Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5a338b-40f3-4049-823d-c66c61c810b2/1/q6Qq6qoN4DO6iRLSXy1KdClRmRU.mft
File:                     q6Qq6qoN4DO6iRLSXy1KdClRmRU.mft (raw, json)
Hash identifier:          T6A1n07Ia4q+KTbiBPY5Jp60fDArEXFsdz6gVhW6lBc=
Subject key identifier:   F0:A5:7B:3A:21:36:24:4B:D0:D4:19:5D:2A:5D:0E:04:DA:9D:51:8C
Authority key identifier: AB:A4:2A:EA:AA:0D:E0:33:BA:89:12:D2:5F:2D:4A:74:29:51:99:15
Certificate issuer:       /CN=aba42aeaaa0de033ba8912d25f2d4a7429519915
Certificate serial:       0182667D4E0A5FD18E53DDAB744801A6A0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6Qq6qoN4DO6iRLSXy1KdClRmRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/5a338b-40f3-4049-823d-c66c61c810b2/1/q6Qq6qoN4DO6iRLSXy1KdClRmRU.mft
Manifest number:          03BF
Signing time:             Thu 04 Aug 2022 01:34:24 +0000
Manifest this update:     Thu 04 Aug 2022 01:34:24 +0000
Manifest next update:     Fri 05 Aug 2022 01:34:24 +0000
Files and hashes:         1: q6Qq6qoN4DO6iRLSXy1KdClRmRU.crl (hash: FKFlbmnvNa/LXWRBiguOMcWeIwMSwgujFEiSdMCd824=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:66:7d:4e:0a:5f:d1:8e:53:dd:ab:74:48:01:a6:a0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba42aeaaa0de033ba8912d25f2d4a7429519915
        Validity
            Not Before: Aug  4 01:34:24 2022 GMT
            Not After : Aug  5 01:34:24 2022 GMT
        Subject: CN=f0a57b3a2136244bd0d4195d2a5d0e04da9d518c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:f7:36:26:13:09:70:16:96:5d:51:62:d4:
                    82:8b:57:7b:0d:95:57:31:60:43:b0:35:e1:53:d2:
                    c5:d3:e4:20:db:aa:78:f5:41:6c:ce:32:b1:f1:23:
                    9e:50:41:fb:8e:5c:30:ed:91:e6:c3:a8:bf:92:65:
                    c9:47:ab:84:fe:18:1f:d0:d5:5a:8f:6d:a4:43:0d:
                    e3:af:13:b2:64:ed:b6:91:75:98:03:db:18:9b:a6:
                    ac:b1:dd:30:f0:27:1f:7d:ed:92:46:54:dc:2e:ce:
                    0c:7c:ed:18:98:67:a5:3b:aa:b1:ca:12:1a:e4:ad:
                    7b:02:00:d1:fa:c2:1c:11:75:da:3e:6a:db:82:68:
                    25:9d:9e:92:88:81:ae:6f:46:7d:bf:7c:02:4d:8b:
                    50:48:df:4e:2d:0c:b2:d4:41:52:84:bb:ad:e0:64:
                    3d:57:48:41:20:2d:fc:35:b5:8f:b4:79:48:c5:e4:
                    d3:61:12:74:5f:17:e8:72:1f:1b:0c:e7:e1:f1:03:
                    c3:9d:2f:98:a2:d6:fe:e9:a0:8a:a4:30:ff:11:45:
                    b0:db:b7:df:3f:41:a0:1e:a7:67:7b:18:98:5e:67:
                    3e:86:e1:e8:df:f2:0d:34:51:4d:df:e4:4c:fd:75:
                    bb:91:90:2e:43:7d:94:af:c7:7f:64:52:1f:0a:c7:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:7B:3A:21:36:24:4B:D0:D4:19:5D:2A:5D:0E:04:DA:9D:51:8C
            X509v3 Authority Key Identifier:
                keyid:AB:A4:2A:EA:AA:0D:E0:33:BA:89:12:D2:5F:2D:4A:74:29:51:99:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6Qq6qoN4DO6iRLSXy1KdClRmRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5a338b-40f3-4049-823d-c66c61c810b2/1/q6Qq6qoN4DO6iRLSXy1KdClRmRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5a338b-40f3-4049-823d-c66c61c810b2/1/q6Qq6qoN4DO6iRLSXy1KdClRmRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:50:1c:33:f8:6e:c5:cc:11:1b:6c:0b:21:46:ed:96:49:93:
         c0:0d:a5:de:d4:38:82:fd:eb:01:bb:54:b6:e4:83:fe:55:2c:
         a2:8c:07:ba:bb:b0:13:67:f4:39:71:53:b5:3b:70:af:75:62:
         0b:a1:73:a9:4e:9d:6b:bc:65:1b:e0:ff:e5:a3:2f:41:d0:d9:
         23:3f:63:1d:83:72:86:60:e3:9f:dc:e9:8d:14:07:f8:39:e7:
         6d:de:a0:73:62:98:bb:36:cf:f9:66:ac:8d:8b:c9:d5:2c:f0:
         0f:18:e9:3a:61:91:85:97:92:90:d2:1a:e2:f0:e9:46:43:d2:
         a5:8e:59:bd:05:52:27:45:2a:89:26:1b:cd:50:f0:5a:12:8a:
         54:31:70:2e:aa:a9:00:10:38:73:24:f9:e3:f4:90:63:df:44:
         18:27:da:48:aa:34:fc:bd:18:92:67:39:63:67:fc:cd:12:9e:
         21:60:bf:47:3c:45:87:c6:72:61:76:42:5b:05:b0:18:cd:c4:
         e5:b9:ba:72:94:d6:9c:c3:7d:49:aa:dd:71:61:0c:60:7e:70:
         6b:59:ef:dd:2c:63:d4:a4:6e:38:0f:ab:42:51:0f:5c:aa:76:
         e6:23:d6:41:4e:67:05:c7:da:10:66:eb:a4:12:d4:aa:66:c2:
         92:a6:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----