Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1f333e-d863-4939-b004-60003a1f4e23/1/vMlYMOcVVVtTv45JSK1D9pbF67c.mft
File:                     vMlYMOcVVVtTv45JSK1D9pbF67c.mft (raw, json)
Hash identifier:          atNaZQVsKPQz5QbtYpQPBYNFNwVhHKrcK84nZVDzQ30=
Subject key identifier:   9A:3B:2C:93:8C:07:8E:89:97:71:6A:BF:84:20:B6:6D:90:0F:11:8C
Authority key identifier: BC:C9:58:30:E7:15:55:5B:53:BF:8E:49:48:AD:43:F6:96:C5:EB:B7
Certificate issuer:       /CN=bcc95830e715555b53bf8e4948ad43f696c5ebb7
Certificate serial:       02E7645B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMlYMOcVVVtTv45JSK1D9pbF67c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1f333e-d863-4939-b004-60003a1f4e23/1/vMlYMOcVVVtTv45JSK1D9pbF67c.mft
Manifest number:          03CA
Signing time:             Mon 23 May 2022 09:18:29 +0000
Manifest this update:     Mon 23 May 2022 09:18:29 +0000
Manifest next update:     Tue 24 May 2022 09:18:29 +0000
Files and hashes:         1: vMlYMOcVVVtTv45JSK1D9pbF67c.crl (hash: KSKpgrZmPSoIXiiYzOjcl3Ri0Z0SMamPpxtRDM3MX6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48718939 (0x2e7645b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc95830e715555b53bf8e4948ad43f696c5ebb7
        Validity
            Not Before: May 23 09:18:29 2022 GMT
            Not After : May 24 09:18:29 2022 GMT
        Subject: CN=9a3b2c938c078e8997716abf8420b66d900f118c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:05:c4:13:26:f5:c9:21:f3:f4:fb:ec:40:
                    87:23:a9:c4:86:d6:0c:4e:43:ca:20:98:59:37:26:
                    f7:12:85:79:ff:99:3b:16:1d:f0:bf:30:6e:e2:25:
                    6b:b9:1c:36:ec:78:4a:96:04:77:27:36:c9:fe:82:
                    0a:2d:59:0d:ab:21:2a:db:fc:d9:66:86:42:b8:ae:
                    43:31:67:53:20:5f:a7:9e:1f:74:97:f9:f8:1b:98:
                    d5:91:16:ba:89:f6:79:92:33:84:d3:22:d3:08:ef:
                    6a:1d:23:51:44:4d:5f:e6:9c:4f:19:8a:ee:8d:0f:
                    f9:07:b6:a4:78:bf:3c:48:7e:9c:5d:79:13:69:9b:
                    a2:04:a6:36:95:7f:33:77:28:e5:09:3d:12:4b:aa:
                    2c:d6:ed:f1:9c:9d:97:4b:97:98:8b:06:14:eb:fb:
                    52:af:64:72:c1:ef:9b:13:ea:ea:93:c5:1e:f3:88:
                    2d:7a:8c:43:07:b1:3e:c3:34:fd:d3:cb:d3:1d:da:
                    2a:06:3c:9a:92:f9:dd:75:c3:ae:0e:2e:36:f9:09:
                    b4:3a:25:56:e4:29:2a:a8:07:77:61:0b:9e:5c:7c:
                    00:75:06:ba:23:73:90:7c:8e:9a:ad:ac:fe:00:11:
                    08:7f:6b:8c:3c:e7:f2:e6:2f:d1:ea:e2:13:82:42:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3B:2C:93:8C:07:8E:89:97:71:6A:BF:84:20:B6:6D:90:0F:11:8C
            X509v3 Authority Key Identifier:
                keyid:BC:C9:58:30:E7:15:55:5B:53:BF:8E:49:48:AD:43:F6:96:C5:EB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMlYMOcVVVtTv45JSK1D9pbF67c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1f333e-d863-4939-b004-60003a1f4e23/1/vMlYMOcVVVtTv45JSK1D9pbF67c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1f333e-d863-4939-b004-60003a1f4e23/1/vMlYMOcVVVtTv45JSK1D9pbF67c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:bb:91:bf:d2:f0:87:f7:1c:f1:74:65:90:34:dc:9c:66:
         b3:17:61:fd:24:69:7c:72:c1:45:10:2c:99:34:98:2b:cf:06:
         00:ea:f2:fd:26:8d:d3:c5:b5:50:cf:ad:f6:11:39:97:2a:8d:
         1b:ca:de:aa:21:a7:8d:7e:34:41:0a:39:0d:69:0e:e8:a3:96:
         b4:dd:17:94:31:23:34:1b:5e:30:83:f4:4c:c3:b9:53:77:9b:
         25:e0:d3:17:c7:ce:34:55:d6:1b:d4:1d:5e:65:c9:da:11:0d:
         58:81:a9:2e:de:b6:c0:0e:f1:5b:75:90:4a:7f:89:44:6b:fc:
         ee:c7:4a:1a:45:8a:67:0e:cc:6b:f3:41:37:16:1e:fc:cf:6f:
         2f:ba:be:a3:c8:db:e1:be:12:be:87:9c:8b:95:ad:9b:05:a6:
         c8:fa:35:4a:6f:55:43:6b:53:fe:a5:66:59:d4:cf:23:8d:5f:
         cf:c9:70:5d:0c:59:be:5a:28:78:54:f7:d3:bf:04:51:54:59:
         25:9e:27:64:29:1f:60:77:2b:29:59:93:8b:73:f1:5b:14:86:
         6f:c3:83:67:c2:69:7d:42:91:f9:30:cd:74:b5:16:15:01:4e:
         86:b2:6f:a6:4f:3a:24:8f:e2:70:fd:0b:90:27:44:af:24:67:
         e6:ab:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----