Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/19f5b7-df7f-4c3b-b05a-8288035342d9/1/ofVxTGntUwXfJ048zJFYPpwUEU8.mft
File:                     ofVxTGntUwXfJ048zJFYPpwUEU8.mft (raw, json)
Hash identifier:          fDxYnJk6ZFGE+RPH2a1GemjfsMa6psNR4fQpQqH6zlI=
Subject key identifier:   1F:06:5E:E8:20:9E:81:3C:A4:49:BC:14:B1:17:EB:38:C2:EE:DC:4C
Authority key identifier: A1:F5:71:4C:69:ED:53:05:DF:27:4E:3C:CC:91:58:3E:9C:14:11:4F
Certificate issuer:       /CN=a1f5714c69ed5305df274e3ccc91583e9c14114f
Certificate serial:       035FB8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ofVxTGntUwXfJ048zJFYPpwUEU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/19f5b7-df7f-4c3b-b05a-8288035342d9/1/ofVxTGntUwXfJ048zJFYPpwUEU8.mft
Manifest number:          0484
Signing time:             Tue 26 Apr 2022 06:11:00 +0000
Manifest this update:     Tue 26 Apr 2022 06:11:00 +0000
Manifest next update:     Wed 27 Apr 2022 06:11:00 +0000
Files and hashes:         1: ofVxTGntUwXfJ048zJFYPpwUEU8.crl (hash: Oi8MvnUPLQJeXQakAXgnweueNihUyodEnj6Av0AXtV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56604872 (0x35fb8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f5714c69ed5305df274e3ccc91583e9c14114f
        Validity
            Not Before: Apr 26 06:11:00 2022 GMT
            Not After : Apr 27 06:11:00 2022 GMT
        Subject: CN=1f065ee8209e813ca449bc14b117eb38c2eedc4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:3d:ae:61:15:6a:d0:2a:b1:5a:88:bb:b0:
                    36:26:f7:79:97:04:49:c3:76:fc:c6:f4:c2:85:4b:
                    59:32:e5:83:75:c0:e2:33:13:ed:b9:a7:0d:cb:67:
                    6f:8c:5e:fc:d0:00:8d:05:35:14:9a:13:45:1b:d2:
                    44:a9:36:35:9c:cd:02:1e:76:ed:20:6f:b8:df:12:
                    c7:c2:e9:84:c9:01:16:ca:42:14:69:ec:2c:65:b0:
                    40:4d:80:0d:21:59:0c:a6:d8:d7:a4:9f:54:c7:fc:
                    5b:e7:d1:de:c2:06:b5:4b:26:00:a9:88:6e:ed:52:
                    38:fa:d5:b9:d0:a8:92:e2:16:1f:a9:3e:c7:97:6a:
                    a0:fe:20:08:9d:81:8f:b5:ae:1b:f0:21:e8:4b:cc:
                    0d:47:af:5c:08:2d:f6:33:36:9a:ba:07:8e:ad:9f:
                    6c:b5:20:01:aa:49:dc:af:37:8d:db:da:96:ee:64:
                    bd:b4:8b:1c:02:d1:e3:d1:59:b8:ff:1e:c9:76:70:
                    f8:a7:11:19:21:a0:74:fb:c4:1a:f0:1c:a4:12:98:
                    0d:d5:4f:47:98:af:00:a6:8b:5a:47:c6:97:58:f3:
                    f2:96:5a:bc:3d:aa:b5:1b:21:5e:d4:97:17:ea:1c:
                    41:02:3a:f8:e4:09:19:ad:31:69:ae:8f:86:3c:33:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:06:5E:E8:20:9E:81:3C:A4:49:BC:14:B1:17:EB:38:C2:EE:DC:4C
            X509v3 Authority Key Identifier:
                keyid:A1:F5:71:4C:69:ED:53:05:DF:27:4E:3C:CC:91:58:3E:9C:14:11:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofVxTGntUwXfJ048zJFYPpwUEU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/19f5b7-df7f-4c3b-b05a-8288035342d9/1/ofVxTGntUwXfJ048zJFYPpwUEU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/19f5b7-df7f-4c3b-b05a-8288035342d9/1/ofVxTGntUwXfJ048zJFYPpwUEU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0e:55:94:fa:f7:d0:05:f1:a4:ef:f5:01:69:f2:54:ef:14:
         92:45:f9:96:21:b1:6c:1d:3e:31:2a:a4:e9:6f:d9:a5:85:1a:
         a3:5a:18:25:a0:6e:e2:99:be:44:1c:76:e9:86:58:1a:f2:cf:
         f8:a3:e1:8b:da:08:2a:38:0f:5e:0b:e0:98:50:31:bf:59:e2:
         7b:88:cf:4f:25:7a:e2:4c:24:b4:04:98:3a:db:8f:49:52:e3:
         1b:61:45:e3:f4:69:72:6b:aa:f3:0e:68:d4:9e:12:6a:b9:e6:
         2a:a1:ca:23:62:e6:5c:aa:8b:8e:10:f9:41:ae:2d:40:f7:3a:
         76:f5:0f:60:33:b6:0c:9a:30:ad:ee:85:19:3f:ae:12:58:60:
         fd:bf:49:3f:27:65:36:3a:34:be:ff:8e:56:b9:d7:1a:2b:9e:
         6f:76:f6:de:f6:fd:dd:1a:88:e2:b5:c9:e3:e4:5a:7b:f0:67:
         91:a7:2d:43:7e:a2:16:f4:7e:5a:6c:aa:7b:49:3d:9c:3a:81:
         0e:46:7f:10:a1:c6:7b:93:42:d6:a1:54:55:7f:df:3c:88:8e:
         16:c0:02:ff:63:e3:2a:2d:52:0c:76:13:0b:bc:a2:5c:86:0e:
         04:12:e5:bb:e2:60:81:3e:6f:3f:96:76:5c:18:33:af:97:d6:
         70:63:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----