Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.mft
File:                     7JBVnQkwTyLR1CwsyRiIBc_10wY.mft (raw, json)
Hash identifier:          n0IwwhtWKLyIhl8UB35e6uMRBMbrYmF51iCQgu0hdlM=
Subject key identifier:   32:C7:BB:D8:9A:CD:D2:4C:3F:0E:1D:08:5E:DD:00:79:46:89:93:19
Authority key identifier: EC:90:55:9D:09:30:4F:22:D1:D4:2C:2C:C9:18:88:05:CF:F5:D3:06
Certificate issuer:       /CN=ec90559d09304f22d1d42c2cc9188805cff5d306
Certificate serial:       01870C2BB25BD1E09459FD3D8BEC3DDD61AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JBVnQkwTyLR1CwsyRiIBc_10wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.mft
Manifest number:          04F4
Signing time:             Thu 23 Mar 2023 01:53:22 +0000
Manifest this update:     Thu 23 Mar 2023 01:53:22 +0000
Manifest next update:     Fri 24 Mar 2023 01:53:22 +0000
Files and hashes:         1: 7JBVnQkwTyLR1CwsyRiIBc_10wY.crl (hash: 6FEmeAVeYtIG9GO7yYG5/WwQHWfcbB6s3BxrP3OaVxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0c:2b:b2:5b:d1:e0:94:59:fd:3d:8b:ec:3d:dd:61:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec90559d09304f22d1d42c2cc9188805cff5d306
        Validity
            Not Before: Mar 23 01:53:22 2023 GMT
            Not After : Mar 24 01:53:22 2023 GMT
        Subject: CN=32c7bbd89acdd24c3f0e1d085edd007946899319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:0d:fb:24:1b:3f:8a:95:e5:12:90:11:8c:
                    69:2a:50:a1:15:db:84:44:52:67:6b:30:45:82:50:
                    b0:c0:40:13:a9:c1:23:a8:78:78:ff:88:b7:2d:24:
                    57:29:98:7c:d7:59:b1:df:40:43:3c:4d:91:f7:95:
                    f0:6f:e8:e8:33:b5:c8:7d:bd:9e:63:7d:86:d3:e4:
                    c7:6c:ec:3e:00:4e:37:55:49:42:1a:70:0f:0a:7e:
                    94:ec:1a:e4:d4:fb:a3:78:9c:a3:de:2f:c1:54:56:
                    9d:af:55:e2:82:64:14:36:f2:11:48:2a:d4:d7:2f:
                    d4:6f:f8:cf:8b:83:26:e6:0a:f8:73:5f:4c:c7:81:
                    b0:5c:87:4b:be:a1:64:e0:6c:8c:11:83:e6:49:94:
                    12:b9:b0:87:bc:cc:bb:2b:91:65:06:61:8b:9a:b7:
                    95:89:42:d7:68:4f:47:74:df:51:68:05:97:10:9b:
                    5e:97:d3:18:1c:50:ef:60:5f:1f:f8:9d:37:cc:44:
                    39:5c:89:6d:65:f9:e9:f3:d2:13:72:76:c7:37:bc:
                    83:b8:b0:93:ce:da:b0:4f:06:66:3d:91:b5:f8:29:
                    ee:76:de:f7:56:9d:08:e5:73:0b:43:f6:81:a2:d9:
                    cb:ee:0f:59:67:4a:70:d1:20:4f:ae:6d:02:3e:72:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C7:BB:D8:9A:CD:D2:4C:3F:0E:1D:08:5E:DD:00:79:46:89:93:19
            X509v3 Authority Key Identifier:
                keyid:EC:90:55:9D:09:30:4F:22:D1:D4:2C:2C:C9:18:88:05:CF:F5:D3:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JBVnQkwTyLR1CwsyRiIBc_10wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:b2:bb:b3:33:6d:f7:14:30:c0:b9:97:7e:ca:6e:17:05:
         92:40:df:7b:16:b8:4a:11:af:e4:dd:ce:0a:61:5e:a2:f2:37:
         5a:1d:aa:b3:74:1d:f2:3a:d3:1b:c5:22:0f:e6:f0:ad:20:65:
         49:19:fc:f4:7e:d8:5d:c2:5b:e4:a2:ed:6a:c1:2f:87:0d:57:
         ee:fb:37:9e:8a:61:9f:ad:cf:8f:ed:7c:fb:57:4e:6c:94:7f:
         0c:ad:ca:a0:c0:4a:1b:d0:89:af:7c:5f:b8:15:28:ee:39:5d:
         30:db:a4:67:b8:1a:26:92:c9:35:1e:57:1c:a2:16:1f:5e:f6:
         01:cd:bd:87:dd:bf:e1:d0:e7:a7:8e:8f:5e:14:f8:e5:56:b9:
         fb:fc:97:a5:96:a7:f6:6b:54:38:cd:a2:8f:bc:e0:41:4b:a4:
         b0:66:4a:e4:52:b8:33:8b:89:b3:46:c6:8b:dd:b2:1d:e6:b9:
         28:c1:01:88:75:a8:b4:2c:2a:17:66:62:d5:98:da:56:b3:e5:
         4c:ff:2e:0f:a3:cd:73:68:92:25:66:e9:e4:38:c7:cc:bd:c3:
         32:0d:d5:54:7e:b0:4d:91:79:af:56:53:0b:cd:c2:89:58:99:
         85:95:e0:af:be:1a:20:e0:8a:4c:53:e3:93:07:e9:58:ba:a8:
         6c:58:8c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----