Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ce8550-b395-45b3-b2cb-c1acee6e5749/1/cXZuz9FKyyDyORs0Mg2lcq9kPig.mft
File:                     cXZuz9FKyyDyORs0Mg2lcq9kPig.mft (raw, json)
Hash identifier:          LBHzmG9EbvidFdQR+bYF+9q4nK9oLjbWZ3wP1Pl9jB8=
Subject key identifier:   43:BE:08:60:EB:2D:83:12:7E:3C:10:D2:2B:C9:E9:2E:39:0A:3D:0F
Authority key identifier: 71:76:6E:CF:D1:4A:CB:20:F2:39:1B:34:32:0D:A5:72:AF:64:3E:28
Certificate issuer:       /CN=71766ecfd14acb20f2391b34320da572af643e28
Certificate serial:       018418B0EDA44F13C23F4C73AE32A46FC079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cXZuz9FKyyDyORs0Mg2lcq9kPig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ce8550-b395-45b3-b2cb-c1acee6e5749/1/cXZuz9FKyyDyORs0Mg2lcq9kPig.mft
Manifest number:          0164
Signing time:             Thu 27 Oct 2022 09:05:58 +0000
Manifest this update:     Thu 27 Oct 2022 09:05:58 +0000
Manifest next update:     Fri 28 Oct 2022 09:05:58 +0000
Files and hashes:         1: cXZuz9FKyyDyORs0Mg2lcq9kPig.crl (hash: 80FpT3GO1JJjfJxb87cgHuHb6JuKyjfSbUNc+Ey/WLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:18:b0:ed:a4:4f:13:c2:3f:4c:73:ae:32:a4:6f:c0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71766ecfd14acb20f2391b34320da572af643e28
        Validity
            Not Before: Oct 27 09:05:58 2022 GMT
            Not After : Oct 28 09:05:58 2022 GMT
        Subject: CN=43be0860eb2d83127e3c10d22bc9e92e390a3d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:08:c5:e5:e3:54:42:c4:a6:12:cc:d4:20:
                    4e:17:3f:92:9a:6c:5f:58:1a:fb:35:32:8a:55:b5:
                    33:20:d2:1d:52:8c:d9:48:b4:d4:88:e7:5e:cd:9a:
                    01:82:68:46:b5:4d:cd:34:f6:63:96:f5:d2:20:0c:
                    93:55:31:db:3d:44:28:20:5d:da:b5:2d:fa:c9:57:
                    1a:71:c9:d5:de:98:4c:19:c8:54:71:54:32:fb:c5:
                    82:f1:c4:fb:ea:2c:d6:f1:ef:a2:ad:d5:0e:9f:36:
                    22:95:2c:53:fb:38:90:97:e1:fd:f0:0e:cb:88:b5:
                    02:f0:3f:b7:3e:20:4a:a6:8b:2b:7a:4b:64:35:6e:
                    e5:26:3d:67:54:a9:68:ff:1d:e0:f7:24:58:d4:90:
                    6e:65:12:b8:ec:99:f6:d1:c8:4d:96:bd:f9:45:fe:
                    b0:fc:7b:b4:64:40:a7:6e:e5:bc:67:31:4f:45:83:
                    4d:30:ca:0f:e5:4c:aa:4d:01:e4:bf:6d:33:17:85:
                    ab:e5:0b:7b:b5:bb:2d:95:24:88:e3:d6:28:ab:54:
                    7f:2f:99:77:0b:e8:ce:f6:9e:de:ca:65:f5:a0:81:
                    d2:ef:40:6b:7c:a3:33:59:b1:84:5a:05:a4:37:dd:
                    e5:f1:43:b3:ea:c4:1a:73:93:cd:8a:71:9e:01:ec:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:08:60:EB:2D:83:12:7E:3C:10:D2:2B:C9:E9:2E:39:0A:3D:0F
            X509v3 Authority Key Identifier:
                keyid:71:76:6E:CF:D1:4A:CB:20:F2:39:1B:34:32:0D:A5:72:AF:64:3E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXZuz9FKyyDyORs0Mg2lcq9kPig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ce8550-b395-45b3-b2cb-c1acee6e5749/1/cXZuz9FKyyDyORs0Mg2lcq9kPig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ce8550-b395-45b3-b2cb-c1acee6e5749/1/cXZuz9FKyyDyORs0Mg2lcq9kPig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:10:dc:50:4a:74:e6:52:69:a8:fa:a8:1b:e2:bc:73:1b:8a:
         c0:f0:26:06:0b:d5:e5:f2:d2:f8:39:64:21:28:5f:02:86:ed:
         7b:76:63:b4:c0:cf:e9:86:4a:c9:10:14:6e:11:8f:1f:3b:cd:
         ed:f7:0a:a7:b8:05:4b:0b:ae:6f:f1:c9:03:a1:37:78:8e:a2:
         8c:c6:f2:4d:e8:ed:bf:bb:17:6e:e6:62:da:97:3d:5b:47:62:
         1e:8d:a2:d2:0b:26:c7:a5:58:ba:31:81:f7:f4:2d:f0:69:a2:
         e1:d9:0e:49:64:97:b1:cb:d7:da:7b:f4:d1:fe:25:6f:ad:1a:
         ce:0a:00:a7:ca:3f:fd:2a:31:d7:30:a3:d0:8b:72:66:b4:92:
         08:47:81:ed:de:cc:df:b0:10:d0:e4:ae:9f:07:e6:6c:72:11:
         5b:35:b0:ce:52:00:05:fb:9a:34:22:af:2a:38:9b:cb:e4:39:
         03:c0:f9:a1:0f:cf:a9:9b:a9:24:19:5c:8e:12:21:49:bb:48:
         78:87:2f:4e:ca:35:b5:7a:29:30:1c:fc:68:e6:66:93:8a:8d:
         04:05:45:c1:3c:d4:d8:1c:cd:e2:4a:61:c3:79:98:b4:c5:c4:
         f4:75:e2:7d:97:a2:45:ee:b9:fb:ac:93:6b:fe:76:2b:2c:26:
         83:7d:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----