Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.mft
File:                     kQKE4qeeXzjM42SuDvHJConF5Xs.mft (raw, json)
Hash identifier:          Is2HmQ5qrnyF/m3qHEWyoBa3r8VgudCNsxBA354OUXs=
Subject key identifier:   04:F9:D0:C3:EA:61:05:39:5B:47:7B:23:67:FF:29:D7:F1:4D:0B:91
Authority key identifier: 91:02:84:E2:A7:9E:5F:38:CC:E3:64:AE:0E:F1:C9:0A:89:C5:E5:7B
Certificate issuer:       /CN=910284e2a79e5f38cce364ae0ef1c90a89c5e57b
Certificate serial:       0183783A213F57F31CAA90621FB17500ED67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kQKE4qeeXzjM42SuDvHJConF5Xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.mft
Manifest number:          0A30
Signing time:             Mon 26 Sep 2022 05:16:58 +0000
Manifest this update:     Mon 26 Sep 2022 05:16:58 +0000
Manifest next update:     Tue 27 Sep 2022 05:16:58 +0000
Files and hashes:         1: kQKE4qeeXzjM42SuDvHJConF5Xs.crl (hash: 1zz4oneEEEXPpDp63bnOMylPaM/E8XIPX3aMpuhsnx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:78:3a:21:3f:57:f3:1c:aa:90:62:1f:b1:75:00:ed:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910284e2a79e5f38cce364ae0ef1c90a89c5e57b
        Validity
            Not Before: Sep 26 05:16:58 2022 GMT
            Not After : Sep 27 05:16:58 2022 GMT
        Subject: CN=04f9d0c3ea6105395b477b2367ff29d7f14d0b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:d3:a4:94:96:77:e0:4c:a1:58:53:05:74:
                    b5:91:25:f6:58:5b:f5:51:13:57:cc:7b:3f:66:96:
                    25:06:fa:f5:20:55:53:6f:0a:83:4c:aa:4b:16:c0:
                    f7:fb:49:e3:51:24:3f:df:7b:02:98:61:53:fe:52:
                    2c:dd:ed:eb:63:9e:ea:5f:b2:f6:2c:e1:f7:ab:f9:
                    af:1a:e3:b5:af:09:68:b7:f9:ab:4b:41:bc:d9:48:
                    67:fd:e6:08:b3:26:fa:77:67:21:e7:ec:16:e8:1e:
                    28:d0:8f:80:db:66:10:35:06:fa:ec:e0:2d:80:16:
                    01:af:03:93:71:c3:12:b9:25:d0:59:5e:12:d0:42:
                    8f:e0:78:1f:fb:5e:6a:01:ae:ef:18:9e:10:bb:f0:
                    6d:26:4d:27:21:08:b0:a8:19:c3:af:37:d0:2e:8a:
                    c3:a0:df:95:bf:e2:c5:20:84:df:35:e0:2b:b7:d0:
                    c8:ae:3d:a5:55:0f:71:06:6e:fa:fb:9c:9f:ad:ac:
                    34:fa:e7:47:d3:84:e2:7e:f0:44:6d:2b:56:50:a3:
                    2b:6d:b9:25:e8:73:30:53:0c:cd:3c:8e:92:bd:8b:
                    ab:ed:4d:96:64:19:a6:76:a8:b7:d4:61:22:49:db:
                    52:5c:20:7a:85:d5:d5:6f:8c:1e:93:9f:70:c1:4a:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F9:D0:C3:EA:61:05:39:5B:47:7B:23:67:FF:29:D7:F1:4D:0B:91
            X509v3 Authority Key Identifier:
                keyid:91:02:84:E2:A7:9E:5F:38:CC:E3:64:AE:0E:F1:C9:0A:89:C5:E5:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQKE4qeeXzjM42SuDvHJConF5Xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c9:6b:10:bc:ac:6b:83:f7:d4:bb:f1:35:b1:10:f8:e1:6d:
         d9:1f:7a:4a:3f:02:fb:29:0f:cc:f3:77:4a:5b:53:c2:22:f5:
         2d:9b:f1:4c:b0:32:31:f5:ba:ba:dd:34:fc:1b:15:3f:32:b7:
         aa:f6:78:51:a7:e1:1f:4d:82:c6:4d:92:5e:11:13:62:c1:34:
         b1:83:a9:bd:08:80:fe:07:ff:51:1b:af:44:ac:7d:bf:2f:8c:
         4c:58:40:2d:d6:8e:e1:5c:5a:c6:64:cd:a3:1c:bf:10:ca:0d:
         4a:04:61:14:42:62:41:38:7e:9a:22:4b:cc:0e:59:c8:96:a4:
         02:06:09:b0:77:bd:01:63:ac:bb:b7:1e:ef:6c:ed:36:28:00:
         c4:0b:75:d8:fb:45:57:95:e1:bf:96:87:70:e9:13:c4:47:6b:
         be:6d:98:a0:b1:e7:da:0a:bc:75:a4:e5:45:b8:59:95:71:23:
         07:f2:d7:7d:52:ca:68:8a:8b:89:25:f8:fb:44:39:25:c4:55:
         1f:27:37:1e:fc:68:be:3e:3b:56:02:0f:a9:1a:7c:dc:eb:ea:
         e5:3f:b0:e8:1e:df:18:f5:12:59:ad:3c:f3:d6:d1:f3:5e:96:
         7d:b0:6a:c2:27:8b:8a:c3:87:dc:d7:6c:78:0e:83:ea:28:c6:
         1f:6c:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----