Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c05501-5605-4386-b6a2-05f0957fb42d/1/2rgb5IHZPd-hv8A2kQxfXKZLR8I.mft
File:                     2rgb5IHZPd-hv8A2kQxfXKZLR8I.mft (raw, json)
Hash identifier:          irLRf3KDUS+PB2k9slVOGfRsBdhPktZEiYvh1gMgquY=
Subject key identifier:   D4:57:48:1E:52:E8:A7:5D:97:D0:F2:39:AD:3D:E5:81:FF:CD:F0:B5
Authority key identifier: DA:B8:1B:E4:81:D9:3D:DF:A1:BF:C0:36:91:0C:5F:5C:A6:4B:47:C2
Certificate issuer:       /CN=dab81be481d93ddfa1bfc036910c5f5ca64b47c2
Certificate serial:       067C93C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rgb5IHZPd-hv8A2kQxfXKZLR8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c05501-5605-4386-b6a2-05f0957fb42d/1/2rgb5IHZPd-hv8A2kQxfXKZLR8I.mft
Manifest number:          0896
Signing time:             Sun 26 Jun 2022 23:29:53 +0000
Manifest this update:     Sun 26 Jun 2022 23:29:53 +0000
Manifest next update:     Mon 27 Jun 2022 23:29:53 +0000
Files and hashes:         1: 2rgb5IHZPd-hv8A2kQxfXKZLR8I.crl (hash: tUR8CbbK1UGdV2OLXAzBH/8O8pY5i1INM4I9nmzfy7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108827586 (0x67c93c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab81be481d93ddfa1bfc036910c5f5ca64b47c2
        Validity
            Not Before: Jun 26 23:29:53 2022 GMT
            Not After : Jun 27 23:29:53 2022 GMT
        Subject: CN=d457481e52e8a75d97d0f239ad3de581ffcdf0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:90:d4:fe:7b:e3:c9:a6:bd:c4:4e:ca:b0:
                    05:0b:6d:44:2f:e6:e1:83:85:f8:c8:09:f1:33:ae:
                    c1:28:e7:6c:3a:0a:24:9f:4e:6e:76:5f:56:f4:aa:
                    2c:89:30:3d:27:ec:8f:53:aa:97:1e:ac:0e:1f:13:
                    ea:08:2c:16:dc:fc:ea:9c:db:64:90:1e:b9:65:9e:
                    18:d5:86:5d:e1:c4:53:22:9f:35:ec:5e:8a:82:f9:
                    fe:c2:12:08:85:53:a6:31:8e:11:5e:20:f6:a7:e9:
                    0f:73:13:fe:a5:ce:b6:f6:8a:2a:c2:f7:bf:04:d9:
                    37:33:7b:a7:e9:bd:39:11:0d:51:f7:a8:60:4f:f9:
                    0a:e9:51:d6:39:6b:16:f5:42:a9:d5:31:de:93:3d:
                    c5:73:a5:2d:cb:4b:a7:46:5f:b9:91:84:01:a6:2b:
                    60:65:19:7b:6e:44:46:26:2e:35:7f:2f:01:4d:d2:
                    47:9b:d9:a6:22:6f:e6:84:9f:16:91:c6:0e:9d:44:
                    4f:e0:42:56:3e:47:57:c5:0f:b1:c5:eb:2a:95:b4:
                    07:e8:24:89:7d:58:36:3e:e2:ac:36:a9:89:4a:af:
                    f3:e0:93:4f:24:51:9e:31:40:89:c7:53:f0:e6:0b:
                    43:a4:34:03:2e:1e:b0:9f:8f:95:66:fc:91:9b:c1:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:57:48:1E:52:E8:A7:5D:97:D0:F2:39:AD:3D:E5:81:FF:CD:F0:B5
            X509v3 Authority Key Identifier:
                keyid:DA:B8:1B:E4:81:D9:3D:DF:A1:BF:C0:36:91:0C:5F:5C:A6:4B:47:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgb5IHZPd-hv8A2kQxfXKZLR8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c05501-5605-4386-b6a2-05f0957fb42d/1/2rgb5IHZPd-hv8A2kQxfXKZLR8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c05501-5605-4386-b6a2-05f0957fb42d/1/2rgb5IHZPd-hv8A2kQxfXKZLR8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:95:7c:0f:5f:80:e2:01:e7:c5:d4:83:41:dc:63:a4:b4:
         66:52:82:3d:5a:b3:47:53:b3:e0:96:11:16:f2:58:36:08:75:
         9d:b8:47:2c:f5:31:a1:ba:09:bd:2a:68:65:f8:a5:89:b2:2c:
         8c:8e:1d:27:04:2b:29:aa:13:16:6c:11:ef:e9:76:c5:1c:db:
         23:1b:95:31:f5:38:37:b1:dc:95:91:8d:b9:7c:13:6d:8e:9a:
         c3:8d:01:2e:16:f4:67:f1:be:bb:69:83:d0:52:d5:e9:79:b7:
         4d:e8:ff:ea:1c:a4:f8:d4:2a:46:7f:d4:ce:7a:f9:74:19:f4:
         ea:7f:c5:ac:24:fe:98:af:f5:d7:62:60:a6:bc:96:94:b9:a6:
         85:7e:99:6f:03:5a:62:2a:f6:23:d2:7a:71:57:82:67:1b:1e:
         9f:19:bd:4d:98:f7:5b:fe:d9:2a:61:ee:6a:b9:e6:90:3d:f4:
         d5:b8:68:80:12:b0:d7:79:c9:7c:40:79:a0:c7:b6:ab:f0:2d:
         de:3c:57:83:0e:67:6c:2d:36:3e:1a:b8:a8:ce:5f:d6:47:b6:
         c4:7e:e3:5e:ed:f6:16:70:8c:1a:50:a7:fd:49:58:83:56:5a:
         fe:5b:cf:18:70:5e:65:00:dc:c2:20:39:e7:15:57:cb:6d:c8:
         5e:71:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----