Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3d73a3-ed48-4c73-8d52-8452009e4538/1/7_KsBPsz-XaQTqjFrjP91dTKj90.mft
File:                     7_KsBPsz-XaQTqjFrjP91dTKj90.mft (raw, json)
Hash identifier:          cuM8I4c9rqgRcVo3/uZcZ53ttMPTxxnUyPJCpxq011E=
Subject key identifier:   CC:20:66:B8:81:AE:CD:19:0E:02:22:97:14:B2:E8:E3:A0:E5:52:CA
Authority key identifier: EF:F2:AC:04:FB:33:F9:76:90:4E:A8:C5:AE:33:FD:D5:D4:CA:8F:DD
Certificate issuer:       /CN=eff2ac04fb33f976904ea8c5ae33fdd5d4ca8fdd
Certificate serial:       0184BDC7A4DE9587A037079A97E2D676A79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_KsBPsz-XaQTqjFrjP91dTKj90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3d73a3-ed48-4c73-8d52-8452009e4538/1/7_KsBPsz-XaQTqjFrjP91dTKj90.mft
Manifest number:          0397
Signing time:             Mon 28 Nov 2022 10:28:08 +0000
Manifest this update:     Mon 28 Nov 2022 10:28:08 +0000
Manifest next update:     Tue 29 Nov 2022 10:28:08 +0000
Files and hashes:         1: 7_KsBPsz-XaQTqjFrjP91dTKj90.crl (hash: NfEW5uzbgRptzPi3LA289hbjbssFexzfAVoCdWH0HUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:bd:c7:a4:de:95:87:a0:37:07:9a:97:e2:d6:76:a7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff2ac04fb33f976904ea8c5ae33fdd5d4ca8fdd
        Validity
            Not Before: Nov 28 10:28:08 2022 GMT
            Not After : Nov 29 10:28:08 2022 GMT
        Subject: CN=cc2066b881aecd190e02229714b2e8e3a0e552ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:19:7d:5d:09:32:32:7b:9a:79:32:db:13:
                    61:24:21:2c:a4:82:4b:84:2b:a0:2c:dc:af:0c:eb:
                    7f:74:05:d1:d3:c4:9f:6d:b4:e4:44:2e:32:00:6e:
                    50:0e:e0:8b:05:e4:bc:3f:b3:c2:af:0a:62:c5:90:
                    5b:27:0c:d8:18:03:f0:02:12:24:35:45:1a:40:24:
                    b8:89:27:7d:fa:34:fb:98:97:cd:f8:41:f5:04:97:
                    e9:e6:91:c0:97:b1:48:06:c8:ac:74:a6:5b:88:02:
                    01:b9:9c:6f:84:51:9b:5a:00:71:10:46:47:77:62:
                    43:81:16:8c:23:a5:e3:51:8f:21:cc:a8:82:ba:9d:
                    b6:e5:a0:52:08:28:6c:c8:23:4f:0a:99:33:22:de:
                    cb:63:0f:fd:10:f6:75:a9:86:66:1d:6b:7d:b1:93:
                    c7:f7:f0:10:03:d0:4f:79:9a:24:4e:c8:c9:72:27:
                    b4:8f:4b:88:1e:b6:a3:7f:a7:b1:c4:cb:2a:23:92:
                    91:4c:f9:be:2e:4a:09:53:79:72:1f:93:50:b4:65:
                    b9:0b:af:3b:f8:5e:38:04:41:64:77:f4:e0:43:36:
                    7c:44:7b:f4:64:d5:bc:fe:4c:2f:7a:0d:22:9f:8b:
                    9c:29:45:f6:ef:55:d2:bc:73:5c:1d:e4:b3:b9:76:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:20:66:B8:81:AE:CD:19:0E:02:22:97:14:B2:E8:E3:A0:E5:52:CA
            X509v3 Authority Key Identifier:
                keyid:EF:F2:AC:04:FB:33:F9:76:90:4E:A8:C5:AE:33:FD:D5:D4:CA:8F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_KsBPsz-XaQTqjFrjP91dTKj90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d73a3-ed48-4c73-8d52-8452009e4538/1/7_KsBPsz-XaQTqjFrjP91dTKj90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d73a3-ed48-4c73-8d52-8452009e4538/1/7_KsBPsz-XaQTqjFrjP91dTKj90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:13:c8:01:0c:33:20:90:41:d9:14:d9:d7:69:47:2f:47:c4:
         30:30:aa:27:ac:01:e3:08:fb:92:f5:fe:8f:75:00:0b:4b:6c:
         88:97:c8:03:ef:49:bb:ba:36:0e:62:9d:e8:15:3c:35:08:ea:
         2a:1d:ff:9e:5c:5a:b3:41:ba:92:c8:49:84:09:18:3a:b4:db:
         18:91:2b:ea:7a:64:b1:7e:7e:57:d7:4f:6b:54:b4:96:b8:2e:
         5e:5b:95:ed:01:12:6f:e2:ef:7c:a6:33:28:1b:39:97:42:b6:
         02:ae:89:89:11:70:c1:6e:1e:f2:cb:e0:eb:e8:3c:61:72:4f:
         b8:1d:9d:91:14:33:bd:5c:bd:46:72:ad:2e:05:5c:20:6a:0d:
         d4:87:19:87:01:1e:37:14:e7:17:63:b6:99:15:81:40:b1:3b:
         50:e2:04:23:bf:24:a2:ff:81:b0:0b:6a:e5:00:8e:0e:e0:76:
         8d:ba:0b:49:3e:36:64:2c:62:63:f0:bd:a7:f2:2e:1e:7e:32:
         bd:1b:dc:e7:86:4b:bb:dd:bc:88:45:15:e7:f3:a1:ce:40:38:
         24:2b:2d:75:f4:b0:2c:f2:d8:cf:f2:be:ca:7d:ca:25:9a:98:
         4d:19:c5:ac:7b:2e:9c:70:80:2c:6f:42:b8:94:95:1e:11:24:
         43:c1:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----