Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9d8836-1c82-4cee-a57d-40cdd9a37892/1/gMAqEF8fyJSkirMHlwd0it4GnE8.mft
File:                     gMAqEF8fyJSkirMHlwd0it4GnE8.mft (raw, json)
Hash identifier:          2xDVt+snaQ9GpMPRKZOnwvoO03yz6QKQ/vTVzwHAJXM=
Subject key identifier:   F1:70:5B:83:CE:58:F1:44:03:6B:59:83:05:21:8F:CB:B2:45:F9:90
Authority key identifier: 80:C0:2A:10:5F:1F:C8:94:A4:8A:B3:07:97:07:74:8A:DE:06:9C:4F
Certificate issuer:       /CN=80c02a105f1fc894a48ab3079707748ade069c4f
Certificate serial:       08A7E260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMAqEF8fyJSkirMHlwd0it4GnE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9d8836-1c82-4cee-a57d-40cdd9a37892/1/gMAqEF8fyJSkirMHlwd0it4GnE8.mft
Manifest number:          0826
Signing time:             Wed 02 Feb 2022 08:51:12 +0000
Manifest this update:     Wed 02 Feb 2022 08:51:12 +0000
Manifest next update:     Thu 03 Feb 2022 08:51:12 +0000
Files and hashes:         1: gMAqEF8fyJSkirMHlwd0it4GnE8.crl (hash: j/7TxaxDuowz3H59YRtVz8v4esyOIGIyZqB8UCcbRHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145220192 (0x8a7e260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c02a105f1fc894a48ab3079707748ade069c4f
        Validity
            Not Before: Feb  2 08:51:12 2022 GMT
            Not After : Feb  3 08:51:12 2022 GMT
        Subject: CN=f1705b83ce58f144036b598305218fcbb245f990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:dc:8c:4a:66:66:76:a5:bf:1e:1e:bd:c3:
                    0f:f7:85:0b:39:73:f0:cd:a2:21:fc:18:5b:d2:fc:
                    8e:1c:05:89:80:99:28:ac:3d:c9:fb:07:75:06:b6:
                    6d:f2:47:cd:e9:0e:ce:8d:56:e2:18:d0:6d:c8:f7:
                    6e:79:7d:f5:c7:d5:07:a8:53:81:0d:01:aa:3c:4b:
                    72:62:55:b7:12:fe:33:6f:75:a4:fd:c4:6e:cc:b3:
                    2e:15:8f:76:52:78:ad:95:37:1d:b9:12:1a:4e:d9:
                    3e:b8:c5:38:38:a1:64:08:bc:58:f3:3a:0b:1e:b6:
                    3e:95:db:b6:6b:00:26:67:01:17:30:46:bf:1f:7a:
                    48:98:87:80:88:23:4d:e0:9f:e9:4e:c6:8c:ca:2e:
                    1a:cd:a8:78:1b:37:ab:a7:1f:61:ab:fb:7e:04:ff:
                    73:29:04:16:cc:1a:b6:d4:4d:f1:3c:1b:2c:4d:1c:
                    b4:f2:39:33:49:a0:51:3e:1a:7c:67:2d:59:14:81:
                    e1:72:49:25:fe:86:88:76:8c:84:27:bc:d1:47:80:
                    43:29:29:41:e3:b0:63:38:74:d7:55:16:67:49:ef:
                    bf:cc:be:fb:0d:d4:57:d1:14:d7:ba:50:d1:8f:d2:
                    ac:bf:ed:64:c5:24:7e:7c:0f:16:ab:19:50:6b:60:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:5B:83:CE:58:F1:44:03:6B:59:83:05:21:8F:CB:B2:45:F9:90
            X509v3 Authority Key Identifier:
                keyid:80:C0:2A:10:5F:1F:C8:94:A4:8A:B3:07:97:07:74:8A:DE:06:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAqEF8fyJSkirMHlwd0it4GnE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9d8836-1c82-4cee-a57d-40cdd9a37892/1/gMAqEF8fyJSkirMHlwd0it4GnE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9d8836-1c82-4cee-a57d-40cdd9a37892/1/gMAqEF8fyJSkirMHlwd0it4GnE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:ff:cf:a8:55:f9:7d:28:2d:16:e8:51:56:66:5f:e3:93:
         79:37:05:95:9e:89:e8:48:94:f9:aa:0f:97:b4:a1:c9:3b:43:
         3f:43:b4:0e:0b:78:5a:3e:6f:c7:f4:dc:55:57:35:3e:b4:61:
         38:4c:66:fb:b7:2b:c2:8c:a3:67:15:78:00:99:22:a3:32:79:
         8b:e2:1a:cf:cf:ea:0d:ee:4e:2f:0f:17:b3:d3:c9:68:f4:fd:
         2c:d4:5e:fb:5c:e0:59:17:4c:67:00:05:da:69:d4:b7:81:66:
         96:c8:f0:58:8d:64:44:7c:8f:b2:9a:9a:b8:f4:71:4b:cf:ef:
         75:06:ea:50:50:36:27:be:10:30:24:df:74:24:94:6b:c2:54:
         12:a3:18:39:46:12:40:83:00:57:16:34:87:b3:1b:72:06:e3:
         8a:a6:34:cc:69:0a:ae:d7:8a:2d:73:1b:bf:b3:62:75:1a:7f:
         cc:f1:18:b8:07:99:92:a4:20:fa:2e:37:69:85:14:4d:72:a3:
         28:74:e6:ba:e9:49:19:81:ad:1d:12:d5:6d:15:d5:d0:58:a6:
         71:ce:3d:1b:92:58:a0:3e:e3:cb:bf:a0:28:ca:63:a2:51:7e:
         01:9b:c2:c2:b5:e6:79:96:74:b4:e0:fd:d4:89:52:ce:a5:c1:
         69:af:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----