Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c2ef49-b2f3-4e6b-85ec-dcf5ce6786fa/1/q88YoROjZZzok2LNxTCFlY9a4RM.mft
File:                     q88YoROjZZzok2LNxTCFlY9a4RM.mft (raw, json)
Hash identifier:          0gyA1uuVKk+huIKHvvLB84140Y+ltgqPeUJS/yn/L9g=
Subject key identifier:   92:6E:7C:22:E1:CE:CD:17:DC:3B:41:3D:15:64:B2:48:50:D7:C9:38
Authority key identifier: AB:CF:18:A1:13:A3:65:9C:E8:93:62:CD:C5:30:85:95:8F:5A:E1:13
Certificate issuer:       /CN=abcf18a113a3659ce89362cdc53085958f5ae113
Certificate serial:       01855065595B218BA16E5D7AEB3679B092B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q88YoROjZZzok2LNxTCFlY9a4RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c2ef49-b2f3-4e6b-85ec-dcf5ce6786fa/1/q88YoROjZZzok2LNxTCFlY9a4RM.mft
Manifest number:          63
Signing time:             Mon 26 Dec 2022 21:44:57 +0000
Manifest this update:     Mon 26 Dec 2022 21:44:57 +0000
Manifest next update:     Tue 27 Dec 2022 21:44:57 +0000
Files and hashes:         1: q88YoROjZZzok2LNxTCFlY9a4RM.crl (hash: lUknUbguWrIoeULncXKRu+7VjefTsaL3XGwH2U4XjYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:50:65:59:5b:21:8b:a1:6e:5d:7a:eb:36:79:b0:92:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abcf18a113a3659ce89362cdc53085958f5ae113
        Validity
            Not Before: Dec 26 21:44:57 2022 GMT
            Not After : Dec 27 21:44:57 2022 GMT
        Subject: CN=926e7c22e1cecd17dc3b413d1564b24850d7c938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:7b:9f:52:db:52:28:da:f5:f4:c5:6e:a2:
                    c7:7b:fa:e7:43:d7:67:c7:8b:f9:29:bf:46:a3:53:
                    83:d8:13:c4:12:a5:1e:14:6b:cd:dd:84:73:36:46:
                    d2:d2:ca:07:cc:01:48:71:7c:6a:19:97:15:b3:cd:
                    9a:35:cd:01:81:d5:1b:65:cf:d3:c3:ab:a9:b1:0e:
                    d7:c6:a4:82:89:69:2b:de:fd:39:7b:b4:58:92:32:
                    f7:a9:7c:ed:d8:65:90:a8:8f:84:0d:dd:63:ea:1c:
                    b1:c3:7f:7d:a9:c3:58:3e:74:ea:b4:b0:59:e0:ae:
                    ed:c5:54:9c:10:34:dc:33:2d:ba:4f:f1:ad:b5:a8:
                    46:47:dc:be:96:e4:dc:14:4c:22:f9:9d:10:5f:36:
                    d0:2e:96:43:db:8e:45:ca:91:63:99:91:4a:cd:44:
                    a9:25:75:dd:b6:94:03:8b:ad:0d:b1:10:d0:6b:b9:
                    cf:ba:cd:8f:c8:f1:70:a7:54:9e:1f:5c:35:ba:74:
                    b7:31:fc:1d:14:eb:d8:3a:58:55:e9:2d:2a:5e:2f:
                    91:67:6d:82:72:1b:78:20:29:55:9a:c4:61:0b:fd:
                    66:ee:14:bd:0c:2c:77:b6:bc:9f:c6:79:1a:0e:73:
                    55:d2:32:48:5f:8c:07:00:a7:a4:6c:78:55:da:f3:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6E:7C:22:E1:CE:CD:17:DC:3B:41:3D:15:64:B2:48:50:D7:C9:38
            X509v3 Authority Key Identifier:
                keyid:AB:CF:18:A1:13:A3:65:9C:E8:93:62:CD:C5:30:85:95:8F:5A:E1:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q88YoROjZZzok2LNxTCFlY9a4RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c2ef49-b2f3-4e6b-85ec-dcf5ce6786fa/1/q88YoROjZZzok2LNxTCFlY9a4RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c2ef49-b2f3-4e6b-85ec-dcf5ce6786fa/1/q88YoROjZZzok2LNxTCFlY9a4RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3e:81:53:ac:cb:89:f6:72:3d:36:3f:fa:e5:c1:51:13:0e:
         49:be:6d:27:df:ce:45:3a:82:71:00:69:5a:c8:af:3d:92:0c:
         63:be:24:8e:b3:b5:ec:53:86:91:ac:c2:94:65:93:95:56:40:
         df:e3:0b:a6:41:b5:a5:04:a0:ef:29:04:f8:60:2c:90:68:c5:
         f0:a5:0b:2b:60:6e:c1:ca:cc:a9:80:d4:59:80:e8:97:a1:37:
         5b:0c:a8:f5:1a:46:d2:4c:ed:70:f6:1a:d0:82:0f:97:15:39:
         9e:3b:fa:d3:03:d3:c7:00:2b:6f:bf:db:05:69:b6:b7:84:5e:
         e4:49:1e:ce:35:07:28:6d:07:3c:c8:5f:20:2c:d5:32:59:ec:
         a5:fb:9c:60:f1:1b:87:c5:65:79:0f:84:20:b0:01:6c:63:e5:
         36:34:a6:f4:7e:a8:73:ab:d0:8e:bd:fb:84:6a:b5:47:b0:37:
         0b:a7:3d:a4:ce:48:f2:5c:49:95:32:71:88:38:14:ff:65:d7:
         54:96:fc:26:15:f6:d7:f9:77:ca:ea:d4:a8:89:18:60:fe:3b:
         72:27:f5:d2:8e:6a:12:b8:f3:dd:07:6a:55:97:0f:1e:78:f3:
         40:60:98:a4:b7:34:45:12:0d:e9:19:0d:89:8b:41:2a:54:09:
         e6:9d:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----