Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.mft
File:                     45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.mft (raw, json)
Hash identifier:          ye5LOMACbafDfLAF9lM5JbOuRkN2dIEvBsC38wBdAmM=
Subject key identifier:   AF:85:D0:28:3B:D6:A2:4E:B9:6C:31:55:CE:24:69:DD:D1:DA:07:7B
Authority key identifier: E3:94:7C:A3:C4:8C:A8:86:7F:32:D3:47:C1:95:AA:D4:AA:63:E8:89
Certificate issuer:       /CN=e3947ca3c48ca8867f32d347c195aad4aa63e889
Certificate serial:       0183164FE0DCF8271B3C5A0BA5629B22F99A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.mft
Manifest number:          0AA3
Signing time:             Wed 07 Sep 2022 04:57:57 +0000
Manifest this update:     Wed 07 Sep 2022 04:57:57 +0000
Manifest next update:     Thu 08 Sep 2022 04:57:57 +0000
Files and hashes:         1: 45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.crl (hash: CH1fjaAct2/C/V1MsxZW4K5upoZVuW4GtiqInOSkKw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:16:4f:e0:dc:f8:27:1b:3c:5a:0b:a5:62:9b:22:f9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3947ca3c48ca8867f32d347c195aad4aa63e889
        Validity
            Not Before: Sep  7 04:57:57 2022 GMT
            Not After : Sep  8 04:57:57 2022 GMT
        Subject: CN=af85d0283bd6a24eb96c3155ce2469ddd1da077b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:84:bb:14:65:4d:7e:21:a2:da:66:05:7a:
                    a9:63:ce:3f:07:12:6f:93:5d:11:48:6e:2d:03:ea:
                    7f:2a:85:78:29:5e:54:23:4a:aa:5c:75:b3:06:21:
                    73:ab:2a:14:db:82:28:4a:b9:82:0f:b3:1a:f6:c2:
                    6f:8b:65:d3:84:5b:48:c3:c9:db:90:b6:08:34:79:
                    ef:e6:be:a9:72:1f:4e:ab:e1:4f:53:16:c1:60:ba:
                    f0:0b:91:05:2a:e7:ce:85:2c:9a:76:d3:7d:5e:22:
                    f7:60:53:45:a9:3b:f4:c2:19:30:2d:74:66:f3:d2:
                    ac:f4:f3:5a:7b:05:49:e8:a1:40:90:a7:17:4d:76:
                    71:28:9b:27:39:63:99:26:34:e5:05:ad:84:5d:7c:
                    9b:10:04:ba:a6:30:78:2f:53:27:14:73:fa:c2:2d:
                    11:40:5a:74:87:e6:0f:36:69:81:e2:14:5e:8c:14:
                    bd:78:7e:0e:95:d2:f2:28:5b:1b:27:c5:b2:32:a8:
                    e2:21:1e:c6:b2:c4:6d:10:8d:e0:f7:fa:b9:66:a6:
                    e2:eb:27:ae:e4:57:7b:fc:7a:74:e6:07:d1:1e:34:
                    cc:0f:27:f5:fa:9d:d7:ce:d1:28:27:38:57:1c:a1:
                    19:72:c2:8d:d1:45:86:11:76:c5:c4:04:a8:f5:f4:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:85:D0:28:3B:D6:A2:4E:B9:6C:31:55:CE:24:69:DD:D1:DA:07:7B
            X509v3 Authority Key Identifier:
                keyid:E3:94:7C:A3:C4:8C:A8:86:7F:32:D3:47:C1:95:AA:D4:AA:63:E8:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:a9:12:b8:a0:30:90:05:7e:98:b4:a2:5d:34:f5:f7:65:
         47:d3:d0:ff:0e:5f:a3:21:1b:f0:c5:05:ad:d9:50:85:d1:10:
         9c:34:cf:5e:43:2d:02:cd:e7:1b:c7:55:98:77:51:d9:ef:3a:
         bb:b0:58:5e:b7:6a:99:4d:46:99:8a:98:c1:aa:be:90:92:df:
         ee:81:b0:1c:05:fc:80:f7:dc:81:0c:41:75:e7:a9:fa:6c:77:
         f6:49:95:be:e1:c4:2c:bf:c5:f9:22:8d:46:8c:a4:71:06:72:
         86:b3:24:05:4c:c7:cb:ab:e6:ad:b0:73:a5:08:b6:44:ac:a1:
         92:b8:dc:91:54:84:e9:82:b9:66:89:13:6d:53:77:14:aa:a1:
         f6:01:10:a1:f8:96:a7:ea:df:0b:14:f6:3c:a4:77:5d:b5:6d:
         73:c0:3b:64:ff:73:ba:ed:3a:b5:2f:81:3f:8c:00:10:7f:71:
         3a:4c:39:b2:d4:e2:da:13:2f:c4:ab:b0:67:51:7c:f5:fb:ae:
         4f:7b:60:16:4f:af:2a:5b:26:2c:1e:19:1c:77:cf:48:2a:2c:
         97:59:1c:6d:42:22:65:d9:af:74:aa:99:e0:a5:68:19:84:0f:
         70:e4:09:3b:bf:2c:e2:2f:c0:08:89:14:e3:d8:54:dd:42:1d:
         e2:42:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----