Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/Sg6LtrawtvEp6_gTj51i-gnfIG8.mft
File:                     Sg6LtrawtvEp6_gTj51i-gnfIG8.mft (raw, json)
Hash identifier:          FvOPtWRx7RDTguCEJL372OIN9s5rCu/h03D28PdYY6s=
Subject key identifier:   DF:CB:14:58:BB:18:FD:37:BE:CB:D9:12:CB:55:BD:8B:33:F7:DE:36
Authority key identifier: 4A:0E:8B:B6:B6:B0:B6:F1:29:EB:F8:13:8F:9D:62:FA:09:DF:20:6F
Certificate issuer:       /CN=4a0e8bb6b6b0b6f129ebf8138f9d62fa09df206f
Certificate serial:       02B8C9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sg6LtrawtvEp6_gTj51i-gnfIG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/Sg6LtrawtvEp6_gTj51i-gnfIG8.mft
Manifest number:          0391
Signing time:             Thu 24 Mar 2022 06:56:11 +0000
Manifest this update:     Thu 24 Mar 2022 06:56:11 +0000
Manifest next update:     Fri 25 Mar 2022 06:56:11 +0000
Files and hashes:         1: Sg6LtrawtvEp6_gTj51i-gnfIG8.crl (hash: jcfRoD5TT4xtiNBm8OjNbb/+VPh/L8Y9nYPGGEVjxv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45664716 (0x2b8c9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a0e8bb6b6b0b6f129ebf8138f9d62fa09df206f
        Validity
            Not Before: Mar 24 06:56:11 2022 GMT
            Not After : Mar 25 06:56:11 2022 GMT
        Subject: CN=dfcb1458bb18fd37becbd912cb55bd8b33f7de36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:8c:5d:72:26:a6:b6:7b:28:87:be:24:07:
                    b0:40:7d:51:ca:df:4c:22:b2:b0:cc:56:d2:90:89:
                    0e:58:d4:58:f0:51:ba:9c:dd:4b:1f:3c:08:d6:ef:
                    33:78:cb:59:69:fa:ed:60:b2:7b:f7:c9:86:86:50:
                    1c:d7:f4:6e:df:8e:53:48:2f:88:ea:77:2f:8f:fa:
                    80:59:2d:5b:04:f2:6a:90:3a:cc:fa:65:39:b2:1a:
                    2c:60:d3:74:b8:c2:4c:fd:a7:ab:98:89:a9:1b:bb:
                    61:7d:08:c0:a2:40:f5:b7:4b:dc:8b:b1:d5:6c:79:
                    3a:99:fc:4e:85:69:fb:51:e6:14:38:72:d7:83:a1:
                    5d:ba:c1:88:17:19:9e:61:02:03:2f:ef:11:62:c0:
                    ce:ae:3a:84:0b:b3:90:a9:73:c0:c6:e8:96:f5:23:
                    ae:fa:bf:24:de:ba:40:de:0b:a3:4c:17:ac:86:82:
                    c6:38:58:3b:0c:13:41:bf:5e:93:df:3b:e3:fe:d0:
                    c8:2b:08:e7:08:a1:6d:2e:8f:3a:d9:16:1d:a4:8e:
                    16:46:9b:33:20:8b:78:22:b4:d6:59:cf:19:13:f0:
                    c1:80:2b:9d:e4:43:55:6b:37:3c:0e:f7:39:2e:a6:
                    ac:69:31:81:97:4a:b8:3d:da:be:89:7f:86:52:83:
                    42:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CB:14:58:BB:18:FD:37:BE:CB:D9:12:CB:55:BD:8B:33:F7:DE:36
            X509v3 Authority Key Identifier:
                keyid:4A:0E:8B:B6:B6:B0:B6:F1:29:EB:F8:13:8F:9D:62:FA:09:DF:20:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sg6LtrawtvEp6_gTj51i-gnfIG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/Sg6LtrawtvEp6_gTj51i-gnfIG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/Sg6LtrawtvEp6_gTj51i-gnfIG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:46:0c:75:68:7f:4d:58:0c:d8:d6:a1:b9:ea:3b:be:ba:2f:
         29:85:8d:0d:3e:8a:95:77:e7:ba:dc:d0:c9:d8:e3:ed:ab:8c:
         e5:07:6e:75:61:82:99:08:ab:14:41:2b:fb:71:0f:31:0d:03:
         4b:a4:a5:5e:a1:bc:75:c8:73:b9:7a:ca:78:58:f0:c3:f4:aa:
         77:72:5a:1c:a8:33:0f:95:aa:05:03:32:24:e7:23:a0:57:13:
         16:b9:26:89:f9:62:7c:95:57:33:8d:24:d8:72:3e:c4:22:60:
         61:7f:7e:69:2c:b7:38:0a:7c:c2:d1:f7:87:77:ed:d5:09:75:
         94:3b:5a:dd:c9:bb:bf:77:bf:2f:aa:b8:c5:60:3a:d3:97:6e:
         f3:46:d1:cb:aa:bc:43:b3:d5:30:dd:5b:f3:6f:20:ef:73:6c:
         59:a0:9f:c9:3c:fd:f9:60:71:b9:6f:38:78:02:e9:21:01:14:
         0e:98:b5:27:07:04:79:a6:90:84:69:33:19:76:f2:d5:7b:38:
         86:1f:b7:18:dd:30:e0:bf:df:50:6d:ac:db:19:7b:97:1d:a2:
         16:ac:f6:35:52:d9:b7:4a:ce:82:2b:31:64:2b:40:3c:ab:0c:
         68:dd:00:44:bd:ae:e6:16:66:b1:b3:b1:5f:ad:87:f2:09:b9:
         ed:d4:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----