Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c7af1c-da41-4ef3-8963-604535036742/1/2mLwaeDSoZA9SRwGVKj15kF2nxY.mft
File:                     2mLwaeDSoZA9SRwGVKj15kF2nxY.mft (raw, json)
Hash identifier:          bkMjfzx0wLbs9r4OidA7xwB7YDrXUMZjaASFNjD6oXQ=
Subject key identifier:   08:BC:83:39:08:D4:80:AD:19:6F:58:84:7C:87:CD:45:CB:B4:20:06
Authority key identifier: DA:62:F0:69:E0:D2:A1:90:3D:49:1C:06:54:A8:F5:E6:41:76:9F:16
Certificate issuer:       /CN=da62f069e0d2a1903d491c0654a8f5e641769f16
Certificate serial:       128ABA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2mLwaeDSoZA9SRwGVKj15kF2nxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c7af1c-da41-4ef3-8963-604535036742/1/2mLwaeDSoZA9SRwGVKj15kF2nxY.mft
Manifest number:          0863
Signing time:             Thu 24 Feb 2022 06:29:02 +0000
Manifest this update:     Thu 24 Feb 2022 06:29:02 +0000
Manifest next update:     Fri 25 Feb 2022 06:29:02 +0000
Files and hashes:         1: 2mLwaeDSoZA9SRwGVKj15kF2nxY.crl (hash: w6jChxWwuu2kdNeXEyVhHNi7DHIQ+X+qwTlA/zTQH6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311081506 (0x128aba22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f069e0d2a1903d491c0654a8f5e641769f16
        Validity
            Not Before: Feb 24 06:29:02 2022 GMT
            Not After : Feb 25 06:29:02 2022 GMT
        Subject: CN=08bc833908d480ad196f58847c87cd45cbb42006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:dc:a9:c3:a8:14:cc:05:2f:c4:6d:56:db:
                    06:59:47:c4:f8:07:ef:bc:f5:2e:ee:63:27:f8:3a:
                    01:63:1b:95:b1:e7:20:a3:60:88:39:ce:8e:28:aa:
                    36:42:78:83:0f:be:6e:42:e4:32:89:eb:ad:fb:75:
                    0d:22:ed:a5:02:64:0c:60:f7:b4:a2:d4:9d:47:85:
                    22:64:c4:78:2e:58:70:31:64:1f:22:31:82:4f:32:
                    f1:fd:64:71:ec:76:e7:8d:5f:6f:bd:51:68:97:84:
                    2b:bc:2a:34:7f:86:c7:a7:73:56:02:0f:76:9d:21:
                    27:60:e4:36:c3:4a:4c:94:87:e8:fa:c3:2f:f9:e4:
                    bd:63:4a:d5:11:db:92:3d:e1:a6:d0:60:b2:67:da:
                    af:66:3c:02:fd:df:83:73:58:08:83:bb:42:d1:6b:
                    4d:77:72:7c:4a:4e:78:4b:3d:37:7d:23:80:1c:b7:
                    61:92:7d:09:4d:11:d3:6f:b6:e2:02:a8:ca:83:74:
                    f4:22:02:00:b6:c2:6a:c6:20:56:5b:43:f3:77:6b:
                    b9:78:09:63:82:c6:fa:8c:d3:71:57:3a:ae:28:2c:
                    11:33:fe:80:f5:4a:f7:63:a6:c7:37:6c:c3:97:7a:
                    7a:99:08:57:63:91:a0:43:0f:68:c3:2f:7e:d7:22:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BC:83:39:08:D4:80:AD:19:6F:58:84:7C:87:CD:45:CB:B4:20:06
            X509v3 Authority Key Identifier:
                keyid:DA:62:F0:69:E0:D2:A1:90:3D:49:1C:06:54:A8:F5:E6:41:76:9F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mLwaeDSoZA9SRwGVKj15kF2nxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c7af1c-da41-4ef3-8963-604535036742/1/2mLwaeDSoZA9SRwGVKj15kF2nxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c7af1c-da41-4ef3-8963-604535036742/1/2mLwaeDSoZA9SRwGVKj15kF2nxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:9c:00:0b:73:15:e9:4f:69:42:9f:30:55:74:ab:c6:d8:23:
         9f:5c:cf:76:2a:11:55:0f:1f:9f:54:70:85:d7:3c:74:52:64:
         9c:04:cb:c9:bc:12:11:22:2d:39:7d:2b:20:6c:04:7a:cd:da:
         42:61:b6:5d:bd:fc:5c:b1:da:42:40:9e:25:51:93:87:bf:e4:
         00:11:bb:fd:6b:1b:80:d4:e8:3b:ee:3f:33:f1:e2:26:d4:de:
         de:bf:35:8f:7f:77:68:c8:f6:97:ed:02:df:9b:57:e7:3b:17:
         b8:92:ca:8d:07:1f:94:f2:60:4a:8e:d4:62:79:f1:3b:60:f2:
         fe:3b:23:b5:a6:93:e5:75:95:b1:96:7d:1d:2f:81:fd:56:83:
         bd:f3:dd:e4:02:b3:52:fb:2f:7a:4d:f4:0a:95:5e:3e:6e:a7:
         75:40:89:b1:b4:3f:ce:9e:00:a6:7d:7e:db:15:f2:e1:9c:d4:
         fe:bf:ab:21:02:64:39:36:0e:1a:3d:a7:63:e7:71:04:f1:e7:
         11:d9:1b:36:62:74:65:8f:41:13:de:97:60:0d:d0:4b:1d:ad:
         0c:fd:0c:4c:4a:f8:1b:54:3c:d6:aa:ef:35:6b:6f:ad:61:6c:
         ea:9c:be:94:2f:5f:57:f8:03:b0:1f:13:e6:44:5e:96:99:17:
         af:7e:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----