Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/424016-c2c0-4f25-a670-0665ec01236d/1/UzGm98yjlTUPxK9ykQZP0149BGA.mft
File:                     UzGm98yjlTUPxK9ykQZP0149BGA.mft (raw, json)
Hash identifier:          Qq3Wt/R7Mxgve4JJlDbTQMVpgh59ClvK1IuoxGtQS7Q=
Subject key identifier:   70:8C:F1:54:68:65:D8:13:76:0C:F4:82:24:E8:CE:D1:59:21:54:29
Authority key identifier: 53:31:A6:F7:CC:A3:95:35:0F:C4:AF:72:91:06:4F:D3:5E:3D:04:60
Certificate issuer:       /CN=5331a6f7cca395350fc4af7291064fd35e3d0460
Certificate serial:       0AEE47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzGm98yjlTUPxK9ykQZP0149BGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/424016-c2c0-4f25-a670-0665ec01236d/1/UzGm98yjlTUPxK9ykQZP0149BGA.mft
Manifest number:          0D
Signing time:             Wed 23 Feb 2022 21:29:25 +0000
Manifest this update:     Wed 23 Feb 2022 21:29:25 +0000
Manifest next update:     Thu 24 Feb 2022 21:29:25 +0000
Files and hashes:         1: UzGm98yjlTUPxK9ykQZP0149BGA.crl (hash: 2lRc9ABWWzGv1TuoS3tFRSc3VTA2QbraBB0ZLoY/Tuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716359 (0xaee47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5331a6f7cca395350fc4af7291064fd35e3d0460
        Validity
            Not Before: Feb 23 21:29:25 2022 GMT
            Not After : Feb 24 21:29:25 2022 GMT
        Subject: CN=708cf1546865d813760cf48224e8ced159215429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:4e:92:a7:af:eb:d7:e9:24:5d:53:ea:6c:
                    d2:cc:d8:42:7e:64:2d:d2:8d:1d:18:48:6f:7f:db:
                    10:c6:c2:9e:72:9e:cf:6a:e9:9b:0a:0f:2e:a5:f7:
                    d3:61:36:09:6c:f2:40:ec:d8:6a:a5:43:fb:6e:18:
                    fe:7f:09:4a:3d:39:4b:20:8c:5a:7b:be:eb:d2:ac:
                    23:dc:41:c2:5a:55:55:9e:ca:9b:00:75:22:7f:b8:
                    f3:4d:3b:8f:f9:aa:59:d8:90:11:24:0f:d6:92:3e:
                    ae:d6:4c:30:da:bc:7a:2e:83:ad:5a:9b:4d:20:ad:
                    ea:5b:37:d5:c2:7c:b3:71:83:57:b8:08:7d:cd:43:
                    7d:a4:a8:b8:3b:0a:49:dc:41:95:89:8d:36:1c:7b:
                    21:a9:84:2f:8f:b5:13:50:17:e3:cd:0f:13:43:64:
                    db:75:20:48:0c:e7:30:32:4a:ec:70:25:37:85:21:
                    69:4c:a2:25:37:d5:99:1c:45:c0:8a:ea:8c:10:b9:
                    f5:ad:e0:e1:ce:31:30:71:31:20:77:52:f3:7a:19:
                    11:5a:17:89:65:8f:19:b1:59:2c:8e:82:b8:05:f0:
                    96:e1:9c:10:d8:4b:8a:ff:7c:d6:32:3d:02:ba:7b:
                    1f:8f:1b:7b:d2:28:79:73:0c:db:d1:cc:0f:e2:bd:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8C:F1:54:68:65:D8:13:76:0C:F4:82:24:E8:CE:D1:59:21:54:29
            X509v3 Authority Key Identifier:
                keyid:53:31:A6:F7:CC:A3:95:35:0F:C4:AF:72:91:06:4F:D3:5E:3D:04:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzGm98yjlTUPxK9ykQZP0149BGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/424016-c2c0-4f25-a670-0665ec01236d/1/UzGm98yjlTUPxK9ykQZP0149BGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/424016-c2c0-4f25-a670-0665ec01236d/1/UzGm98yjlTUPxK9ykQZP0149BGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:ab:24:45:c4:28:ec:98:ee:eb:1c:06:5d:aa:9c:a4:36:
         2c:2a:1d:50:5c:84:08:d3:3a:ba:90:b4:79:5b:77:a1:e5:95:
         75:8b:d6:c6:f6:b0:02:26:02:e8:c7:bc:19:33:be:8e:4b:49:
         e7:4e:68:d2:4f:d6:1f:d2:a3:5a:10:ae:cb:e3:0d:5d:7a:e6:
         b4:3c:a0:3a:5c:da:b0:d7:01:4f:a6:50:6c:3e:50:72:19:a0:
         13:bb:4f:e5:39:f0:c8:4c:a8:10:29:b5:65:be:95:01:ea:7b:
         51:53:86:44:71:1c:d1:1f:07:a9:bc:e9:de:58:bb:d1:0b:b6:
         22:7f:e8:3a:73:ef:5f:27:d8:7b:6c:42:07:d6:0c:53:4d:9f:
         eb:31:89:61:70:ea:54:42:31:0d:6e:15:18:e1:12:0f:67:24:
         65:c7:34:55:f7:05:26:4b:66:4c:55:6c:b5:13:93:46:1a:73:
         99:2a:07:df:5d:f0:6f:e7:6e:d1:e3:33:34:7b:bf:e4:b7:fb:
         7e:8f:16:97:02:58:b7:7e:84:7e:64:e1:94:7b:a2:e2:71:89:
         9f:aa:a4:0f:b3:1b:d1:1d:10:e2:af:6e:20:bc:a0:f7:67:e1:
         ec:5e:a2:e6:2f:cc:0b:17:3f:af:60:b9:70:6b:90:88:f8:9c:
         ed:bf:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----