkG5c9l0rWQlJauTWNn7Elg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:35:32:9e:40:08:59:01:19:33:57:90:87:78:77:11:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f931abda2534811402763e4e9ff79388eec2d1f
        Validity
            Not Before: Jul 25 11:51:25 2022 GMT
            Not After : Jul 26 11:51:25 2022 GMT
        Subject: CN=e8a18acbd0313a9148d1790556240b81f7f078e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:76:96:b0:33:20:91:0c:dd:9b:16:c9:52:
                    16:e3:e3:5c:95:4c:fd:77:30:02:7a:26:af:c5:bd:
                    71:5a:0b:96:67:38:68:33:27:c1:c3:26:d3:c9:bd:
                    bc:ef:2a:25:12:b6:f2:f8:32:55:90:02:b6:57:a9:
                    aa:f8:dc:67:53:de:0b:da:c7:23:44:72:c2:c3:6b:
                    d6:eb:7e:a1:fe:64:db:8b:84:c3:2a:69:23:3b:6b:
                    c7:9b:3d:85:fe:db:8f:ec:97:63:a9:cd:25:8a:41:
                    4c:18:99:c9:f8:7c:46:50:96:2f:4c:4d:ce:25:da:
                    3b:c7:22:a9:92:a2:2f:c1:c1:e3:95:4d:23:f2:b4:
                    16:a9:65:74:c2:8f:9b:6d:f9:52:80:3f:60:6b:0d:
                    9f:55:37:d4:7d:44:c8:84:5d:47:e1:0c:a2:b3:5c:
                    e0:c5:a5:e2:5a:e7:8b:11:a2:49:af:e5:65:f5:13:
                    51:ea:9d:41:18:c1:4f:b8:af:51:42:9c:b8:53:6b:
                    b8:b0:26:31:d4:af:f1:05:43:54:c3:29:80:9c:2e:
                    fe:ae:79:29:3c:08:93:8a:8d:20:49:69:be:c6:35:
                    78:b0:41:57:65:34:9d:ef:10:50:d1:e6:b8:93:6c:
                    90:97:00:e0:33:58:2b:c3:0d:9c:0d:14:4e:6b:1e:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:8A:CB:D0:31:3A:91:48:D1:79:05:56:24:0B:81:F7:F0:78:E9
            X509v3 Authority Key Identifier:
                keyid:5F:93:1A:BD:A2:53:48:11:40:27:63:E4:E9:FF:79:38:8E:EC:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5MavaJTSBFAJ2Pk6f95OI7sLR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4fa53f-705a-40a5-876e-662cfe7249f8/1/X5MavaJTSBFAJ2Pk6f95OI7sLR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4fa53f-705a-40a5-876e-662cfe7249f8/1/X5MavaJTSBFAJ2Pk6f95OI7sLR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:84:bb:cd:ca:61:b6:b5:69:79:0f:4c:a5:88:d3:de:a7:
         17:b1:d7:6a:ff:ce:ac:05:63:9d:2e:19:82:31:3f:ff:c1:3c:
         48:44:24:3f:6e:ba:a0:cb:78:0f:ec:9f:4b:52:b8:d6:1d:70:
         55:11:98:73:5e:2f:24:23:bf:9f:84:30:7e:62:76:53:23:fd:
         19:33:90:18:4e:98:34:3d:8c:6b:05:a5:50:dd:d5:23:7c:5a:
         13:9f:0b:04:50:6f:0d:86:6f:4f:cf:fa:47:d2:70:d3:32:33:
         26:52:b8:00:b0:60:6b:e4:b4:99:80:8d:66:ef:8b:66:02:4d:
         1f:11:14:b8:b8:32:ba:e4:a7:2c:f8:3d:5a:ef:d9:35:d3:90:
         dc:9f:16:4c:84:6a:14:d8:9d:9e:cf:85:5b:8e:bc:c3:67:39:
         d0:84:3a:df:8e:cc:82:97:50:e2:e2:05:42:ad:8c:64:46:b1:
         2b:80:87:7d:2a:89:35:52:6a:15:e5:65:1e:69:4c:cc:2e:0f:
         7d:ea:15:24:1a:6f:79:d2:5a:ff:1a:d3:9a:d5:8c:bc:01:5c:
         0a:43:af:d7:08:55:ff:e9:5a:ab:a8:37:a6:73:8c:7f:19:91:
         11:38:03:d1:cf:20:df:e4:3f:58:70:a6:40:6d:37:bf:c3:22:
         33:b7:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----