Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8dfcbd-6da3-4944-9261-574b6c70175e/1/j2qg5XA92heJIhwqO68fnammwHw.mft
File:                     j2qg5XA92heJIhwqO68fnammwHw.mft (raw, json)
Hash identifier:          xe7IuKWQua+/UIkApRKgQZogLUuSIaQYXTEnqTlVcW8=
Subject key identifier:   B4:C7:21:10:53:B9:25:96:C4:2B:C1:70:AA:EF:2F:02:F4:37:DB:2A
Authority key identifier: 8F:6A:A0:E5:70:3D:DA:17:89:22:1C:2A:3B:AF:1F:9D:A9:A6:C0:7C
Certificate issuer:       /CN=8f6aa0e5703dda1789221c2a3baf1f9da9a6c07c
Certificate serial:       01853E7A80C1A65C707FCAFE0740E43490BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j2qg5XA92heJIhwqO68fnammwHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/8dfcbd-6da3-4944-9261-574b6c70175e/1/j2qg5XA92heJIhwqO68fnammwHw.mft
Manifest number:          0BDB
Signing time:             Fri 23 Dec 2022 10:14:53 +0000
Manifest this update:     Fri 23 Dec 2022 10:14:53 +0000
Manifest next update:     Sat 24 Dec 2022 10:14:53 +0000
Files and hashes:         1: j2qg5XA92heJIhwqO68fnammwHw.crl (hash: /iiM9IsuOvTzPhvrVR3lpKRJst1s3wllo1ppIrc+BUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3e:7a:80:c1:a6:5c:70:7f:ca:fe:07:40:e4:34:90:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6aa0e5703dda1789221c2a3baf1f9da9a6c07c
        Validity
            Not Before: Dec 23 10:14:53 2022 GMT
            Not After : Dec 24 10:14:53 2022 GMT
        Subject: CN=b4c7211053b92596c42bc170aaef2f02f437db2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:be:12:4d:1d:10:36:6b:63:65:ab:ba:93:65:
                    a7:4a:6e:ac:94:0e:d5:26:0b:77:ac:c1:b8:44:f7:
                    f5:e2:9b:b8:cd:b1:20:50:c9:34:a5:bd:8c:bb:f2:
                    30:d8:25:7b:14:68:a0:62:b2:72:24:5b:64:be:3c:
                    f1:43:bc:56:1b:4e:b3:1a:df:9e:0b:6b:17:bd:f3:
                    43:87:6c:97:48:43:30:c1:ce:bd:4d:d4:a5:f2:f9:
                    9a:ad:11:77:49:69:d1:bd:d3:ad:13:ff:13:7e:28:
                    c2:74:f7:f5:b6:42:e2:e8:ab:7d:35:36:09:be:72:
                    21:30:e8:0a:66:e2:f0:55:d4:aa:1c:61:85:bf:9f:
                    5c:26:9f:a1:34:fc:63:f6:98:cd:03:df:6d:63:f6:
                    22:dd:f2:17:9b:7b:70:8a:aa:2a:ab:f7:b0:c5:10:
                    fd:70:e1:98:a9:97:99:08:e5:72:8c:dd:cf:f0:45:
                    4d:c4:ec:34:fc:0b:a9:19:48:a0:e9:ef:a8:1f:dd:
                    68:c4:a8:a8:4d:de:c1:a2:56:b7:f1:dc:99:61:7c:
                    b6:16:98:43:19:5a:80:d7:bf:45:e6:4a:57:70:75:
                    5c:df:3d:30:c9:d2:a0:b0:98:65:07:5c:32:b1:d0:
                    f8:4a:47:60:5c:d5:26:0b:0b:71:d6:35:ec:df:5e:
                    2a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C7:21:10:53:B9:25:96:C4:2B:C1:70:AA:EF:2F:02:F4:37:DB:2A
            X509v3 Authority Key Identifier:
                keyid:8F:6A:A0:E5:70:3D:DA:17:89:22:1C:2A:3B:AF:1F:9D:A9:A6:C0:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2qg5XA92heJIhwqO68fnammwHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8dfcbd-6da3-4944-9261-574b6c70175e/1/j2qg5XA92heJIhwqO68fnammwHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8dfcbd-6da3-4944-9261-574b6c70175e/1/j2qg5XA92heJIhwqO68fnammwHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:76:4c:ed:d4:ae:80:c5:7a:2a:e2:a7:ba:6e:19:7c:f4:a6:
         7c:06:05:4c:a5:23:11:b2:40:d4:16:b9:3d:30:b5:75:fc:c9:
         09:8c:11:19:72:e0:bd:57:7f:da:41:11:c6:e2:b3:97:25:c1:
         2c:9d:a8:0e:03:ba:f7:5a:56:ae:66:39:3d:28:1c:d3:a8:2d:
         d9:29:6d:a0:66:2e:d1:e9:85:59:de:cf:4c:26:fd:e4:a3:99:
         b8:a2:ff:10:24:c1:21:57:9b:63:57:30:9c:10:3b:07:8d:c4:
         0a:78:a0:5d:c3:d4:44:fc:82:24:8a:59:43:39:73:62:da:d2:
         fe:ba:fd:57:fa:23:14:8b:22:cc:7e:ef:be:09:8b:3c:03:8f:
         d2:1e:2f:eb:b5:f7:8a:03:dd:c0:fb:36:11:07:bb:0b:c2:ec:
         15:15:87:a0:4c:06:6f:1c:5f:7b:e4:83:7b:9e:90:b5:86:60:
         20:9f:9f:66:2a:b9:82:78:8e:e5:2d:1d:0e:5e:6c:c6:d2:a9:
         4a:83:d9:42:7e:d5:96:5e:18:e8:27:74:0e:d4:de:74:38:2a:
         31:6a:16:c0:06:6c:0f:87:f9:97:94:0b:46:c1:d5:52:c0:af:
         1c:94:e5:e6:cd:62:e7:dc:87:1c:dd:ea:2a:fa:65:88:1b:90:
         67:80:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----