Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/253fba-9205-4956-b0f7-13c9965e80aa/1/7fiNZSS1B8DLIeYSCwFYYnb6KAo.mft
File:                     7fiNZSS1B8DLIeYSCwFYYnb6KAo.mft (raw, json)
Hash identifier:          ADX9s8UMNGc0V6elsxzzOhvcDTz7AMW9/OIfEGudRlY=
Subject key identifier:   E6:D0:E8:C4:92:27:10:A3:99:8F:96:4C:7B:A0:95:52:8C:2B:E5:13
Authority key identifier: ED:F8:8D:65:24:B5:07:C0:CB:21:E6:12:0B:01:58:62:76:FA:28:0A
Certificate issuer:       /CN=edf88d6524b507c0cb21e6120b01586276fa280a
Certificate serial:       0184C7AF5AC5FB00E435B24627009305F1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fiNZSS1B8DLIeYSCwFYYnb6KAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/253fba-9205-4956-b0f7-13c9965e80aa/1/7fiNZSS1B8DLIeYSCwFYYnb6KAo.mft
Manifest number:          0475
Signing time:             Wed 30 Nov 2022 08:37:48 +0000
Manifest this update:     Wed 30 Nov 2022 08:37:48 +0000
Manifest next update:     Thu 01 Dec 2022 08:37:48 +0000
Files and hashes:         1: 7fiNZSS1B8DLIeYSCwFYYnb6KAo.crl (hash: DWYihHAc93HpeYzYwpvJcATl+BkPUrl1ltaHD7vfj5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c7:af:5a:c5:fb:00:e4:35:b2:46:27:00:93:05:f1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf88d6524b507c0cb21e6120b01586276fa280a
        Validity
            Not Before: Nov 30 08:37:48 2022 GMT
            Not After : Dec  1 08:37:48 2022 GMT
        Subject: CN=e6d0e8c4922710a3998f964c7ba095528c2be513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:f6:f6:15:88:2a:5a:c6:99:79:44:85:c3:
                    f5:e6:42:45:d1:a1:68:56:c1:cb:67:96:70:f6:c7:
                    fa:f7:cf:8a:da:59:80:ad:47:db:69:08:b3:de:69:
                    96:c9:30:39:37:8b:03:bc:63:f7:c5:6e:4d:e5:b2:
                    1b:a1:fc:f5:10:04:78:26:73:15:3e:28:96:18:bf:
                    30:90:e8:0f:a5:2d:a9:bb:01:19:68:c1:4e:af:00:
                    09:bf:4e:f3:6a:9f:fa:27:a3:f1:2a:bd:90:85:dc:
                    9b:b6:6f:04:0e:1e:88:3d:f7:e7:9f:e0:40:be:03:
                    6b:69:c5:4e:12:0d:71:22:98:3d:45:09:58:e8:40:
                    16:07:8c:bc:2d:bb:38:c3:a1:70:6b:41:c5:0c:48:
                    32:9d:84:7f:e2:13:f4:e8:be:55:d0:68:bd:34:cb:
                    b7:13:ae:df:cf:e6:49:de:13:b9:45:0c:f0:e1:3d:
                    ce:c9:88:30:65:be:89:f7:59:75:a6:3a:63:a9:d6:
                    07:5b:53:40:a8:01:3c:36:1f:24:28:d2:89:54:23:
                    ef:30:de:f4:39:62:56:a5:ab:2b:8b:4d:89:98:22:
                    33:d2:5d:40:be:cb:3f:ac:de:ed:51:56:43:da:ad:
                    6e:76:c6:26:d3:73:61:c3:fe:3e:fb:34:01:00:d9:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D0:E8:C4:92:27:10:A3:99:8F:96:4C:7B:A0:95:52:8C:2B:E5:13
            X509v3 Authority Key Identifier:
                keyid:ED:F8:8D:65:24:B5:07:C0:CB:21:E6:12:0B:01:58:62:76:FA:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fiNZSS1B8DLIeYSCwFYYnb6KAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/253fba-9205-4956-b0f7-13c9965e80aa/1/7fiNZSS1B8DLIeYSCwFYYnb6KAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/253fba-9205-4956-b0f7-13c9965e80aa/1/7fiNZSS1B8DLIeYSCwFYYnb6KAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:24:0a:da:2b:84:99:b4:82:7c:38:c2:b2:68:7d:fe:1e:ca:
         98:4f:1d:e5:42:91:28:c6:ed:79:3f:13:5f:c5:ca:e6:75:72:
         c9:ad:7b:ac:d6:72:13:ad:e7:a2:be:b4:5a:bb:7b:bb:0f:11:
         c5:81:fe:ab:f3:f1:e1:e7:91:62:f2:e1:08:b8:33:b2:30:04:
         3c:7c:a5:1c:ea:21:9b:e5:f2:9d:b2:ce:94:2a:3f:a0:1d:cb:
         da:cf:9e:73:7f:cf:9c:09:f4:df:68:1c:9c:be:9b:c1:07:91:
         45:6f:34:64:c9:96:78:fe:5a:62:01:c8:1a:b6:ce:fe:44:f7:
         5c:33:c5:44:50:9b:e9:43:00:22:ed:32:f3:5b:5c:29:f1:fb:
         4d:3c:06:14:31:01:b0:e4:9a:32:35:bc:2c:53:04:b3:e6:73:
         32:64:11:dc:47:b6:75:fd:2e:33:d9:0b:26:8f:71:25:aa:77:
         95:31:54:4a:10:d2:a9:31:6f:6d:fa:78:de:d4:47:99:11:80:
         eb:48:28:96:e9:47:8f:e5:b6:e5:0a:e4:38:fe:29:35:a3:4a:
         bb:58:53:0d:5b:72:2b:8b:a8:bb:ac:45:1d:2e:68:90:f6:73:
         4e:62:40:d8:48:78:a3:de:7a:bd:c3:b0:dd:34:60:15:bc:2e:
         85:fc:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----