Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/60c829-15f0-4c8a-a40e-655058928514/1/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.mft
File:                     hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.mft (raw, json)
Hash identifier:          EzvC/U3cdTTPX2NpmsxukfJ8Xdis9SggrOtjYSKUshM=
Subject key identifier:   4C:3A:BB:4F:99:B3:C5:CF:6A:74:FA:EF:A4:AC:AB:E0:D2:39:20:0F
Authority key identifier: 85:D2:0C:87:AC:4A:B9:FF:99:E8:DB:44:23:2C:4B:8B:70:BD:5A:FE
Certificate issuer:       /CN=85d20c87ac4ab9ff99e8db44232c4b8b70bd5afe
Certificate serial:       037FC49F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/60c829-15f0-4c8a-a40e-655058928514/1/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.mft
Manifest number:          048A
Signing time:             Wed 16 Mar 2022 14:26:16 +0000
Manifest this update:     Wed 16 Mar 2022 14:26:16 +0000
Manifest next update:     Thu 17 Mar 2022 14:26:16 +0000
Files and hashes:         1: hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.crl (hash: FZTqelxQbFENPmgRsX4skEzIkgF+rz5Zp3TljbCFAI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58705055 (0x37fc49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d20c87ac4ab9ff99e8db44232c4b8b70bd5afe
        Validity
            Not Before: Mar 16 14:26:16 2022 GMT
            Not After : Mar 17 14:26:16 2022 GMT
        Subject: CN=4c3abb4f99b3c5cf6a74faefa4acabe0d239200f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:f5:b5:cd:ad:ca:79:88:7b:ee:41:12:cf:
                    7c:e9:b3:e4:9a:0e:68:07:81:14:21:4f:13:9e:57:
                    df:4d:d7:16:f7:63:fd:f1:e9:06:a5:c9:f4:fa:68:
                    e1:31:91:91:96:38:7b:49:7a:bc:08:79:e8:a3:ac:
                    6d:db:51:10:43:25:18:66:8e:12:b8:f4:2b:9d:ff:
                    dc:54:50:ef:fb:6b:8d:8f:90:2c:9b:68:07:93:37:
                    12:be:ff:04:d1:d0:e7:a7:14:64:66:62:6b:43:3a:
                    55:70:da:4d:31:d4:d1:a6:b4:0e:d8:b9:97:1a:2a:
                    98:d7:1a:64:2e:a0:46:13:46:62:62:76:9d:0f:f2:
                    06:b4:0e:30:95:56:4b:43:dc:6c:04:5a:76:9d:2a:
                    b0:cd:34:5b:ab:8f:95:31:b4:aa:e8:a9:1e:3f:56:
                    dd:1c:3f:a5:31:62:d3:70:4b:5e:cc:4e:b3:17:e2:
                    be:fc:c0:87:5e:4f:17:72:b9:57:7f:1f:27:3c:d8:
                    94:d0:20:53:54:81:fe:28:34:51:26:39:bb:94:73:
                    9c:2d:01:f5:ee:96:10:62:52:25:11:68:59:8d:fc:
                    69:9b:ac:50:db:bd:bd:8a:76:c8:a8:24:64:4b:e4:
                    09:03:33:c0:18:f8:e8:0b:38:e9:9b:dd:a3:f4:0f:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:BB:4F:99:B3:C5:CF:6A:74:FA:EF:A4:AC:AB:E0:D2:39:20:0F
            X509v3 Authority Key Identifier:
                keyid:85:D2:0C:87:AC:4A:B9:FF:99:E8:DB:44:23:2C:4B:8B:70:BD:5A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/60c829-15f0-4c8a-a40e-655058928514/1/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/60c829-15f0-4c8a-a40e-655058928514/1/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:40:f6:2a:e8:d0:69:0d:57:12:00:af:4e:81:6a:59:6a:82:
         27:35:8e:13:a0:34:4a:1d:42:ad:2f:62:fd:fe:74:e0:66:ed:
         d2:85:02:d7:a0:de:7e:5b:c5:d2:88:e9:8b:fa:14:ba:5c:32:
         78:42:14:9e:14:df:2d:7e:cd:88:ee:16:c8:76:ab:72:12:32:
         1e:8c:1a:73:20:9b:eb:fd:ad:d5:45:ac:30:8e:d0:33:28:f6:
         d6:27:d7:45:ca:a2:9f:e7:25:82:aa:e3:db:05:2a:78:dc:66:
         1d:d8:f8:b2:3d:b2:e7:e0:71:bd:a8:53:5c:81:bc:dd:93:65:
         d6:8a:35:cb:1d:3d:f5:35:1f:c6:55:83:6d:2b:21:cc:5f:65:
         32:e3:e9:76:25:00:a8:df:eb:f8:29:79:e7:a2:74:a1:4c:8b:
         da:cf:b6:29:4b:66:08:f9:60:07:50:bf:66:f7:3e:58:e9:8f:
         8d:5d:62:7d:a7:be:c2:f8:1e:37:b9:a5:05:81:bd:d0:6a:45:
         56:5b:4a:7c:73:d1:97:f1:52:92:fb:a2:52:97:57:3a:76:ca:
         72:5b:51:28:bf:e8:f1:c2:f7:bc:c6:56:f0:dd:42:b5:e1:8b:
         15:2d:78:af:10:f0:2d:a8:c1:eb:b8:3e:bd:df:87:91:ba:82:
         97:63:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----