Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6aa226-a64e-48f8-98f8-7a36e7d2df69/1/qVyXyVy-J5bxsM9NTCxifP3iS2E.mft
File:                     qVyXyVy-J5bxsM9NTCxifP3iS2E.mft (raw, json)
Hash identifier:          FdpYBxJWpb5fd7pU6+KIrWRD4eFCnudCqAvBpYDMVP0=
Subject key identifier:   3C:BA:8C:0C:66:B7:EA:DE:61:B9:8C:09:4D:65:FC:97:7C:D3:38:4C
Authority key identifier: A9:5C:97:C9:5C:BE:27:96:F1:B0:CF:4D:4C:2C:62:7C:FD:E2:4B:61
Certificate issuer:       /CN=a95c97c95cbe2796f1b0cf4d4c2c627cfde24b61
Certificate serial:       0186815532B9965F76C54419A9AA239BD355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVyXyVy-J5bxsM9NTCxifP3iS2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6aa226-a64e-48f8-98f8-7a36e7d2df69/1/qVyXyVy-J5bxsM9NTCxifP3iS2E.mft
Manifest number:          0C28
Signing time:             Fri 24 Feb 2023 02:51:29 +0000
Manifest this update:     Fri 24 Feb 2023 02:51:29 +0000
Manifest next update:     Sat 25 Feb 2023 02:51:29 +0000
Files and hashes:         1: qVyXyVy-J5bxsM9NTCxifP3iS2E.crl (hash: +E0zCVlxYphtb4D4YPhvIIo9TYfb6yY5M8xkX2gVz9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:81:55:32:b9:96:5f:76:c5:44:19:a9:aa:23:9b:d3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95c97c95cbe2796f1b0cf4d4c2c627cfde24b61
        Validity
            Not Before: Feb 24 02:51:29 2023 GMT
            Not After : Feb 25 02:51:29 2023 GMT
        Subject: CN=3cba8c0c66b7eade61b98c094d65fc977cd3384c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:a7:b3:97:8b:09:46:dc:60:e3:d9:5e:cc:
                    e6:c0:f8:61:64:da:24:9a:c5:a3:d6:57:e3:d6:42:
                    88:a8:ba:06:e3:e0:cb:de:03:30:50:ef:36:a9:a8:
                    c7:c3:05:75:94:9d:fb:2b:18:3d:fe:5d:74:d7:b0:
                    93:c7:28:ed:0b:4e:e5:91:ed:ee:28:79:79:0f:87:
                    90:0f:bd:b2:da:9b:94:fe:ce:a0:4e:b3:04:7b:e1:
                    be:22:d9:97:a5:4e:7a:e9:e7:19:b4:47:c5:31:20:
                    14:6a:6d:0b:f8:63:a0:72:b8:03:d7:39:0c:cd:48:
                    21:0e:d3:dc:bd:09:24:c0:3d:4a:f0:20:87:77:d5:
                    41:1b:e8:b5:b2:94:47:b5:92:fb:78:d4:01:32:6e:
                    d8:20:a1:f5:32:9a:83:d1:19:15:d6:7a:2f:98:a9:
                    9f:4c:24:de:dc:ea:8f:3c:f7:9c:cc:32:1e:c7:c7:
                    13:0a:1c:a5:ae:a0:e4:96:90:5f:1e:e9:21:3e:c9:
                    48:75:13:5c:d1:a3:01:94:e4:70:ef:01:2f:23:ec:
                    36:e1:ec:b7:ac:61:d0:37:78:ab:5d:2d:54:db:b8:
                    dd:70:c2:21:2a:46:91:7a:d7:05:ae:73:b9:04:42:
                    e7:7b:a6:24:32:a5:a9:30:c1:d9:bd:46:c3:45:10:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BA:8C:0C:66:B7:EA:DE:61:B9:8C:09:4D:65:FC:97:7C:D3:38:4C
            X509v3 Authority Key Identifier:
                keyid:A9:5C:97:C9:5C:BE:27:96:F1:B0:CF:4D:4C:2C:62:7C:FD:E2:4B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVyXyVy-J5bxsM9NTCxifP3iS2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6aa226-a64e-48f8-98f8-7a36e7d2df69/1/qVyXyVy-J5bxsM9NTCxifP3iS2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6aa226-a64e-48f8-98f8-7a36e7d2df69/1/qVyXyVy-J5bxsM9NTCxifP3iS2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:e7:8f:ef:ea:1c:f9:c2:b3:ed:0d:79:7d:60:06:04:7e:
         c5:a1:1e:78:48:ae:81:fa:e9:64:3e:8d:8f:63:81:57:b0:55:
         63:f6:5e:8f:78:02:2d:88:e2:b0:7d:32:af:35:cd:d4:98:3d:
         6b:49:ce:e5:ab:37:91:49:3a:c1:35:a3:69:48:c9:70:ba:30:
         5f:8c:da:ff:fe:ab:b2:f4:1f:fb:3b:85:e7:15:fb:cc:ac:e7:
         93:1a:3a:4e:80:9e:89:e3:84:20:c4:c7:d4:a9:25:54:cd:ca:
         e8:94:4e:9d:56:13:2d:9b:c8:d1:d5:bd:fe:a4:1a:af:f0:c7:
         9b:1b:70:52:ef:2f:1c:d9:d8:8d:ef:7a:51:ae:66:96:43:b9:
         8c:ba:38:4b:ff:cb:da:79:4c:31:d0:0e:c4:b5:2a:2e:59:be:
         ea:2d:8a:8b:96:c0:8d:3a:61:4f:38:91:4c:2e:08:a8:87:44:
         db:00:22:43:31:42:a6:ce:c0:e7:21:17:bc:c4:2d:d8:45:ca:
         46:21:65:04:ed:ec:52:8d:c9:2b:92:f9:ed:5f:0a:58:36:11:
         b3:c6:8c:bf:80:c9:c6:bd:79:6a:58:a7:0c:85:8d:e5:d3:1b:
         8e:5e:4f:d4:31:d0:91:6e:38:4f:f7:be:ba:72:35:15:61:4a:
         f8:ab:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----