Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.mft
File:                     1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.mft (raw, json)
Hash identifier:          BYecRIlqBVTyNcZvjQayh5aIUbM796mWCGuk3xVRZ4A=
Subject key identifier:   FE:20:CD:1A:3F:67:62:3E:04:31:EB:66:61:E8:F2:23:00:FB:52:CA
Authority key identifier: F8:E4:84:80:58:90:1D:3F:56:4F:28:09:4F:D5:25:81:BF:16:D6:A4
Certificate issuer:       /CN=f8e4848058901d3f564f28094fd52581bf16d6a4
Certificate serial:       018409361086DD10E83CD74C1ECE0BEADD6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.mft
Manifest number:          0B31
Signing time:             Mon 24 Oct 2022 08:57:28 +0000
Manifest this update:     Mon 24 Oct 2022 08:57:28 +0000
Manifest next update:     Tue 25 Oct 2022 08:57:28 +0000
Files and hashes:         1: 1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.crl (hash: TJNNw51iYfJhocZhq+E+xfL66B5l6Rbm4qp9M8Iwoa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:09:36:10:86:dd:10:e8:3c:d7:4c:1e:ce:0b:ea:dd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e4848058901d3f564f28094fd52581bf16d6a4
        Validity
            Not Before: Oct 24 08:57:28 2022 GMT
            Not After : Oct 25 08:57:28 2022 GMT
        Subject: CN=fe20cd1a3f67623e0431eb6661e8f22300fb52ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:cd:71:77:cc:77:c8:fd:62:85:4e:e0:49:
                    8e:43:93:3d:7f:b9:41:33:90:81:f7:f6:4c:c6:29:
                    1d:09:22:27:34:af:b5:10:af:a3:05:4c:36:b2:ea:
                    26:ac:bb:98:66:e5:dc:0e:fd:f9:7a:24:12:97:d7:
                    29:38:33:36:dd:28:27:19:d1:88:5e:ba:ec:51:c4:
                    f0:7a:a9:f4:e9:74:75:83:4e:98:b5:77:0c:c3:a4:
                    d0:0f:3c:89:29:46:2f:0b:04:d4:62:07:16:be:ec:
                    71:de:d6:bc:36:ed:3d:ae:22:c6:12:83:f0:7c:64:
                    99:9e:2b:35:78:ce:d9:c8:7d:b4:7b:0f:f5:ad:14:
                    5f:1d:19:76:f8:9b:e3:42:08:3d:26:87:60:41:e4:
                    64:02:aa:0a:fb:f4:6d:6c:1a:ca:d2:01:c0:69:e8:
                    64:b2:e5:0b:60:b8:12:81:41:0b:eb:ca:68:d3:f7:
                    c9:70:10:db:68:4f:28:17:17:0b:f6:22:7c:1d:5a:
                    9e:ff:99:6e:7d:e7:32:2b:51:06:fb:a4:78:e9:2c:
                    d6:16:d9:fb:5c:ab:a4:d7:35:c5:66:12:92:1f:ad:
                    eb:40:69:9d:d6:6c:8f:b4:02:5f:6c:8e:0a:a2:ae:
                    da:53:f0:a9:49:98:97:86:78:1b:c4:07:c4:ae:d5:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:CD:1A:3F:67:62:3E:04:31:EB:66:61:E8:F2:23:00:FB:52:CA
            X509v3 Authority Key Identifier:
                keyid:F8:E4:84:80:58:90:1D:3F:56:4F:28:09:4F:D5:25:81:BF:16:D6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:dc:28:cf:7f:8f:dc:39:51:39:13:d2:41:6a:b8:6a:f7:da:
         0c:06:60:ce:30:76:68:96:23:23:fe:10:23:19:bc:fb:53:0e:
         b8:c5:45:e9:6c:97:7f:26:b5:d3:34:e7:98:4b:e3:46:85:cb:
         9b:84:10:9f:d9:16:f4:e2:67:6a:27:08:71:a9:b0:98:aa:e0:
         c1:5c:30:f9:29:e0:c1:b0:0f:95:a2:2f:c5:6a:1f:53:8d:a8:
         5d:de:79:01:c4:ac:2b:fa:f1:e7:43:c7:62:d6:89:b9:96:97:
         b5:84:0a:b8:55:19:26:3a:3d:14:46:66:fd:60:8a:70:6e:52:
         b2:52:00:9b:a4:f3:73:0d:c0:0a:7d:83:d1:d9:37:91:13:b1:
         4d:9b:6d:18:fb:f5:8c:84:5a:c9:3b:8d:72:b7:e4:ce:73:8e:
         b7:19:1f:67:6f:4a:18:4c:be:34:b5:f6:94:ce:52:09:4c:6a:
         35:27:b5:bc:43:5b:4d:ec:82:fc:3a:07:a2:ec:7b:cd:ef:95:
         59:ac:2a:ea:05:9c:71:76:f4:b3:5a:5c:97:91:d9:26:30:22:
         5d:f6:53:88:07:a0:68:78:03:32:b5:b7:cf:43:1a:89:ee:ac:
         50:7a:5c:fb:28:e0:8c:ae:29:64:25:af:2f:ef:5e:d9:a1:9e:
         3c:35:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----