Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/4BPnhTjMxZ0cWNigx-BQhTkWxeg.mft
File:                     4BPnhTjMxZ0cWNigx-BQhTkWxeg.mft (raw, json)
Hash identifier:          +e9AShh9KRZnHT+s2FvzADuYerzFiIsD/hFfPkviFbw=
Subject key identifier:   E5:7A:6A:5C:DA:31:2C:93:A6:24:C1:9F:F6:F0:2B:3F:C1:7F:24:B7
Authority key identifier: E0:13:E7:85:38:CC:C5:9D:1C:58:D8:A0:C7:E0:50:85:39:16:C5:E8
Certificate issuer:       /CN=e013e78538ccc59d1c58d8a0c7e050853916c5e8
Certificate serial:       03B96905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BPnhTjMxZ0cWNigx-BQhTkWxeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/4BPnhTjMxZ0cWNigx-BQhTkWxeg.mft
Manifest number:          04DD
Signing time:             Fri 04 Feb 2022 11:35:06 +0000
Manifest this update:     Fri 04 Feb 2022 11:35:06 +0000
Manifest next update:     Sat 05 Feb 2022 11:35:06 +0000
Files and hashes:         1: 4BPnhTjMxZ0cWNigx-BQhTkWxeg.crl (hash: dZAYSWTXcnaXmpdvf2qDFFtYTDclzZkZNIAaOG79CzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62482693 (0x3b96905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e013e78538ccc59d1c58d8a0c7e050853916c5e8
        Validity
            Not Before: Feb  4 11:35:06 2022 GMT
            Not After : Feb  5 11:35:06 2022 GMT
        Subject: CN=e57a6a5cda312c93a624c19ff6f02b3fc17f24b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:ac:c0:1f:25:ba:a2:43:02:2d:8f:a9:27:
                    22:9c:f1:a6:2f:3c:7b:f7:82:5b:40:81:ce:46:28:
                    74:6d:c8:03:1f:b9:c8:b0:21:0d:5b:c6:83:c9:35:
                    78:58:17:ae:30:44:69:cb:f5:bf:d5:7d:f8:0b:38:
                    72:ac:5b:36:27:8d:da:65:1e:d7:6a:a5:a6:02:48:
                    50:06:c4:5c:5d:9e:b4:8e:0a:0a:3d:8e:5b:de:31:
                    a4:85:b5:c8:f7:b8:52:0b:34:6e:46:a3:6a:4e:27:
                    92:07:08:9f:ad:99:1e:94:3b:32:46:2b:3e:01:4a:
                    f1:54:36:ae:6f:53:12:b8:82:5e:cb:65:05:e6:f3:
                    f3:26:bb:4a:da:9f:c9:dd:96:30:4d:75:fa:5e:c7:
                    51:90:22:66:ef:62:27:fa:e1:ec:15:ca:b8:4b:4c:
                    1b:9c:5b:47:28:4b:b7:c0:16:63:17:47:c6:e5:c1:
                    d2:a7:f8:a7:3b:42:0e:3c:ae:0f:6f:86:c3:e5:e6:
                    5f:39:06:02:f2:92:17:e7:f5:18:16:b9:72:f9:64:
                    33:e9:d7:7e:64:1d:38:b5:6a:a9:5c:d9:53:a4:53:
                    a6:62:fb:cb:8f:90:78:05:b2:92:96:f6:de:87:fd:
                    c0:61:7c:2f:b7:f3:5e:fd:04:28:4b:4a:90:0d:8c:
                    ce:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7A:6A:5C:DA:31:2C:93:A6:24:C1:9F:F6:F0:2B:3F:C1:7F:24:B7
            X509v3 Authority Key Identifier:
                keyid:E0:13:E7:85:38:CC:C5:9D:1C:58:D8:A0:C7:E0:50:85:39:16:C5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BPnhTjMxZ0cWNigx-BQhTkWxeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/4BPnhTjMxZ0cWNigx-BQhTkWxeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fd50f7-1a31-4d42-9cf1-53776878bbfd/1/4BPnhTjMxZ0cWNigx-BQhTkWxeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:b2:f6:aa:65:b0:00:1c:97:ba:a8:79:bc:dc:be:cb:3a:
         6f:7e:97:3d:96:4a:8c:fd:7b:f8:02:49:7e:af:d5:5e:df:7a:
         48:6d:44:35:ff:55:99:ce:71:de:65:99:cc:34:a4:ef:4f:f0:
         7d:6b:ef:69:6b:93:2f:a0:96:3d:71:9c:6b:5d:df:cc:cd:38:
         d3:83:00:44:b2:42:d4:47:f5:c6:b3:e0:bb:21:c7:e2:8a:a9:
         d0:b4:47:ba:ff:53:73:ab:29:b4:14:7f:9a:20:e3:e2:1b:c0:
         01:f4:aa:95:a4:f9:94:6c:74:58:e6:0a:c3:3b:a5:74:44:af:
         5f:4c:e0:78:39:2f:10:9a:17:86:b7:7a:64:c3:03:e1:98:ac:
         5b:20:af:0c:13:b1:43:0c:67:85:22:3d:72:ab:a5:bb:6e:e8:
         4c:e1:43:e7:8f:98:0e:8f:55:fb:a1:85:13:5d:25:3e:d7:6f:
         2e:09:cb:8f:3d:27:90:c9:b4:10:65:32:50:44:66:74:1d:1f:
         0f:bf:fa:55:7d:1e:48:ab:e0:fd:89:bd:db:26:4a:b6:aa:3a:
         96:01:82:ea:19:20:83:53:ab:35:f5:76:59:c2:1e:dc:3a:c8:
         56:52:32:51:8c:8a:eb:e9:d1:01:d7:8b:b2:ec:3c:e8:ac:a0:
         5a:02:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----