Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6aa9dd-822d-4b43-a650-1ac9c477357f/1/gGeKbqd5kG0LxewEMY5S1ITHrEM.mft
File:                     gGeKbqd5kG0LxewEMY5S1ITHrEM.mft (raw, json)
Hash identifier:          8LVMHXUMUMpaVDJJUBzJrft78TY/6hozcbKUdTS+4vA=
Subject key identifier:   70:8C:B0:9F:6D:D9:61:C2:08:8B:20:41:A4:E0:35:75:E3:D0:19:4D
Authority key identifier: 80:67:8A:6E:A7:79:90:6D:0B:C5:EC:04:31:8E:52:D4:84:C7:AC:43
Certificate issuer:       /CN=80678a6ea779906d0bc5ec04318e52d484c7ac43
Certificate serial:       0D433891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGeKbqd5kG0LxewEMY5S1ITHrEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6aa9dd-822d-4b43-a650-1ac9c477357f/1/gGeKbqd5kG0LxewEMY5S1ITHrEM.mft
Manifest number:          08A4
Signing time:             Fri 18 Mar 2022 08:05:38 +0000
Manifest this update:     Fri 18 Mar 2022 08:05:38 +0000
Manifest next update:     Sat 19 Mar 2022 08:05:38 +0000
Files and hashes:         1: gGeKbqd5kG0LxewEMY5S1ITHrEM.crl (hash: 4pEeqnGF9Z0b+01sjACdY/r1bY1Q0SN6stQx8Rov9SY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222509201 (0xd433891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80678a6ea779906d0bc5ec04318e52d484c7ac43
        Validity
            Not Before: Mar 18 08:05:38 2022 GMT
            Not After : Mar 19 08:05:38 2022 GMT
        Subject: CN=708cb09f6dd961c2088b2041a4e03575e3d0194d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:93:46:31:a1:58:1b:d4:42:28:39:8e:d3:
                    14:77:89:b3:40:5d:c3:41:bf:2b:55:2b:40:68:22:
                    6c:be:26:c6:ed:73:0c:3e:07:0a:06:5f:d1:87:39:
                    59:1f:ca:f3:57:70:c8:22:c9:1e:ef:6d:7c:78:63:
                    47:c1:1a:98:51:b5:2b:02:43:9f:8f:55:2d:e7:1b:
                    6f:06:0c:d2:13:8a:ff:81:d4:66:dc:6b:fa:f9:f7:
                    00:72:cf:0d:ec:9d:d3:15:9b:db:ad:31:87:b2:5b:
                    37:b4:63:b7:8a:fb:57:ab:c2:1a:e2:0a:2c:e2:c9:
                    e1:1c:76:18:41:af:29:a1:2a:0e:3c:ad:d2:e8:c2:
                    54:c4:01:e7:24:e0:65:c2:0a:44:a5:73:d4:aa:f8:
                    93:02:1a:74:63:2c:22:11:89:30:69:36:19:a9:8d:
                    8a:0e:d5:d9:10:26:9c:77:80:5d:0f:e1:6c:61:21:
                    b1:bd:eb:2d:23:cb:fe:6f:56:5a:00:b8:ee:45:e6:
                    0a:10:84:ae:c2:a4:1b:d3:ae:8d:f1:d1:58:b3:32:
                    7a:b2:e2:b1:7a:65:e6:60:fb:01:ed:1d:9e:f3:0f:
                    65:57:75:5f:76:2d:63:08:3d:10:70:2a:89:12:3c:
                    92:0a:42:33:dc:d9:88:d4:7b:88:3a:06:a1:43:03:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8C:B0:9F:6D:D9:61:C2:08:8B:20:41:A4:E0:35:75:E3:D0:19:4D
            X509v3 Authority Key Identifier:
                keyid:80:67:8A:6E:A7:79:90:6D:0B:C5:EC:04:31:8E:52:D4:84:C7:AC:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGeKbqd5kG0LxewEMY5S1ITHrEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6aa9dd-822d-4b43-a650-1ac9c477357f/1/gGeKbqd5kG0LxewEMY5S1ITHrEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6aa9dd-822d-4b43-a650-1ac9c477357f/1/gGeKbqd5kG0LxewEMY5S1ITHrEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:76:90:7e:5d:92:a4:34:a3:94:14:95:33:b9:ed:bd:ca:
         94:a6:1c:ce:85:11:52:9f:c0:7e:ad:49:dc:50:e9:5b:44:35:
         82:f2:4b:2d:96:e5:3e:f2:99:cc:49:5e:d0:34:28:19:1f:78:
         1d:8d:bd:03:d1:ed:40:09:ba:86:31:09:9c:c0:a8:b7:df:2e:
         f5:e9:d5:4c:af:17:cd:5f:fb:48:4f:f9:3a:ab:09:68:1f:b0:
         e4:70:67:92:5c:0d:a2:c9:0e:bc:19:f7:f7:d8:48:92:f8:c0:
         aa:f5:c3:70:d4:66:02:a7:4d:6e:c4:6c:b4:0d:20:7e:6b:c2:
         5d:27:a5:49:2b:5a:bc:42:e2:8a:36:1d:93:67:9e:d9:fa:a1:
         cf:b0:ac:30:2e:64:5c:8e:1e:a8:20:6f:a0:c7:33:67:9b:cf:
         bc:00:91:64:38:d0:b2:90:b2:25:c3:c3:48:53:21:72:76:89:
         00:b8:26:1b:bc:e7:9b:4b:d1:03:30:80:56:90:56:17:61:46:
         3c:40:f9:36:50:5b:0a:ee:23:86:aa:42:ed:37:b4:7d:d5:52:
         49:ce:c7:80:52:a8:dc:a0:37:ee:02:9f:29:87:00:b9:aa:73:
         52:be:44:50:5b:8d:f5:a0:54:b1:7c:2d:2f:eb:c8:fa:c9:99:
         14:1d:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----