Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/df6e61-0812-4e85-b25e-f52d3caed011/1/dkyHgULC8W9BKSpijiS-TZVRdAk.mft
File:                     dkyHgULC8W9BKSpijiS-TZVRdAk.mft (raw, json)
Hash identifier:          TifNwzXH5Ie2/vd26Gnpyr7mt2w4vIuMyxnlQNWX9G8=
Subject key identifier:   64:C2:18:92:CB:64:E3:7D:A8:48:64:FC:4F:37:7F:22:B1:33:92:28
Authority key identifier: 76:4C:87:81:42:C2:F1:6F:41:29:2A:62:8E:24:BE:4D:95:51:74:09
Certificate issuer:       /CN=764c878142c2f16f41292a628e24be4d95517409
Certificate serial:       05BB9706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkyHgULC8W9BKSpijiS-TZVRdAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/df6e61-0812-4e85-b25e-f52d3caed011/1/dkyHgULC8W9BKSpijiS-TZVRdAk.mft
Manifest number:          077F
Signing time:             Wed 02 Feb 2022 16:05:07 +0000
Manifest this update:     Wed 02 Feb 2022 16:05:07 +0000
Manifest next update:     Thu 03 Feb 2022 16:05:07 +0000
Files and hashes:         1: dkyHgULC8W9BKSpijiS-TZVRdAk.crl (hash: Ha080W/TFdZxQAx+GFWf9RNnu7I7EnZ9Tm2gOwpsM+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96179974 (0x5bb9706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764c878142c2f16f41292a628e24be4d95517409
        Validity
            Not Before: Feb  2 16:05:07 2022 GMT
            Not After : Feb  3 16:05:07 2022 GMT
        Subject: CN=64c21892cb64e37da84864fc4f377f22b1339228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:21:65:a9:7b:06:b8:ca:e0:fc:35:83:8f:
                    0e:5b:6d:cd:39:57:72:01:4b:ae:9d:9a:4a:d7:1a:
                    e8:3b:f2:ab:bc:af:f7:45:99:af:97:e9:30:d8:69:
                    ec:66:f4:29:8a:ab:b1:13:f0:5a:ec:2d:8e:a1:fe:
                    3d:ab:b5:01:32:91:85:7a:6d:40:b4:dc:29:af:a0:
                    c5:57:c0:77:10:e0:ec:d2:9a:ac:da:97:f8:4a:75:
                    52:33:30:f5:60:75:77:48:9e:19:1d:91:4d:34:56:
                    6a:f2:9c:8b:71:b0:85:f1:ce:7d:a9:78:c0:fa:52:
                    e9:0f:00:3a:6d:73:fa:b8:a2:b7:51:6b:a5:6f:19:
                    64:f1:bc:b7:1c:e9:2c:bd:31:c1:0c:15:12:a0:be:
                    06:fe:2f:19:ce:65:45:ca:e4:c3:51:28:e0:6b:47:
                    ba:15:11:7f:ee:5a:ca:93:1f:a0:13:5a:3a:1b:e2:
                    db:ae:25:d3:2f:ff:bf:7d:0f:c6:22:e1:fb:c5:a0:
                    b6:b0:e3:b1:8e:1b:13:fe:89:02:a5:78:e2:fa:a4:
                    63:3e:5e:88:7c:6f:db:fb:98:8e:a1:4b:66:62:81:
                    be:71:5a:6a:7a:2c:b4:a4:bb:f2:e5:74:32:93:3d:
                    1a:2c:de:8d:e2:16:03:13:ab:e6:1d:3b:da:64:d6:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C2:18:92:CB:64:E3:7D:A8:48:64:FC:4F:37:7F:22:B1:33:92:28
            X509v3 Authority Key Identifier:
                keyid:76:4C:87:81:42:C2:F1:6F:41:29:2A:62:8E:24:BE:4D:95:51:74:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyHgULC8W9BKSpijiS-TZVRdAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/df6e61-0812-4e85-b25e-f52d3caed011/1/dkyHgULC8W9BKSpijiS-TZVRdAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/df6e61-0812-4e85-b25e-f52d3caed011/1/dkyHgULC8W9BKSpijiS-TZVRdAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a2:78:b0:20:8a:af:50:1b:0c:7f:b2:91:31:6c:73:72:01:
         e9:e1:93:3c:08:ec:fa:d8:61:f7:da:60:f2:63:50:86:4d:ba:
         cf:5b:d5:0d:62:9a:ce:6d:a2:95:1e:55:38:54:55:02:dd:bd:
         5f:e5:f8:cd:08:30:45:77:61:8c:c8:38:be:63:c4:43:b5:d7:
         8c:d8:84:a6:af:4d:7b:d4:7f:ae:8b:70:d6:f0:6f:2a:82:f8:
         38:4c:a7:6c:cf:63:95:b2:94:09:ce:fe:24:e7:2e:d3:88:e5:
         f3:e3:4a:90:4b:5b:35:ee:c5:a6:5f:78:22:7d:6c:43:1f:0c:
         c7:5d:33:f3:8f:a5:1d:44:6a:d1:a4:73:0a:b7:75:b4:f0:39:
         68:57:32:69:35:5b:61:4e:d5:1f:13:76:84:55:7b:0d:30:2d:
         42:38:7c:5f:9a:77:3f:ef:4a:d5:92:02:f9:df:a5:8b:39:d3:
         ff:62:51:9f:d2:11:3e:86:a1:57:2e:73:f4:c7:84:50:be:22:
         c8:7a:22:59:fd:87:15:de:6d:81:c3:08:49:0d:d5:78:50:d2:
         64:97:c9:07:7a:d6:08:3c:12:ec:bf:2f:ae:b7:a2:73:f3:c3:
         e2:a0:f2:06:7d:1b:bb:cf:4a:87:ab:e3:44:94:69:bc:51:5b:
         ae:06:d8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----