Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ac66a7-83bc-43a7-b9c2-dc1f78071472/1/p0hjKq_pJsCeVLs1rK5QC35MpEI.mft
File:                     p0hjKq_pJsCeVLs1rK5QC35MpEI.mft (raw, json)
Hash identifier:          QfrpssqJRW4s4w47Vz4mb2TLP/Md7gN18PdcuTpnVso=
Subject key identifier:   79:11:3A:D4:F0:91:51:FE:0D:5E:1E:8D:7B:FE:BE:32:E6:18:1E:5C
Authority key identifier: A7:48:63:2A:AF:E9:26:C0:9E:54:BB:35:AC:AE:50:0B:7E:4C:A4:42
Certificate issuer:       /CN=a748632aafe926c09e54bb35acae500b7e4ca442
Certificate serial:       018533E9E8BDE2E2151F3CE28F8F7660984F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0hjKq_pJsCeVLs1rK5QC35MpEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ac66a7-83bc-43a7-b9c2-dc1f78071472/1/p0hjKq_pJsCeVLs1rK5QC35MpEI.mft
Manifest number:          06
Signing time:             Wed 21 Dec 2022 09:00:45 +0000
Manifest this update:     Wed 21 Dec 2022 09:00:45 +0000
Manifest next update:     Thu 22 Dec 2022 09:00:45 +0000
Files and hashes:         1: p0hjKq_pJsCeVLs1rK5QC35MpEI.crl (hash: rCNtxGFj7f0mUozcwt3NLIf6r2tYqnYqGKi4acUj5WQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:33:e9:e8:bd:e2:e2:15:1f:3c:e2:8f:8f:76:60:98:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748632aafe926c09e54bb35acae500b7e4ca442
        Validity
            Not Before: Dec 21 09:00:45 2022 GMT
            Not After : Dec 22 09:00:45 2022 GMT
        Subject: CN=79113ad4f09151fe0d5e1e8d7bfebe32e6181e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:99:6b:19:44:8f:6c:06:9d:1d:20:70:6e:
                    33:4d:8c:c8:e7:df:8e:bf:5b:e9:8e:33:49:c2:5a:
                    aa:98:93:6d:1d:6e:f7:59:d3:7c:8e:a3:ca:da:44:
                    6f:e3:39:5e:6f:32:76:6d:7a:c1:1d:37:21:6b:8f:
                    75:b7:b2:b6:4d:f3:67:61:d3:eb:f3:d4:7e:ca:26:
                    98:8b:08:91:f9:c5:52:46:cd:c9:fa:de:bc:a3:6e:
                    a1:28:2b:69:55:ec:70:9b:a5:e1:0e:06:46:fc:ab:
                    8d:20:c7:ed:0b:eb:47:56:48:4c:fe:ce:bc:34:eb:
                    c4:f5:e1:fd:e3:ec:7e:9f:ca:63:5e:c8:67:bb:3e:
                    8d:af:41:a7:df:94:c9:e6:4d:35:05:5d:bf:32:b9:
                    bd:d4:4b:d6:bd:17:c4:e4:36:89:fb:ea:df:86:d9:
                    7b:76:18:ed:e2:ad:1c:f9:84:d0:79:41:62:ac:53:
                    d9:c1:42:99:a7:6c:9a:66:50:68:67:5e:dd:9f:71:
                    d6:45:98:1e:51:ac:83:16:8d:db:e5:cb:09:6b:8b:
                    4e:4d:50:31:d8:b4:3e:ea:ce:ea:fa:24:7b:03:87:
                    47:18:bf:39:38:16:5a:08:16:60:da:0a:2f:ef:60:
                    05:78:94:0b:89:a2:b7:3f:f9:86:c1:40:13:45:85:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:3A:D4:F0:91:51:FE:0D:5E:1E:8D:7B:FE:BE:32:E6:18:1E:5C
            X509v3 Authority Key Identifier:
                keyid:A7:48:63:2A:AF:E9:26:C0:9E:54:BB:35:AC:AE:50:0B:7E:4C:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0hjKq_pJsCeVLs1rK5QC35MpEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ac66a7-83bc-43a7-b9c2-dc1f78071472/1/p0hjKq_pJsCeVLs1rK5QC35MpEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ac66a7-83bc-43a7-b9c2-dc1f78071472/1/p0hjKq_pJsCeVLs1rK5QC35MpEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:13:66:3c:71:c1:0c:dc:d6:73:28:eb:ee:64:86:68:60:e1:
         72:8e:3c:63:ad:8f:a9:fb:20:e5:33:44:77:1f:6a:74:6d:a3:
         16:e8:a2:91:92:1a:73:27:60:33:1e:62:a8:6d:03:da:79:ca:
         52:6a:6a:e8:a6:e5:2f:ee:92:d3:68:7a:d4:09:6b:0d:b6:8d:
         a2:64:49:96:29:97:72:5b:67:ac:4b:57:fb:36:f0:00:0e:8a:
         4b:f9:b9:d0:df:83:6d:e4:66:59:bb:f8:f6:9e:da:e7:f4:27:
         9c:cd:ee:6f:a8:6e:60:fc:74:01:52:f6:40:fb:8e:9d:e8:4b:
         46:53:90:8d:83:a4:d5:43:23:fc:54:ab:7b:23:c1:db:c7:6f:
         31:70:d7:13:e7:e1:dd:72:8f:9d:23:c1:a1:ab:53:8d:19:e4:
         75:c8:f3:a7:f8:65:36:8f:c8:26:8e:aa:12:a2:c4:60:67:9f:
         0e:29:14:10:47:06:b2:e7:2d:e2:df:d5:31:47:5a:39:e5:fa:
         f7:30:b1:f8:3b:49:35:f9:48:91:a8:cd:9a:24:46:f3:3d:1c:
         8b:f8:f3:15:80:e9:7f:f3:5f:36:e1:c9:cc:6c:ba:f2:28:58:
         d2:04:6c:3a:b4:a7:7b:90:a8:ca:d7:64:fe:ff:77:a0:18:fb:
         25:29:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----