Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/06f0l-YbkSjf_T71pUXJB-lFf_8.mft
File:                     06f0l-YbkSjf_T71pUXJB-lFf_8.mft (raw, json)
Hash identifier:          NUT69LFcAWlromEhXCB5RlAdKZuep4MvVVr0k25j9AU=
Subject key identifier:   1F:CA:D0:A9:64:14:ED:4F:99:EF:36:B1:3D:B3:BA:93:56:76:05:60
Authority key identifier: D3:A7:F4:97:E6:1B:91:28:DF:FD:3E:F5:A5:45:C9:07:E9:45:7F:FF
Certificate issuer:       /CN=d3a7f497e61b9128dffd3ef5a545c907e9457fff
Certificate serial:       05D760A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06f0l-YbkSjf_T71pUXJB-lFf_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/06f0l-YbkSjf_T71pUXJB-lFf_8.mft
Manifest number:          07BA
Signing time:             Thu 17 Mar 2022 12:05:17 +0000
Manifest this update:     Thu 17 Mar 2022 12:05:17 +0000
Manifest next update:     Fri 18 Mar 2022 12:05:17 +0000
Files and hashes:         1: 06f0l-YbkSjf_T71pUXJB-lFf_8.crl (hash: VKF2kt0t0St+c/cLOLcq0p1o+rnzeFOhzH4DSavbNKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98001057 (0x5d760a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a7f497e61b9128dffd3ef5a545c907e9457fff
        Validity
            Not Before: Mar 17 12:05:17 2022 GMT
            Not After : Mar 18 12:05:17 2022 GMT
        Subject: CN=1fcad0a96414ed4f99ef36b13db3ba9356760560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:3b:fa:be:a1:bf:60:84:a8:fb:0d:23:83:
                    6f:75:67:a3:3a:27:8f:00:93:7f:55:37:52:f3:9b:
                    90:0f:63:68:8d:0c:74:c4:6f:e8:35:b5:5e:df:fb:
                    57:69:ab:19:42:ee:05:fa:50:d5:30:1f:58:f7:cc:
                    0d:22:8c:11:90:d4:e5:c2:51:04:02:35:94:a4:43:
                    c7:ad:8c:79:7b:50:f8:5f:8c:ae:dc:64:31:8f:f1:
                    ac:b5:cc:b3:95:4d:3f:ac:db:47:35:41:fc:df:5a:
                    77:41:e3:4d:b0:a6:de:59:68:05:1b:ac:d3:8d:50:
                    fe:22:30:10:e3:7d:29:92:1c:fd:70:ef:d6:4f:25:
                    cc:9a:e6:0f:22:5a:27:b8:13:4d:21:3c:99:fd:b3:
                    64:e4:3e:23:ce:08:0a:3e:8c:c4:eb:47:af:df:12:
                    2b:78:6f:b4:b7:6d:68:25:6c:e4:92:31:3c:d7:77:
                    29:6b:db:77:4d:c7:8a:3b:06:94:9e:59:3a:24:43:
                    c1:84:5c:c3:5a:3a:c1:7f:4c:a8:9e:a0:df:d5:a8:
                    5c:bb:09:48:9e:49:ed:f4:81:42:18:82:87:81:8f:
                    ea:5d:f5:d9:f0:2a:02:23:ad:2e:83:45:3b:5c:34:
                    92:3a:bc:e9:dd:a4:8b:4c:5a:3d:0c:4b:c8:a7:54:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CA:D0:A9:64:14:ED:4F:99:EF:36:B1:3D:B3:BA:93:56:76:05:60
            X509v3 Authority Key Identifier:
                keyid:D3:A7:F4:97:E6:1B:91:28:DF:FD:3E:F5:A5:45:C9:07:E9:45:7F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06f0l-YbkSjf_T71pUXJB-lFf_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/06f0l-YbkSjf_T71pUXJB-lFf_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/06f0l-YbkSjf_T71pUXJB-lFf_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c2:a3:66:82:db:1c:f0:2c:c7:ed:3c:87:10:81:78:5b:f9:
         fe:be:97:ea:cd:04:17:00:54:c2:06:d5:95:e1:4a:d1:fb:30:
         5b:f7:06:a0:50:b7:b8:b3:cd:cd:74:ad:cf:90:bc:33:07:fd:
         29:b6:38:36:78:bb:16:15:68:f2:a7:31:d6:d5:44:0f:73:a9:
         93:25:68:f2:c3:28:2f:7c:f2:1c:90:c9:2b:fd:97:09:5f:5a:
         6b:ac:dc:f7:a9:0f:77:c5:d2:96:23:a4:2d:b7:41:0e:b8:aa:
         d3:4e:1a:83:2b:a6:3c:cc:49:74:3e:22:8a:d5:c6:25:8f:4a:
         51:18:b8:31:9e:96:05:fe:06:60:63:80:79:77:1f:c4:23:bc:
         72:b0:7f:17:d9:7b:81:61:3b:d2:24:f1:e2:e3:2e:32:cb:1b:
         67:cb:b5:31:f5:35:c9:15:ae:bd:cc:90:83:46:f4:56:db:2b:
         d1:94:39:db:df:cd:7c:c0:a3:4c:38:85:bf:8f:93:99:62:d2:
         27:b8:8e:ca:e8:9f:0e:10:a4:ce:d7:74:03:d0:ab:7b:e5:60:
         2b:f6:50:39:21:7c:ae:57:f4:ba:fc:15:30:df:6f:c8:80:db:
         78:1c:70:96:e9:b5:91:f6:da:29:ce:0f:4e:5f:92:5f:f8:dc:
         6b:2c:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----