Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c72e08-7843-4e08-aeff-261e3916f07d/1/72gMWOVYes1eMYQAUrhRX3xYLfE.mft
File:                     72gMWOVYes1eMYQAUrhRX3xYLfE.mft (raw, json)
Hash identifier:          aRuMn42R1blNAS7PtD9ye7tGrmUDyzRZVEhQKHab6Pw=
Subject key identifier:   81:E9:3D:F4:A6:E5:7A:F2:31:5C:D8:08:77:15:56:07:D7:E7:2D:97
Authority key identifier: EF:68:0C:58:E5:58:7A:CD:5E:31:84:00:52:B8:51:5F:7C:58:2D:F1
Certificate issuer:       /CN=ef680c58e5587acd5e31840052b8515f7c582df1
Certificate serial:       01847990FF57100D05A90B7B7D1614ACD0B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/72gMWOVYes1eMYQAUrhRX3xYLfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c72e08-7843-4e08-aeff-261e3916f07d/1/72gMWOVYes1eMYQAUrhRX3xYLfE.mft
Manifest number:          0AEC
Signing time:             Tue 15 Nov 2022 04:34:16 +0000
Manifest this update:     Tue 15 Nov 2022 04:34:16 +0000
Manifest next update:     Wed 16 Nov 2022 04:34:16 +0000
Files and hashes:         1: 72gMWOVYes1eMYQAUrhRX3xYLfE.crl (hash: iu1wA0gVC8GTEb7uAvOEsPZKkG6WC0Jzh/GEbK53/ZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:79:90:ff:57:10:0d:05:a9:0b:7b:7d:16:14:ac:d0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef680c58e5587acd5e31840052b8515f7c582df1
        Validity
            Not Before: Nov 15 04:34:16 2022 GMT
            Not After : Nov 16 04:34:16 2022 GMT
        Subject: CN=81e93df4a6e57af2315cd80877155607d7e72d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e8:35:19:08:80:fb:dd:ad:09:74:d0:0a:ca:
                    c2:16:0e:52:16:88:d9:0e:08:42:e3:70:92:77:bd:
                    14:5a:07:0a:dd:bf:2b:21:40:6f:a5:eb:cf:4e:47:
                    58:41:9a:aa:71:00:00:6b:20:70:f1:36:7e:36:13:
                    d8:9a:f0:1f:b1:49:73:36:7f:aa:61:3d:ea:54:57:
                    9a:97:8c:ca:7c:94:fd:a8:a0:fd:af:0e:5a:87:c1:
                    8b:42:05:b2:79:71:fb:9e:de:5d:87:ae:69:ec:0a:
                    21:ae:cd:92:7f:ed:b6:fa:3a:e7:79:d8:6d:9d:34:
                    c2:ee:09:53:c4:e3:65:4c:9c:21:f6:02:0e:79:cf:
                    20:e0:10:11:3f:dc:d2:18:31:30:3f:4d:bf:1c:4e:
                    38:36:a3:9d:8f:a2:c0:16:96:84:6e:fa:78:d6:f0:
                    4c:f2:b5:4c:85:09:4d:69:88:5f:ad:62:61:8a:4b:
                    86:f7:ba:2a:8f:77:83:04:0d:65:ce:ba:23:8e:fc:
                    1e:79:c4:31:76:25:67:7f:51:f3:f3:a8:56:35:3f:
                    06:b9:7f:f1:2c:aa:76:2a:0a:ab:5c:18:4f:72:65:
                    1c:99:20:8d:30:9c:f0:38:3e:1a:36:2a:0c:db:47:
                    f6:47:3c:c8:10:a2:53:49:35:52:3e:f1:75:1a:a2:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E9:3D:F4:A6:E5:7A:F2:31:5C:D8:08:77:15:56:07:D7:E7:2D:97
            X509v3 Authority Key Identifier:
                keyid:EF:68:0C:58:E5:58:7A:CD:5E:31:84:00:52:B8:51:5F:7C:58:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72gMWOVYes1eMYQAUrhRX3xYLfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c72e08-7843-4e08-aeff-261e3916f07d/1/72gMWOVYes1eMYQAUrhRX3xYLfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c72e08-7843-4e08-aeff-261e3916f07d/1/72gMWOVYes1eMYQAUrhRX3xYLfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:51:88:48:e5:f5:e0:68:38:c1:ce:45:74:ad:3b:a0:60:d8:
         6a:dd:2f:5e:f5:9f:21:42:63:c1:8a:d6:74:74:13:12:8a:4b:
         ae:07:a2:25:09:3a:15:35:5e:b7:ba:8b:e9:30:97:ab:38:b3:
         9f:3e:6e:65:6a:00:72:a5:6a:c8:4a:5e:e8:a1:93:9b:5d:bf:
         0f:81:ec:48:32:56:4d:9e:68:cd:f4:cf:2a:01:d2:88:75:42:
         c4:8b:3a:19:cb:48:7c:a4:d8:9e:e2:ab:df:7e:a2:e4:09:2d:
         e4:09:21:55:72:99:8b:76:9f:5a:1f:ad:1d:8f:6a:a5:ed:f8:
         cb:c1:db:36:5e:71:eb:f8:4c:9b:cb:b9:bf:df:cb:0f:29:5a:
         01:9a:1f:fd:63:28:dd:4e:91:ec:6c:e1:93:0f:06:65:1b:66:
         8c:64:92:f8:3e:1f:45:57:f6:0c:ba:3b:9c:e9:36:91:5f:a6:
         58:43:36:58:9a:a7:ac:f1:5f:b8:3e:4f:4b:b2:bf:b0:07:94:
         17:45:c5:d6:4f:bf:d2:c5:aa:8e:87:11:ce:0a:a9:3a:d8:af:
         c4:74:46:96:c4:3c:73:4b:b8:5e:ea:7e:50:31:78:af:b3:ce:
         1b:ca:9b:f7:13:95:99:19:66:dd:03:42:e0:38:65:ff:7d:31:
         e4:39:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----