Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/fc74d9-6519-4fed-a1ec-d195d9a167a3/1/450mSj8vXPDIiK-qyewcqi62i8U.mft
File:                     450mSj8vXPDIiK-qyewcqi62i8U.mft (raw, json)
Hash identifier:          2peanEvxxtEFQssS+10H84x93t/3ctQ1tfPVi9hhq40=
Subject key identifier:   ED:80:05:64:99:50:DA:AF:8C:4F:AA:50:AD:3E:78:45:27:AA:E7:AF
Authority key identifier: E3:9D:26:4A:3F:2F:5C:F0:C8:88:AF:AA:C9:EC:1C:AA:2E:B6:8B:C5
Certificate issuer:       /CN=e39d264a3f2f5cf0c888afaac9ec1caa2eb68bc5
Certificate serial:       0187A194EACD49C7A9812C1D517AF0DCCD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/450mSj8vXPDIiK-qyewcqi62i8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/fc74d9-6519-4fed-a1ec-d195d9a167a3/1/450mSj8vXPDIiK-qyewcqi62i8U.mft
Manifest number:          0D38
Signing time:             Fri 21 Apr 2023 02:11:43 +0000
Manifest this update:     Fri 21 Apr 2023 02:11:43 +0000
Manifest next update:     Sat 22 Apr 2023 02:11:43 +0000
Files and hashes:         1: 450mSj8vXPDIiK-qyewcqi62i8U.crl (hash: U1mHWWYVP28rMClcV+zLRcnd00QLYdwqAamh2vjYDV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a1:94:ea:cd:49:c7:a9:81:2c:1d:51:7a:f0:dc:cd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39d264a3f2f5cf0c888afaac9ec1caa2eb68bc5
        Validity
            Not Before: Apr 21 02:11:43 2023 GMT
            Not After : Apr 22 02:11:43 2023 GMT
        Subject: CN=ed8005649950daaf8c4faa50ad3e784527aae7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:be:60:cf:7b:5f:6d:79:33:21:4e:24:19:
                    02:a3:23:3f:99:51:6d:6e:d9:d5:19:3a:57:c6:48:
                    07:b0:fe:c4:0f:72:20:24:9c:68:8a:91:8b:8d:30:
                    97:ca:b0:7c:48:45:7c:f4:e0:75:3d:15:ad:42:ab:
                    e3:4d:38:bd:8f:83:c4:74:1d:4d:b0:84:da:c4:a8:
                    22:1b:93:2a:76:53:61:8a:b5:db:b8:ae:fb:15:bd:
                    69:69:ae:a5:fe:98:50:07:da:f9:a6:c0:09:63:18:
                    a9:de:9d:58:73:26:a6:c4:64:16:9e:61:0f:6e:b6:
                    6d:ee:ae:09:04:79:cb:97:9b:36:40:7a:af:96:0c:
                    64:c1:26:52:da:31:75:7e:44:2a:b6:35:6f:e1:b9:
                    5a:fa:0f:4b:6a:b8:f5:57:f2:c0:c9:05:10:e6:b4:
                    50:32:c2:8d:1c:9d:b2:34:fe:14:b9:ce:54:a8:48:
                    8c:95:f2:7c:09:aa:ab:ce:3a:1f:b7:1f:a9:76:1e:
                    a9:27:2e:28:e4:2c:4a:28:87:84:52:fc:94:52:37:
                    e5:28:00:37:43:66:32:60:1e:a3:49:df:f1:25:c3:
                    fe:3d:8f:8d:4c:0f:bb:23:80:77:fd:e5:e8:99:33:
                    b5:d4:db:11:02:53:d6:b0:c4:ff:40:da:89:43:41:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:05:64:99:50:DA:AF:8C:4F:AA:50:AD:3E:78:45:27:AA:E7:AF
            X509v3 Authority Key Identifier:
                keyid:E3:9D:26:4A:3F:2F:5C:F0:C8:88:AF:AA:C9:EC:1C:AA:2E:B6:8B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/450mSj8vXPDIiK-qyewcqi62i8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/fc74d9-6519-4fed-a1ec-d195d9a167a3/1/450mSj8vXPDIiK-qyewcqi62i8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/fc74d9-6519-4fed-a1ec-d195d9a167a3/1/450mSj8vXPDIiK-qyewcqi62i8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:91:64:8b:86:b4:44:23:89:00:b1:fb:97:6a:df:8b:e6:45:
         dd:20:61:79:d1:ce:7f:2c:46:18:94:a3:51:93:1e:65:6d:b4:
         0c:cd:6a:22:f3:5d:60:15:a4:a7:d1:3b:5e:4b:1f:1a:05:1c:
         87:21:d2:74:44:64:53:eb:bd:15:56:25:31:6c:72:2a:a2:8f:
         cb:d2:9a:82:7e:c2:6e:24:29:e7:ed:5d:e8:20:1c:55:56:3e:
         68:ff:55:14:5b:e1:9e:62:51:63:03:3f:c7:44:15:88:b0:0f:
         53:94:f2:fd:06:80:98:32:f7:e3:31:c3:35:fa:40:0e:84:ce:
         13:8a:10:ef:f1:a2:3d:3b:12:27:94:a5:27:3d:b8:b8:c5:80:
         22:21:aa:f2:0d:e2:24:2c:d6:ea:51:8c:14:6d:5b:89:82:80:
         6d:61:0d:bf:88:65:cd:2d:1a:07:fa:10:03:5c:a4:d3:9f:07:
         47:1b:4f:1c:d8:d3:25:b5:d5:77:b8:35:85:37:f0:ad:9a:63:
         5e:91:e6:07:76:e0:5f:1b:37:2e:38:27:d1:30:2f:bb:22:05:
         32:9b:0d:49:ac:19:8d:4f:55:43:d9:18:46:01:7c:cc:bc:d0:
         06:74:3c:d7:8a:90:ff:e8:d3:6b:a9:8f:d1:ee:be:2d:60:d7:
         eb:a2:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----