Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/851b31-7b43-4d7d-abe4-ddc5ad93fa25/1/ApPcZgWWmicThZ_I5LuY2ATOeSo.mft
File:                     ApPcZgWWmicThZ_I5LuY2ATOeSo.mft (raw, json)
Hash identifier:          1BcD5CKX1POS1MOHT2hW4l02MYJJcFwuY3Aleq6nGU8=
Subject key identifier:   09:76:1E:21:E1:D9:A0:40:78:8F:DB:95:2E:FF:E0:96:A6:18:C1:31
Authority key identifier: 02:93:DC:66:05:96:9A:27:13:85:9F:C8:E4:BB:98:D8:04:CE:79:2A
Certificate issuer:       /CN=0293dc6605969a2713859fc8e4bb98d804ce792a
Certificate serial:       01E5DECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApPcZgWWmicThZ_I5LuY2ATOeSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/851b31-7b43-4d7d-abe4-ddc5ad93fa25/1/ApPcZgWWmicThZ_I5LuY2ATOeSo.mft
Manifest number:          0278
Signing time:             Mon 13 Jun 2022 02:39:17 +0000
Manifest this update:     Mon 13 Jun 2022 02:39:17 +0000
Manifest next update:     Tue 14 Jun 2022 02:39:17 +0000
Files and hashes:         1: ApPcZgWWmicThZ_I5LuY2ATOeSo.crl (hash: HPBcX77P6hhAo7Jh9b1JJEesMf4Ocm11M/Ar6QcY6/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31841995 (0x1e5decb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0293dc6605969a2713859fc8e4bb98d804ce792a
        Validity
            Not Before: Jun 13 02:39:17 2022 GMT
            Not After : Jun 14 02:39:17 2022 GMT
        Subject: CN=09761e21e1d9a040788fdb952effe096a618c131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:6c:81:da:f1:c5:a0:bb:99:0c:f9:cf:3a:
                    95:83:73:4c:b8:90:37:1d:0c:aa:4c:71:04:31:a5:
                    bc:08:f2:82:4a:60:ae:08:09:22:42:dc:64:26:1d:
                    25:17:b4:d7:00:b7:43:82:54:7c:59:21:22:e4:31:
                    0f:9d:fb:4a:da:1b:1b:29:69:ca:bb:f8:4b:ce:a4:
                    ea:8f:ed:38:c7:4d:23:38:e9:31:10:43:e9:a2:c9:
                    2e:6f:b0:74:a7:a3:60:ca:2c:15:c9:93:2e:76:73:
                    92:ec:fb:f4:5f:4a:19:07:6c:55:51:3f:14:45:9a:
                    c9:aa:27:11:11:99:86:95:1e:d6:cb:4b:ee:a9:c6:
                    98:58:22:75:e5:68:4f:f9:bd:dd:b2:19:b0:56:b4:
                    ba:bb:ca:ab:6a:6d:7d:3c:11:7a:30:0a:e2:d8:b3:
                    96:00:3a:91:90:44:4f:57:71:1a:c0:74:26:47:b4:
                    26:ed:0f:ef:e1:d8:90:67:0a:b3:8f:5c:47:04:23:
                    0b:6c:11:32:b0:a6:56:71:e9:d1:4e:6c:98:6d:dd:
                    dd:14:16:b2:2e:59:6b:3e:1b:8f:69:36:a8:55:36:
                    d6:03:8e:aa:dd:50:ac:0e:e6:2f:e9:88:98:7a:6c:
                    f7:a6:1c:d8:c7:0e:95:01:43:6b:14:66:16:0a:42:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:76:1E:21:E1:D9:A0:40:78:8F:DB:95:2E:FF:E0:96:A6:18:C1:31
            X509v3 Authority Key Identifier:
                keyid:02:93:DC:66:05:96:9A:27:13:85:9F:C8:E4:BB:98:D8:04:CE:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApPcZgWWmicThZ_I5LuY2ATOeSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/851b31-7b43-4d7d-abe4-ddc5ad93fa25/1/ApPcZgWWmicThZ_I5LuY2ATOeSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/851b31-7b43-4d7d-abe4-ddc5ad93fa25/1/ApPcZgWWmicThZ_I5LuY2ATOeSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:51:07:97:85:9e:c0:c4:0c:0f:f7:3b:e1:9b:21:08:c9:
         02:60:d4:a8:7a:df:b4:c5:02:24:e6:17:3b:ec:48:36:a8:e5:
         64:6e:7d:42:67:01:3d:80:2f:7c:e2:d4:12:f8:d8:bd:6d:d4:
         40:c3:80:54:57:cf:a1:ab:cc:bc:dc:6b:7e:35:e6:fe:50:d5:
         c6:0a:60:33:48:a9:c5:7c:aa:e5:49:9a:40:2d:f7:d9:b5:f2:
         48:fa:26:7f:9d:52:a8:21:cf:39:51:35:3a:b8:43:50:56:71:
         c1:2c:63:42:76:ba:bb:b9:47:fc:28:c9:7e:01:db:4c:2c:e8:
         54:c1:58:15:4b:f3:29:21:f2:22:76:8e:07:13:35:77:19:4a:
         2b:fc:65:28:01:ea:46:4e:7a:be:fd:d5:d3:9e:6f:87:b2:ab:
         a6:aa:07:18:ff:a2:43:0c:bd:12:c8:de:c4:82:44:9c:cf:63:
         70:fa:9c:d6:53:61:16:ad:d7:95:16:1f:65:b6:92:c7:8f:05:
         ab:c2:2b:6a:d4:a5:58:08:e0:01:c8:d2:07:d0:02:c2:c6:07:
         df:35:33:33:1f:c2:09:9e:b5:21:6f:74:65:49:bf:3b:d1:19:
         db:bc:5f:c9:10:c9:a0:31:e5:4e:b7:13:f4:5b:30:2e:ba:bf:
         99:e8:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----