Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/0-eIYY3lhDxjDvPOYo2wXzWwscQ.mft
File:                     0-eIYY3lhDxjDvPOYo2wXzWwscQ.mft (raw, json)
Hash identifier:          sQRMT5VmxAJc5A9rUubvp4YjIxiM6fJZMklh/Vx3v0Y=
Subject key identifier:   52:0A:92:4D:8D:84:04:04:C0:C4:67:80:24:FF:2B:78:F2:AA:90:DC
Authority key identifier: D3:E7:88:61:8D:E5:84:3C:63:0E:F3:CE:62:8D:B0:5F:35:B0:B1:C4
Certificate issuer:       /CN=d3e788618de5843c630ef3ce628db05f35b0b1c4
Certificate serial:       06564245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-eIYY3lhDxjDvPOYo2wXzWwscQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/0-eIYY3lhDxjDvPOYo2wXzWwscQ.mft
Manifest number:          084C
Signing time:             Mon 21 Feb 2022 09:26:51 +0000
Manifest this update:     Mon 21 Feb 2022 09:26:51 +0000
Manifest next update:     Tue 22 Feb 2022 09:26:51 +0000
Files and hashes:         1: 0-eIYY3lhDxjDvPOYo2wXzWwscQ.crl (hash: se191sBka9t5AzrHaWIaWJ6soURRIDrrFFErqRFMsB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106316357 (0x6564245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e788618de5843c630ef3ce628db05f35b0b1c4
        Validity
            Not Before: Feb 21 09:26:51 2022 GMT
            Not After : Feb 22 09:26:51 2022 GMT
        Subject: CN=520a924d8d840404c0c4678024ff2b78f2aa90dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:08:ed:a6:46:8d:64:36:6b:38:ba:7f:62:
                    05:9e:d4:a8:04:79:52:ce:e5:b0:ae:be:48:c4:5f:
                    21:0b:8a:5b:8d:a1:81:fd:25:2d:40:6b:60:fa:d7:
                    e2:11:59:15:a0:8b:7c:04:c6:ff:96:07:69:3e:3a:
                    91:8d:b0:c7:cf:f7:b1:44:2f:51:92:1e:77:a1:2b:
                    4e:8c:48:ba:65:02:64:a6:fb:39:a3:f6:35:46:7b:
                    d9:6f:cb:4d:8e:ad:97:c9:ef:07:d3:c8:5a:54:a7:
                    2e:50:5c:1b:27:f2:45:55:1b:ad:87:98:7e:0d:a0:
                    c7:9c:38:cc:11:39:07:83:da:6e:ee:64:21:43:49:
                    73:19:1b:2c:bb:58:5b:56:51:97:fd:cb:40:38:2d:
                    53:c1:07:34:dd:63:96:a8:3f:e6:7f:ee:e0:c2:d1:
                    32:a4:59:27:37:57:dd:cf:88:49:e1:73:96:06:4f:
                    65:20:87:f0:ad:45:9d:00:4b:a3:0e:ab:bf:c4:02:
                    7b:0b:64:18:14:18:91:8b:32:ae:8c:d1:e6:43:7c:
                    f4:2b:67:ec:69:97:a5:c0:a0:5c:92:b0:0f:53:85:
                    f5:45:5c:d4:c9:f7:21:bb:31:97:9c:0c:76:db:48:
                    41:28:7f:c5:83:2f:32:c5:d7:32:c4:04:c6:c4:74:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:92:4D:8D:84:04:04:C0:C4:67:80:24:FF:2B:78:F2:AA:90:DC
            X509v3 Authority Key Identifier:
                keyid:D3:E7:88:61:8D:E5:84:3C:63:0E:F3:CE:62:8D:B0:5F:35:B0:B1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-eIYY3lhDxjDvPOYo2wXzWwscQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/0-eIYY3lhDxjDvPOYo2wXzWwscQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/0-eIYY3lhDxjDvPOYo2wXzWwscQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:89:30:c4:3d:a2:48:54:6a:ef:d5:e7:b0:01:41:ea:d5:1c:
         01:b3:61:9c:76:9e:f5:3a:c9:79:a6:19:ad:9f:78:5a:1d:b1:
         35:f8:ee:d9:d7:8e:e6:7f:15:d1:db:38:ad:60:5e:02:d1:63:
         25:ca:45:5e:22:44:12:d1:32:42:32:82:df:ef:a3:93:4d:d9:
         c0:b3:26:06:7e:c3:04:bb:6b:c0:0c:3b:51:70:63:fd:76:09:
         a7:25:60:5a:26:d2:79:53:0b:b2:01:21:aa:18:20:60:b5:41:
         9e:c8:42:37:92:b4:80:fb:90:23:13:64:89:cd:a0:53:c2:ff:
         2d:67:9e:d4:2d:50:83:86:22:5f:d0:2d:cc:45:ac:39:7e:e5:
         14:ad:aa:04:72:57:db:3e:1b:63:30:40:e5:fd:b3:af:60:6a:
         51:55:22:89:57:f4:a5:ce:83:fc:31:9a:3a:c5:66:9b:1a:5a:
         5c:13:fb:94:c0:57:21:d6:0b:07:e4:85:3b:dc:30:74:d7:72:
         7a:19:32:30:bc:a7:40:da:54:8f:44:fc:95:48:8f:a5:3d:32:
         94:0e:89:60:57:5a:95:de:eb:df:27:de:a7:77:9c:5a:66:43:
         c7:77:c5:04:3e:d8:9f:84:c8:ca:46:7c:c8:e0:41:20:7c:fa:
         4a:13:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----