Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3b9365-28ba-49b1-a18f-3860c188448e/1/nCnONOCZPV64GEbmbvX0Q880uFg.mft
File:                     nCnONOCZPV64GEbmbvX0Q880uFg.mft (raw, json)
Hash identifier:          DnOVx88udZSg3Y1a6/GQOgbmx6VNj3ZD2T72ahy7ZiQ=
Subject key identifier:   22:63:53:F1:D2:C2:AB:9A:B5:C6:2C:25:1E:84:9C:AE:1B:A8:9A:5D
Authority key identifier: 9C:29:CE:34:E0:99:3D:5E:B8:18:46:E6:6E:F5:F4:43:CF:34:B8:58
Certificate issuer:       /CN=9c29ce34e0993d5eb81846e66ef5f443cf34b858
Certificate serial:       01879E1CEB5E73766561584161214B529196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCnONOCZPV64GEbmbvX0Q880uFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3b9365-28ba-49b1-a18f-3860c188448e/1/nCnONOCZPV64GEbmbvX0Q880uFg.mft
Manifest number:          09CC
Signing time:             Thu 20 Apr 2023 10:01:47 +0000
Manifest this update:     Thu 20 Apr 2023 10:01:47 +0000
Manifest next update:     Fri 21 Apr 2023 10:01:47 +0000
Files and hashes:         1: nCnONOCZPV64GEbmbvX0Q880uFg.crl (hash: alSDjKJu4PnhQ/BocHkh4pP12lkOObZbUBDWtsVwBuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9e:1c:eb:5e:73:76:65:61:58:41:61:21:4b:52:91:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c29ce34e0993d5eb81846e66ef5f443cf34b858
        Validity
            Not Before: Apr 20 10:01:47 2023 GMT
            Not After : Apr 21 10:01:47 2023 GMT
        Subject: CN=226353f1d2c2ab9ab5c62c251e849cae1ba89a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:30:fb:81:50:2c:10:42:20:c2:4e:0a:c2:28:
                    d4:bb:d8:e0:6d:d3:03:24:13:68:bf:f9:2c:e3:ef:
                    74:8a:e5:ac:72:3e:e4:97:66:a0:26:30:36:fc:a6:
                    d1:f1:3f:e3:f5:50:d6:4c:89:56:36:aa:36:90:1e:
                    52:9e:64:da:29:a2:69:c1:04:04:9c:4c:84:c6:ce:
                    db:93:ee:48:ae:b7:fa:5b:7e:b3:ed:35:2c:9c:eb:
                    18:14:5b:06:34:5b:6a:51:c2:57:86:2e:89:9a:1a:
                    1f:75:03:6c:05:c5:7a:3e:d8:5b:c0:50:d8:f1:68:
                    3d:3a:c4:48:9d:e7:e3:93:a5:fe:53:64:dc:f2:08:
                    1b:35:99:68:20:52:8d:b6:87:a5:aa:01:f2:70:f9:
                    1d:f3:4b:45:0a:de:51:ab:10:52:59:d8:8e:47:84:
                    6f:97:33:65:6c:2f:99:1a:7a:9e:4c:59:20:04:ce:
                    2b:c6:fe:19:2d:f2:ae:e1:44:d5:f5:09:b4:e5:31:
                    c6:c7:66:f8:c0:d5:78:2d:6e:4a:d9:fe:a5:57:0d:
                    e0:e0:f1:49:20:d5:dc:48:f9:d5:1f:7f:4f:7e:98:
                    4d:cf:bd:e0:44:f9:af:7e:2b:df:87:a7:c4:36:15:
                    39:c8:46:f1:e4:7c:43:cd:9d:da:19:f4:97:05:78:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:63:53:F1:D2:C2:AB:9A:B5:C6:2C:25:1E:84:9C:AE:1B:A8:9A:5D
            X509v3 Authority Key Identifier:
                keyid:9C:29:CE:34:E0:99:3D:5E:B8:18:46:E6:6E:F5:F4:43:CF:34:B8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCnONOCZPV64GEbmbvX0Q880uFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3b9365-28ba-49b1-a18f-3860c188448e/1/nCnONOCZPV64GEbmbvX0Q880uFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3b9365-28ba-49b1-a18f-3860c188448e/1/nCnONOCZPV64GEbmbvX0Q880uFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:93:ca:84:c1:b1:ce:13:cc:26:e4:c2:cd:e6:e8:b9:21:60:
         58:8e:4d:b9:41:fe:6e:23:58:1c:48:59:55:11:f3:bb:a0:5d:
         6d:12:1e:14:39:5b:4f:df:c8:7d:f5:4e:d4:e9:91:ab:fb:28:
         ad:e2:84:dc:f9:ad:4a:65:db:8c:79:91:de:49:f3:bd:56:09:
         e7:cf:61:ce:4f:f6:c4:e3:aa:9d:08:e1:6b:33:ef:05:ed:2a:
         4c:ae:6d:b0:84:9b:76:fd:91:ff:76:10:62:8c:b8:0b:cd:bf:
         84:93:fd:4a:0b:72:95:fb:e6:c9:81:34:db:b4:e4:24:1d:c5:
         68:22:7b:c0:34:65:7b:09:a5:ad:2e:a4:8d:54:2a:ae:1c:d9:
         18:90:65:92:50:f8:43:69:cd:06:a9:e3:da:fd:f3:23:c7:94:
         52:ef:f6:4c:2e:02:9a:9d:da:84:91:7c:84:a5:23:fc:ee:d3:
         7c:62:c9:a8:2e:0e:15:1e:e2:1d:bb:e2:8c:51:4a:cd:92:f6:
         80:b6:8e:f7:b0:99:5f:9b:2b:fc:cd:f8:7a:56:fa:ab:22:d5:
         26:6e:5f:66:ae:5e:5c:7e:22:da:2b:b7:85:cf:16:17:e3:0e:
         23:25:82:69:01:fe:53:66:26:01:8d:31:f5:6b:71:8c:8c:fa:
         00:43:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----