Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/1-stv_NpOKroCyhO6CA_98y8uzhE.mft
File:                     1-stv_NpOKroCyhO6CA_98y8uzhE.mft (raw, json)
Hash identifier:          gGqFrFeL05GAMmh2GnlBj6bcGAOTmydsfiEf5dUb2JQ=
Subject key identifier:   C8:75:5C:41:E9:11:63:BC:91:21:9B:8D:10:D1:0D:4B:D9:26:B4:34
Authority key identifier: FA:CB:6F:FC:DA:4E:2A:BA:02:CA:13:BA:08:0F:FD:F3:2F:2E:CE:11
Certificate issuer:       /CN=facb6ffcda4e2aba02ca13ba080ffdf32f2ece11
Certificate serial:       10D3B452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-stv_NpOKroCyhO6CA_98y8uzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/1-stv_NpOKroCyhO6CA_98y8uzhE.mft
Manifest number:          0890
Signing time:             Fri 11 Mar 2022 08:22:54 +0000
Manifest this update:     Fri 11 Mar 2022 08:22:54 +0000
Manifest next update:     Sat 12 Mar 2022 08:22:54 +0000
Files and hashes:         1: 1-stv_NpOKroCyhO6CA_98y8uzhE.crl (hash: YjBXj9GefL5gxyY42U3MXW2S776Wpc5kAE0RNrkpbt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282309714 (0x10d3b452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facb6ffcda4e2aba02ca13ba080ffdf32f2ece11
        Validity
            Not Before: Mar 11 08:22:54 2022 GMT
            Not After : Mar 12 08:22:54 2022 GMT
        Subject: CN=c8755c41e91163bc91219b8d10d10d4bd926b434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:7f:84:92:f2:9f:24:88:5a:0d:c1:ea:01:
                    8b:0b:56:33:68:04:b5:ee:6b:7e:00:99:87:50:c5:
                    cb:8c:cd:8b:35:8a:38:6b:52:4b:07:22:df:d7:44:
                    38:60:74:da:9e:ce:ba:cc:ff:68:8c:96:75:72:47:
                    84:e8:90:bb:55:58:4a:dc:d5:33:19:96:f3:49:90:
                    a8:e7:51:0f:0a:e2:eb:b0:33:a0:fd:62:24:49:96:
                    ab:40:9a:35:0b:84:5a:74:5e:f9:12:f2:bd:f5:e9:
                    79:73:03:d8:5a:b1:d2:6f:30:cf:97:20:0c:a8:a4:
                    45:03:6d:e2:97:61:d8:6f:dd:7a:50:4e:9f:ad:c1:
                    b8:8b:f0:44:28:5b:0d:ca:62:07:22:22:0b:4a:a6:
                    2b:cd:e8:c4:0a:9f:f5:38:68:ca:71:34:ba:ec:d2:
                    6c:3e:52:d0:ab:9d:01:bb:dd:44:2f:5e:78:11:db:
                    a9:11:1b:74:c1:92:47:1d:1c:c4:35:15:b6:db:1a:
                    03:2c:71:af:2d:5a:fc:d4:3c:85:a4:1d:ba:98:6b:
                    ac:03:11:a8:23:4c:84:e3:6e:fa:e2:07:e4:eb:17:
                    90:8e:e5:7a:59:85:ed:da:e2:f1:3d:ac:38:b0:e4:
                    fd:3f:8e:c0:36:62:e4:be:4e:ab:ec:bc:ce:c2:42:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:75:5C:41:E9:11:63:BC:91:21:9B:8D:10:D1:0D:4B:D9:26:B4:34
            X509v3 Authority Key Identifier:
                keyid:FA:CB:6F:FC:DA:4E:2A:BA:02:CA:13:BA:08:0F:FD:F3:2F:2E:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-stv_NpOKroCyhO6CA_98y8uzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/1-stv_NpOKroCyhO6CA_98y8uzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/1-stv_NpOKroCyhO6CA_98y8uzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a9:18:39:db:9e:d1:bb:eb:74:1f:1c:2f:10:8b:5c:22:51:
         2c:f7:97:55:9c:65:29:69:c6:b3:9e:c2:39:b5:8d:1a:94:e9:
         80:98:94:07:a9:bb:b2:d9:e6:f0:3c:2f:b7:86:36:a7:03:c9:
         89:8a:6f:b5:36:ed:e3:bc:ea:2b:ca:65:c8:fb:cd:10:a5:d8:
         d5:51:4b:6c:b6:23:49:72:33:0c:26:e6:73:44:67:e1:8a:b9:
         16:8c:e2:15:3d:79:1e:46:80:36:c8:1a:50:86:b6:fc:4a:46:
         d6:3b:53:9a:0e:59:9e:33:a9:1f:68:1e:ef:2e:f5:22:37:6f:
         0b:85:71:90:44:c4:a3:1a:c9:80:35:fb:68:39:86:bc:42:8f:
         ef:14:ab:f3:d2:9e:6d:0a:1f:a0:3e:5f:5d:f1:bb:de:c9:43:
         89:87:cd:c5:16:d8:0f:20:b2:d2:f9:02:4f:2d:71:90:d3:e8:
         8d:ed:cb:51:08:92:2a:84:2e:06:26:01:d2:60:e1:58:8a:66:
         e5:40:44:59:7b:28:14:d7:4d:49:38:b7:a4:91:2d:80:ed:6b:
         9f:86:cb:9f:51:a1:af:ff:52:f3:2d:cd:4d:c3:8c:b0:ad:eb:
         7c:58:cc:ab:c7:f7:e7:49:ac:28:c3:2d:05:d8:f7:02:50:b4:
         cf:68:73:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----