Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e5439a-316a-4df0-b936-0ff9b7a9d199/1/3163xZnORfSCRxgJatYFCe5ZaaM.mft
File:                     3163xZnORfSCRxgJatYFCe5ZaaM.mft (raw, json)
Hash identifier:          9d8Tq+qh4LMnJ4ZZtoU9uztEkZ4wmykoRL/G4jWfMuI=
Subject key identifier:   FC:FC:07:10:5C:13:66:CA:61:EA:45:4B:7A:DF:B4:49:71:B4:39:1B
Authority key identifier: DF:5E:B7:C5:99:CE:45:F4:82:47:18:09:6A:D6:05:09:EE:59:69:A3
Certificate issuer:       /CN=df5eb7c599ce45f4824718096ad60509ee5969a3
Certificate serial:       0183EA10461EEFC2EE2F1F4C13330BB84C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3163xZnORfSCRxgJatYFCe5ZaaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/e5439a-316a-4df0-b936-0ff9b7a9d199/1/3163xZnORfSCRxgJatYFCe5ZaaM.mft
Manifest number:          03
Signing time:             Tue 18 Oct 2022 07:47:58 +0000
Manifest this update:     Tue 18 Oct 2022 07:47:58 +0000
Manifest next update:     Wed 19 Oct 2022 07:47:58 +0000
Files and hashes:         1: 3163xZnORfSCRxgJatYFCe5ZaaM.crl (hash: ce0V7c05cSIpppi2KlbkEB9sGFROjLKomdn/MHg01eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ea:10:46:1e:ef:c2:ee:2f:1f:4c:13:33:0b:b8:4c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5eb7c599ce45f4824718096ad60509ee5969a3
        Validity
            Not Before: Oct 18 07:47:58 2022 GMT
            Not After : Oct 19 07:47:58 2022 GMT
        Subject: CN=fcfc07105c1366ca61ea454b7adfb44971b4391b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:58:3e:d3:85:fc:f8:61:e4:7c:b7:d6:42:
                    53:8d:6d:25:fc:3e:3e:80:07:14:4d:67:7d:9b:ee:
                    96:d2:7e:ec:02:41:fc:36:08:27:99:ff:9f:f4:f3:
                    bf:be:90:76:9a:ad:59:81:3f:5f:f1:29:f3:de:7a:
                    cf:78:81:0e:79:df:39:bc:41:90:21:c3:31:4d:c1:
                    40:a0:74:bb:88:87:4a:85:8f:1d:44:ba:72:9c:25:
                    f3:d7:d3:ff:a3:a6:9a:c8:ef:8d:61:22:14:9a:10:
                    18:7e:be:2e:2f:b3:f2:78:f5:3d:5e:15:bd:03:6c:
                    5a:c7:f5:d5:1e:82:8b:ee:f8:e8:80:be:3d:cb:f5:
                    97:08:41:f4:25:a5:44:fe:42:4c:66:9f:83:84:3b:
                    90:75:b1:c8:67:01:84:6b:eb:b3:37:f4:12:5d:6a:
                    eb:e0:77:d6:95:71:b9:48:65:e1:38:b8:c0:ad:06:
                    de:8e:48:27:2f:44:57:78:ba:ff:f0:23:37:9a:a1:
                    28:cf:1c:bf:fe:60:f5:18:d1:ae:7c:07:40:08:52:
                    e6:22:b3:d4:5b:87:16:5a:62:14:9f:1e:88:b8:6e:
                    3a:70:e3:66:9f:dd:07:6c:f8:7e:e9:b8:13:93:23:
                    aa:a5:3f:ab:bc:c4:47:d0:8d:7e:4a:dc:5b:e4:d6:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:07:10:5C:13:66:CA:61:EA:45:4B:7A:DF:B4:49:71:B4:39:1B
            X509v3 Authority Key Identifier:
                keyid:DF:5E:B7:C5:99:CE:45:F4:82:47:18:09:6A:D6:05:09:EE:59:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3163xZnORfSCRxgJatYFCe5ZaaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e5439a-316a-4df0-b936-0ff9b7a9d199/1/3163xZnORfSCRxgJatYFCe5ZaaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e5439a-316a-4df0-b936-0ff9b7a9d199/1/3163xZnORfSCRxgJatYFCe5ZaaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:25:13:e8:fc:3c:01:e3:fc:05:32:2d:bf:f3:89:55:e9:66:
         35:d7:c1:9c:cd:2e:65:02:cc:96:e6:85:6d:ef:e7:21:aa:ff:
         1b:53:63:3e:c0:bc:73:e4:ab:9f:26:97:e9:c1:3d:76:02:f8:
         9a:bb:24:1d:bd:27:41:c2:c1:80:22:75:8c:84:60:d0:f6:66:
         34:5c:7d:e4:cf:16:2c:dd:24:c9:21:ae:e2:97:f1:2a:c9:42:
         c2:ce:55:20:19:9c:d0:38:54:9a:67:2e:ef:7b:6f:03:a7:1f:
         cf:19:6c:a1:de:a8:3f:e6:a9:d0:fc:44:89:70:03:3c:62:2e:
         9e:63:29:fa:b0:d2:7c:10:88:f7:92:4a:b5:89:79:2b:55:6f:
         fa:4c:43:b4:5b:ed:19:74:f2:ac:cc:59:4e:61:f0:b2:d3:a3:
         d6:de:ab:56:c3:31:41:6e:70:d3:ed:b5:0d:2c:88:37:25:84:
         a5:f8:71:d0:95:2e:d6:12:53:a5:1c:45:12:c6:c4:8b:13:e9:
         59:24:89:72:d9:ce:24:bd:38:9e:d4:d7:13:ca:b3:8c:a3:ac:
         2e:69:14:59:d9:4a:67:82:bb:00:b4:92:e5:5e:8f:8d:52:d9:
         68:b3:aa:29:e4:03:29:92:c9:34:d2:81:79:87:cb:7c:bf:0d:
         53:4e:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----