Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e97e8b-a29e-4d2d-bf06-1a5be443c158/1/rZX6kUcp_ICOFWtOJmcCEcotwt8.mft
File:                     rZX6kUcp_ICOFWtOJmcCEcotwt8.mft (raw, json)
Hash identifier:          35fJCPBqTTlJOpfr4OEd4sA6+8MYJITbkR+CmBsbwOU=
Subject key identifier:   6B:E9:70:4D:A9:97:D6:C6:70:B2:90:02:2C:18:B0:4E:21:74:8D:37
Authority key identifier: AD:95:FA:91:47:29:FC:80:8E:15:6B:4E:26:67:02:11:CA:2D:C2:DF
Certificate issuer:       /CN=ad95fa914729fc808e156b4e26670211ca2dc2df
Certificate serial:       0183CBBA950847E16DB2B020B8579093EEF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZX6kUcp_ICOFWtOJmcCEcotwt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e97e8b-a29e-4d2d-bf06-1a5be443c158/1/rZX6kUcp_ICOFWtOJmcCEcotwt8.mft
Manifest number:          027F
Signing time:             Wed 12 Oct 2022 10:25:46 +0000
Manifest this update:     Wed 12 Oct 2022 10:25:46 +0000
Manifest next update:     Thu 13 Oct 2022 10:25:46 +0000
Files and hashes:         1: rZX6kUcp_ICOFWtOJmcCEcotwt8.crl (hash: dQVGqqtq6IPJFtsMq5rwpDGbLaPh8gLIDIZXXpifTAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cb:ba:95:08:47:e1:6d:b2:b0:20:b8:57:90:93:ee:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad95fa914729fc808e156b4e26670211ca2dc2df
        Validity
            Not Before: Oct 12 10:25:46 2022 GMT
            Not After : Oct 13 10:25:46 2022 GMT
        Subject: CN=6be9704da997d6c670b290022c18b04e21748d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:d7:70:1b:b5:ec:7d:24:8d:13:ed:02:31:
                    b9:92:18:d6:24:6e:9e:ca:2c:67:4d:9e:b3:83:70:
                    de:e8:d0:f1:c4:07:96:6a:8f:ef:29:16:6e:79:ec:
                    ba:43:91:a0:7e:7b:92:a6:0f:68:b6:5e:a4:52:5a:
                    f2:07:f5:e1:b6:c4:c9:bb:9f:7f:b5:02:a5:d2:07:
                    19:1b:c6:bd:89:9d:11:c1:06:14:d9:c6:ed:1a:1a:
                    d7:8f:4c:f8:ab:2f:f4:e7:88:e6:24:ae:e9:60:4c:
                    f7:25:e6:97:ad:80:11:a9:27:b0:85:80:89:67:b3:
                    2d:be:63:82:1b:cc:60:06:97:3b:5e:b3:94:a9:80:
                    d8:7c:d9:de:43:b2:1d:c8:8a:a3:7d:a7:45:fe:fa:
                    7e:7c:5f:db:26:24:c4:37:74:db:73:a4:46:8f:47:
                    d3:e3:99:ff:2e:95:a0:bc:1c:2f:d4:4d:c5:ab:2b:
                    ac:3e:20:65:bb:a9:f1:b1:92:f9:72:a7:ba:6a:e8:
                    c8:5c:33:4a:47:58:37:d8:6d:6d:a3:7c:1b:3c:38:
                    d2:03:60:e6:d8:d9:c6:b3:e6:e9:cd:c7:e7:4e:3e:
                    5c:9e:f2:4f:36:64:67:b5:e7:c7:94:cd:be:d1:25:
                    bf:3e:13:ab:70:30:86:1a:27:11:a4:fc:9b:2f:81:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E9:70:4D:A9:97:D6:C6:70:B2:90:02:2C:18:B0:4E:21:74:8D:37
            X509v3 Authority Key Identifier:
                keyid:AD:95:FA:91:47:29:FC:80:8E:15:6B:4E:26:67:02:11:CA:2D:C2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZX6kUcp_ICOFWtOJmcCEcotwt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e97e8b-a29e-4d2d-bf06-1a5be443c158/1/rZX6kUcp_ICOFWtOJmcCEcotwt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e97e8b-a29e-4d2d-bf06-1a5be443c158/1/rZX6kUcp_ICOFWtOJmcCEcotwt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:60:8b:52:3a:af:fb:28:92:0f:87:5e:f7:38:8b:1b:ab:00:
         0c:d0:29:b9:07:13:90:8b:94:ff:bb:0b:62:94:18:97:f3:31:
         1c:45:97:08:aa:c5:20:9f:56:0b:e3:cd:dd:30:10:12:d6:5c:
         a9:91:58:c2:5b:fc:e3:e2:97:a7:66:45:24:62:12:9d:54:0b:
         fd:27:03:93:ba:2b:31:26:83:2c:46:f1:cf:f0:2e:6b:8f:d3:
         db:17:02:d8:6d:5d:f0:56:e8:d1:be:e8:cf:23:9d:36:65:c4:
         da:46:6c:8f:35:14:06:2f:ab:ae:08:81:76:ec:98:89:be:e4:
         89:01:3d:16:d2:d7:ed:fc:4a:25:4a:38:fe:ef:8f:cf:7f:4d:
         ca:96:e7:25:2f:19:e1:bd:ce:bf:1d:30:95:7b:f1:46:43:4d:
         06:60:db:e5:08:4a:d2:21:a4:46:73:e5:9f:f1:22:27:5f:ff:
         85:16:cb:b1:f7:fc:53:fa:d7:d0:51:7f:07:44:74:2e:ca:85:
         b6:b3:82:a1:1a:f7:ff:7c:3d:0b:e7:a0:fa:75:ce:ba:0b:26:
         7d:42:13:65:40:f1:98:8c:06:04:64:a4:af:3a:5d:f2:d8:e0:
         f6:a5:a5:07:f2:8a:cd:a5:9f:b0:65:29:52:d3:96:db:53:23:
         8a:74:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----