Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/1_wQs3D-2SPhg7rzc137-gqUIpo.mft
File:                     1_wQs3D-2SPhg7rzc137-gqUIpo.mft (raw, json)
Hash identifier:          EUuFpEY2V9FK+gvEl+t9gyy0jAGh9NNlDjwj0mv8lyw=
Subject key identifier:   CE:AF:FA:3A:26:64:5E:73:D9:DA:01:7B:EE:D0:D0:FF:6B:87:EC:55
Authority key identifier: D7:FC:10:B3:70:FE:D9:23:E1:83:BA:F3:73:5D:FB:FA:0A:94:22:9A
Certificate issuer:       /CN=d7fc10b370fed923e183baf3735dfbfa0a94229a
Certificate serial:       018745A5930A95A0ED5C5BFA712458997FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_wQs3D-2SPhg7rzc137-gqUIpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/1_wQs3D-2SPhg7rzc137-gqUIpo.mft
Manifest number:          07F3
Signing time:             Mon 03 Apr 2023 05:44:51 +0000
Manifest this update:     Mon 03 Apr 2023 05:44:51 +0000
Manifest next update:     Tue 04 Apr 2023 05:44:51 +0000
Files and hashes:         1: 1_wQs3D-2SPhg7rzc137-gqUIpo.crl (hash: Cf8TxRhKCrVAKPzkUxLiXjd+tkworUGMU+u5CRY4mHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:45:a5:93:0a:95:a0:ed:5c:5b:fa:71:24:58:99:7f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7fc10b370fed923e183baf3735dfbfa0a94229a
        Validity
            Not Before: Apr  3 05:44:51 2023 GMT
            Not After : Apr  4 05:44:51 2023 GMT
        Subject: CN=ceaffa3a26645e73d9da017beed0d0ff6b87ec55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:32:cb:54:72:05:00:e3:88:b7:a1:68:42:
                    54:b4:f9:94:d7:0b:f8:5a:64:a7:ab:66:bb:ad:2a:
                    13:b0:38:29:5b:ce:68:58:e2:85:cf:54:84:f0:61:
                    d1:b7:59:96:3e:3e:55:17:32:11:8e:12:12:f1:b4:
                    39:87:38:2a:92:cf:ce:1a:a6:3e:ec:69:ab:9d:21:
                    66:3e:f9:2b:3f:9d:4a:f3:fb:05:bf:90:9b:7a:66:
                    43:8f:51:4e:70:e3:f0:bd:71:5b:7d:aa:d2:66:74:
                    62:e2:f0:30:f7:96:48:ab:c9:65:8c:8c:f3:fb:64:
                    e3:26:b1:1b:a0:cd:04:9e:83:c2:4a:b7:6f:c1:f5:
                    fb:b3:1a:66:e5:fd:8b:c2:f2:81:cf:25:c1:a6:26:
                    7c:c6:74:14:99:5d:90:ef:3b:bf:f2:94:a2:5b:80:
                    00:f5:a2:12:8a:72:05:13:d1:a6:d7:a0:a8:6c:56:
                    4b:76:cc:cc:36:a6:2d:7d:87:75:26:84:fa:cb:0f:
                    a1:aa:42:61:73:de:ef:18:27:dc:62:79:76:62:a7:
                    ce:44:95:09:91:dd:10:e1:48:12:eb:ae:50:67:e6:
                    50:3c:f2:b8:ab:29:d7:56:b1:cf:3a:eb:51:3a:69:
                    96:cc:7c:cb:44:87:79:20:de:95:b9:9b:2e:a4:86:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AF:FA:3A:26:64:5E:73:D9:DA:01:7B:EE:D0:D0:FF:6B:87:EC:55
            X509v3 Authority Key Identifier:
                keyid:D7:FC:10:B3:70:FE:D9:23:E1:83:BA:F3:73:5D:FB:FA:0A:94:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_wQs3D-2SPhg7rzc137-gqUIpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/1_wQs3D-2SPhg7rzc137-gqUIpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/1_wQs3D-2SPhg7rzc137-gqUIpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:80:19:dc:c7:f0:ce:9c:0d:2c:50:fb:ac:4a:7e:bb:d0:db:
         eb:34:73:99:06:6e:b1:9e:4e:a1:c1:51:ae:f6:f2:8a:ef:23:
         ab:1a:ba:ec:7d:c1:cf:f4:8c:d1:6d:b5:d8:56:1d:61:9c:92:
         f7:40:d2:18:01:7c:64:f4:8c:6b:84:fc:0d:b7:1f:c6:f6:26:
         66:bc:c4:a1:7d:c9:23:59:e5:06:98:47:92:37:ab:35:1b:f5:
         36:03:10:57:3e:76:5f:41:67:89:e1:2f:ef:9f:11:c1:65:7b:
         74:dc:c9:7b:41:23:e5:84:47:d4:e8:fd:1d:23:08:77:c2:93:
         00:5e:99:cf:9c:9b:22:1b:47:9d:bb:04:04:a2:17:5b:20:1b:
         3a:4d:c4:8a:be:86:16:81:88:b6:ad:d1:e4:79:15:e0:4e:17:
         37:48:a6:4c:ec:23:2e:be:31:c3:27:c2:1d:86:85:fd:cb:94:
         95:69:fc:7e:a3:3d:c3:ca:a8:15:2d:88:a5:e7:fc:a4:80:54:
         d1:7c:35:22:50:4d:ae:d8:50:50:80:57:ab:1a:cc:7c:3e:d4:
         da:90:31:b9:3e:6d:e5:a2:a3:61:37:12:7b:ae:fd:b5:b4:d2:
         e9:60:6c:66:5f:bb:7c:63:0b:e6:f8:a1:bc:91:39:0f:d3:ea:
         89:a1:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----