Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4e5605-9c6a-4df2-98ae-2d12a387d475/1/_rYZBm_0qxvaUImr3MvhIEPK9Cg.mft
File:                     _rYZBm_0qxvaUImr3MvhIEPK9Cg.mft (raw, json)
Hash identifier:          +BzAAntnVfrt3yVliNPjq3/JLQRO4xE6pl0vqGLZtz8=
Subject key identifier:   03:A5:5C:75:83:83:76:F8:99:68:36:03:37:83:AB:BE:F1:04:20:10
Authority key identifier: FE:B6:19:06:6F:F4:AB:1B:DA:50:89:AB:DC:CB:E1:20:43:CA:F4:28
Certificate issuer:       /CN=feb619066ff4ab1bda5089abdccbe12043caf428
Certificate serial:       011334C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rYZBm_0qxvaUImr3MvhIEPK9Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4e5605-9c6a-4df2-98ae-2d12a387d475/1/_rYZBm_0qxvaUImr3MvhIEPK9Cg.mft
Manifest number:          0172
Signing time:             Thu 17 Mar 2022 09:52:20 +0000
Manifest this update:     Thu 17 Mar 2022 09:52:20 +0000
Manifest next update:     Fri 18 Mar 2022 09:52:20 +0000
Files and hashes:         1: _rYZBm_0qxvaUImr3MvhIEPK9Cg.crl (hash: r3X3M9ToKCHI8FX423Y9MCfwQDE3iICJ4E4vIZaMi9U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18035911 (0x11334c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb619066ff4ab1bda5089abdccbe12043caf428
        Validity
            Not Before: Mar 17 09:52:20 2022 GMT
            Not After : Mar 18 09:52:20 2022 GMT
        Subject: CN=03a55c75838376f8996836033783abbef1042010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:01:8c:0e:c7:83:ae:2d:e6:6b:8a:7f:90:
                    db:98:20:56:b4:e0:97:e8:0e:cc:7c:34:df:8a:50:
                    79:90:95:89:c9:6d:4a:12:4b:01:f6:c6:6f:8e:78:
                    47:42:19:1c:b5:7a:88:44:d5:7a:0a:fc:42:78:ac:
                    e2:a2:4b:43:ca:e5:ae:38:4a:db:a3:df:ea:c4:44:
                    39:24:5b:dd:0b:86:bd:79:25:71:90:e5:79:65:99:
                    09:5e:69:5d:0f:dd:a1:50:e6:c8:70:8f:d2:6d:d8:
                    17:a8:0d:1b:fb:6a:f6:3f:23:93:26:1c:74:8b:17:
                    7a:47:3f:51:82:58:5e:1d:56:9d:74:72:72:f7:31:
                    b7:7d:fe:82:64:ed:60:7d:c8:f9:2b:68:b6:15:8c:
                    63:75:77:50:88:d7:c1:c2:fb:c5:10:e3:7e:cc:78:
                    2a:50:17:ed:c8:90:f7:f0:96:f3:c3:da:67:8e:58:
                    97:fa:3d:fc:05:a8:3e:13:60:36:b5:76:81:88:34:
                    7c:1a:f7:2b:33:03:65:5a:d7:9f:b7:c4:66:24:be:
                    3f:89:a3:4d:6b:e8:d6:45:4f:d9:98:32:d0:e2:ff:
                    a2:c7:55:31:5d:47:2a:5a:94:05:e8:ac:b6:f4:b3:
                    fa:29:ff:4d:74:33:26:3b:59:20:4e:f2:d5:39:73:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:5C:75:83:83:76:F8:99:68:36:03:37:83:AB:BE:F1:04:20:10
            X509v3 Authority Key Identifier:
                keyid:FE:B6:19:06:6F:F4:AB:1B:DA:50:89:AB:DC:CB:E1:20:43:CA:F4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rYZBm_0qxvaUImr3MvhIEPK9Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4e5605-9c6a-4df2-98ae-2d12a387d475/1/_rYZBm_0qxvaUImr3MvhIEPK9Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4e5605-9c6a-4df2-98ae-2d12a387d475/1/_rYZBm_0qxvaUImr3MvhIEPK9Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:86:32:5b:e4:cf:12:b0:fb:27:f8:93:ec:05:c7:d2:65:
         ca:62:01:55:b8:a0:11:7f:b5:95:d3:fe:3d:2a:21:cb:b5:c2:
         56:c1:ef:37:aa:7b:81:9b:49:cb:7c:2f:16:81:54:1b:cf:93:
         f5:f4:bf:33:ee:96:a2:ae:50:58:08:de:73:0b:f1:15:8c:22:
         2e:ab:a1:16:42:f2:85:eb:69:d7:ff:7c:f8:8f:4a:df:7f:eb:
         aa:04:71:41:db:ae:df:b1:f4:2f:5e:a1:40:6c:99:ca:7b:56:
         4a:c2:e6:9f:45:f8:e8:bd:2b:52:4a:72:a4:2d:5e:9a:e2:fe:
         d7:23:e1:5b:d1:5b:a8:e5:cd:e4:ed:13:42:71:69:bd:3a:5d:
         3f:a2:59:3b:d7:93:23:b4:c9:7a:b5:e4:01:53:2d:90:68:f2:
         36:7b:34:68:f3:f4:0c:a7:4e:8a:f4:10:e8:a1:a7:f7:2a:17:
         92:4f:e3:cd:ff:8f:54:b6:b0:d5:d5:63:6b:01:d8:31:e9:0c:
         73:09:1b:43:6d:64:d7:f1:63:d5:f1:82:55:66:65:61:87:8d:
         c2:21:f3:39:68:f3:38:28:ed:48:ee:18:6d:2f:a5:1f:0a:4a:
         17:92:52:58:05:1c:97:dd:68:07:48:e3:8d:ef:9f:ee:f2:34:
         50:71:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----