Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/324d8f-4c20-4682-a114-89e8859cfae2/1/RIOMfyPEt9F8dN6RTZnihng5rto.mft
File:                     RIOMfyPEt9F8dN6RTZnihng5rto.mft (raw, json)
Hash identifier:          0JekuWAVUVmIEG4029bM3g5PqIBnXEBsLl/tQIlTr4Q=
Subject key identifier:   18:AD:B6:25:C7:44:08:60:92:D7:28:51:0A:15:69:F0:93:87:18:FA
Authority key identifier: 44:83:8C:7F:23:C4:B7:D1:7C:74:DE:91:4D:99:E2:86:78:39:AE:DA
Certificate issuer:       /CN=44838c7f23c4b7d17c74de914d99e2867839aeda
Certificate serial:       01840D4372C4E87C47B0E631E0A091F50502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIOMfyPEt9F8dN6RTZnihng5rto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/324d8f-4c20-4682-a114-89e8859cfae2/1/RIOMfyPEt9F8dN6RTZnihng5rto.mft
Manifest number:          064B
Signing time:             Tue 25 Oct 2022 03:50:34 +0000
Manifest this update:     Tue 25 Oct 2022 03:50:34 +0000
Manifest next update:     Wed 26 Oct 2022 03:50:34 +0000
Files and hashes:         1: RIOMfyPEt9F8dN6RTZnihng5rto.crl (hash: ZLOjUjvLaMBQgI8Z1uZ3oz9bLh4n3H15ejcr9F1TxRQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:43:72:c4:e8:7c:47:b0:e6:31:e0:a0:91:f5:05:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44838c7f23c4b7d17c74de914d99e2867839aeda
        Validity
            Not Before: Oct 25 03:50:34 2022 GMT
            Not After : Oct 26 03:50:34 2022 GMT
        Subject: CN=18adb625c744086092d728510a1569f0938718fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:89:d9:78:7c:ce:11:88:b6:52:3e:04:e8:
                    af:68:68:f8:db:be:9d:e4:84:2e:8d:ca:b5:c3:43:
                    8b:45:a1:d4:9c:19:ef:1c:f9:fa:3c:30:57:cb:e1:
                    dd:39:29:47:01:5c:8e:79:54:95:9e:3f:9c:98:41:
                    51:5b:cc:a6:df:0a:1e:6c:06:7d:1e:16:59:d3:af:
                    62:3e:60:dd:3f:c9:c0:bc:1d:be:1e:46:90:15:d0:
                    88:3c:2f:5d:c5:82:26:8f:8d:37:d3:d3:e2:7d:60:
                    a1:f2:f4:88:01:53:0c:7c:e4:88:48:03:3d:f8:6e:
                    a5:97:6e:9f:63:08:48:9a:74:c2:32:9e:98:93:92:
                    69:fc:b3:b7:65:f8:d7:3d:bf:20:ca:51:bd:dc:49:
                    33:c1:00:aa:00:82:0b:cc:de:cf:8b:12:f8:10:95:
                    01:aa:da:02:c8:6b:c5:4b:77:1d:f1:75:0f:07:6d:
                    d3:0c:7b:fe:8e:bc:e6:95:12:1b:5a:67:b9:f0:1c:
                    ab:7a:4c:75:75:6b:28:17:64:69:16:4d:49:aa:d1:
                    43:b2:f4:c1:ae:fd:0f:55:d8:a1:fc:b8:4e:07:26:
                    8a:87:6a:c6:46:c5:a9:b2:3c:5b:23:8f:67:6f:4c:
                    a1:5e:d4:59:da:38:83:d1:7c:9b:4b:d1:b0:5d:38:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AD:B6:25:C7:44:08:60:92:D7:28:51:0A:15:69:F0:93:87:18:FA
            X509v3 Authority Key Identifier:
                keyid:44:83:8C:7F:23:C4:B7:D1:7C:74:DE:91:4D:99:E2:86:78:39:AE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIOMfyPEt9F8dN6RTZnihng5rto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/324d8f-4c20-4682-a114-89e8859cfae2/1/RIOMfyPEt9F8dN6RTZnihng5rto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/324d8f-4c20-4682-a114-89e8859cfae2/1/RIOMfyPEt9F8dN6RTZnihng5rto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:39:fd:b6:0f:8d:ea:ca:af:69:73:ad:e7:56:3f:94:d0:
         b9:6f:b5:8b:47:71:21:2b:fe:4f:ea:ba:c5:d0:4f:83:4a:08:
         a5:8a:c9:08:21:49:31:af:d7:fb:68:f2:0b:f8:b5:4b:d3:5d:
         5c:4c:24:9d:f8:4b:38:75:ea:60:f2:b4:1a:3b:35:f5:01:04:
         45:c0:58:2b:b7:2e:3c:58:20:75:1b:28:36:c3:36:8b:83:04:
         94:f1:67:fc:b0:cb:c5:cf:f1:d1:79:a1:b9:01:d5:12:dc:1b:
         e6:86:63:ab:b2:2b:10:dd:f3:6c:cd:35:4d:b3:d2:25:17:a9:
         d1:e8:df:09:48:cd:6c:84:ff:05:b9:dc:09:f7:4c:b6:cb:cc:
         61:21:35:0f:34:be:40:d7:1a:2f:c5:80:4f:7d:9a:b2:da:b0:
         1c:bd:31:38:9b:77:08:c8:df:69:4a:d7:f5:c5:8a:e2:d9:5f:
         9e:77:67:4c:30:2a:a3:15:25:5c:5e:2a:55:1f:1c:9b:98:90:
         32:7e:c9:ab:5a:48:26:77:73:44:b3:d0:51:be:eb:35:c8:c7:
         a5:b4:8b:49:2f:d0:ed:9f:6f:d5:9c:fe:dc:60:35:1d:af:84:
         24:0c:e8:37:db:94:88:fb:bd:99:34:10:ff:3a:5c:d0:f2:c2:
         6f:00:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----