Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a11fdb-24f8-46f8-9b92-2c5511ec611e/1/1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.mft
File:                     1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.mft (raw, json)
Hash identifier:          nCIaJl8Tq9x+BUleqNKpWgCHoxCOyCVQaZrhkq41/2I=
Subject key identifier:   E7:3D:F7:E5:B2:35:B8:FD:DD:B9:B9:83:27:F6:16:9B:75:25:AE:2E
Authority key identifier: D7:EE:11:82:39:B7:28:7C:CF:4D:B1:D1:37:63:D0:D0:11:98:78:C4
Certificate issuer:       /CN=d7ee118239b7287ccf4db1d13763d0d0119878c4
Certificate serial:       01852A41BE8E796B1F15D9D19396D5785915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/a11fdb-24f8-46f8-9b92-2c5511ec611e/1/1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.mft
Manifest number:          0BE3
Signing time:             Mon 19 Dec 2022 12:00:29 +0000
Manifest this update:     Mon 19 Dec 2022 12:00:29 +0000
Manifest next update:     Tue 20 Dec 2022 12:00:29 +0000
Files and hashes:         1: 1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.crl (hash: LiGFZg03jur2046csE0FboNvAabYRndn5EmwsI7l5lM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2a:41:be:8e:79:6b:1f:15:d9:d1:93:96:d5:78:59:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ee118239b7287ccf4db1d13763d0d0119878c4
        Validity
            Not Before: Dec 19 12:00:29 2022 GMT
            Not After : Dec 20 12:00:29 2022 GMT
        Subject: CN=e73df7e5b235b8fdddb9b98327f6169b7525ae2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:3e:1d:0d:5d:05:75:12:49:a4:c2:87:94:
                    5d:b3:df:96:ae:c6:d1:bd:04:77:f4:93:1d:4d:ce:
                    37:d3:d4:ec:bb:23:30:4e:d5:6c:02:7c:35:ed:a8:
                    21:30:b5:22:e4:f0:85:5c:a8:2b:03:55:81:32:10:
                    46:cb:d5:0e:29:48:97:b6:fb:c6:c6:ee:d2:5c:b3:
                    11:6a:fe:20:50:6a:8c:ad:2a:22:8c:f5:b2:55:da:
                    60:d1:a1:79:10:65:b4:32:8b:6e:1a:47:6b:ce:4d:
                    7b:b1:b3:98:12:4e:54:a2:bf:9a:f9:77:79:29:dc:
                    2c:e2:f0:da:1f:f6:c2:03:5c:28:0b:f0:64:f5:19:
                    f1:62:87:80:c7:e7:09:38:6b:61:4b:7b:27:9e:01:
                    66:6b:0c:f2:dd:62:3b:7c:13:22:94:ff:6d:b1:a2:
                    af:25:14:49:36:6b:18:bf:d6:44:3e:99:c5:a2:cb:
                    5a:36:4b:1e:06:92:3a:e3:e8:85:1c:0f:8c:a0:e6:
                    b7:0f:e3:d1:21:be:a7:05:44:1b:f4:16:40:3d:41:
                    2f:dd:b0:84:de:b9:87:ab:a9:1e:9f:22:30:e7:07:
                    da:06:a6:a5:cf:76:0c:66:f1:cd:9b:59:7d:1d:f8:
                    5d:d7:fe:ba:93:0c:49:0e:00:1b:ad:0c:f8:29:20:
                    9f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3D:F7:E5:B2:35:B8:FD:DD:B9:B9:83:27:F6:16:9B:75:25:AE:2E
            X509v3 Authority Key Identifier:
                keyid:D7:EE:11:82:39:B7:28:7C:CF:4D:B1:D1:37:63:D0:D0:11:98:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a11fdb-24f8-46f8-9b92-2c5511ec611e/1/1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a11fdb-24f8-46f8-9b92-2c5511ec611e/1/1-4Rgjm3KHzPTbHRN2PQ0BGYeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:43:ec:75:2c:a1:f0:54:9e:e3:50:22:39:2c:ac:dd:c1:
         be:21:d8:22:87:0d:86:ee:7c:69:5f:b1:a0:65:15:89:d7:4c:
         9c:4e:1d:01:20:d9:cd:10:4a:61:04:60:27:b4:4a:cb:61:12:
         05:0c:40:7f:7c:b6:ed:09:7e:29:17:cf:f1:d8:bb:f1:f5:55:
         97:8c:c9:39:7f:9a:25:26:30:53:bd:25:39:9d:e3:08:d8:36:
         d1:f7:19:c0:21:3c:62:3f:3b:15:81:f0:60:2b:2a:65:f3:f3:
         7b:d7:be:16:f6:b8:cd:a0:4b:aa:52:c9:e9:b6:5b:ac:e8:e6:
         4f:6a:92:2f:0f:68:ac:23:e3:ae:ca:50:53:2c:b8:8f:19:cb:
         61:96:2f:1a:99:cf:cc:11:65:0d:50:32:08:33:4f:66:45:8e:
         35:d1:68:ad:66:bc:75:ed:9e:e8:69:e4:04:56:a2:7a:e3:f3:
         ae:ad:d2:47:84:f0:fe:c5:b2:65:5e:56:79:97:c9:ee:31:5e:
         d5:b2:69:f8:7d:c2:32:ac:2a:4a:aa:dc:1d:72:51:ff:49:db:
         02:f9:a7:4e:f3:be:7e:0c:da:69:62:33:ed:7f:0a:3e:13:26:
         76:82:ef:8d:71:2b:bb:c5:8d:27:c7:3d:bb:b5:36:52:3f:41:
         b6:f2:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----