Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2e4b47-680a-4455-9b69-9febec645b6d/1/aQ3JRHUlbpOd45K9xy9Hev_LJO8.mft
File:                     aQ3JRHUlbpOd45K9xy9Hev_LJO8.mft (raw, json)
Hash identifier:          r0KxYt5ChekIXtanPB/OUF44o0iWGatvcmA1VX94jmM=
Subject key identifier:   BA:89:49:F8:C7:D5:93:F6:67:EA:D7:15:64:D3:A4:C3:B6:37:14:20
Authority key identifier: 69:0D:C9:44:75:25:6E:93:9D:E3:92:BD:C7:2F:47:7A:FF:CB:24:EF
Certificate issuer:       /CN=690dc94475256e939de392bdc72f477affcb24ef
Certificate serial:       01837DE9D21A6B125863F1937C09AA1B13D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQ3JRHUlbpOd45K9xy9Hev_LJO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2e4b47-680a-4455-9b69-9febec645b6d/1/aQ3JRHUlbpOd45K9xy9Hev_LJO8.mft
Manifest number:          12
Signing time:             Tue 27 Sep 2022 07:46:58 +0000
Manifest this update:     Tue 27 Sep 2022 07:46:58 +0000
Manifest next update:     Wed 28 Sep 2022 07:46:58 +0000
Files and hashes:         1: aQ3JRHUlbpOd45K9xy9Hev_LJO8.crl (hash: z2QY4lhHzFUKKdsunYlCy25xjbdF4JcE1h1G2fwZChk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7d:e9:d2:1a:6b:12:58:63:f1:93:7c:09:aa:1b:13:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690dc94475256e939de392bdc72f477affcb24ef
        Validity
            Not Before: Sep 27 07:46:58 2022 GMT
            Not After : Sep 28 07:46:58 2022 GMT
        Subject: CN=ba8949f8c7d593f667ead71564d3a4c3b6371420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8d:8f:bc:9b:c7:d9:47:13:4e:a3:de:f7:ed:
                    aa:b2:87:61:fd:77:b3:eb:ad:9c:7a:40:d2:19:99:
                    a9:f5:ba:c0:2d:d4:cb:ef:c2:93:95:c2:b4:2a:cd:
                    5d:b4:9f:76:55:86:b7:b2:41:ec:75:cd:91:69:60:
                    6b:c2:5f:77:ae:2b:cc:07:da:b8:78:2f:00:fe:12:
                    49:4c:d3:bd:1d:c7:04:c3:e4:b4:05:df:3c:9a:f3:
                    c0:90:d6:03:bc:7a:e8:a3:30:a4:ac:80:1a:58:6c:
                    1a:da:99:98:6f:e8:77:2e:20:ba:73:e7:07:40:69:
                    43:52:6a:83:38:e4:be:fe:82:68:c8:f4:86:68:12:
                    2d:17:5f:4b:92:db:1d:69:98:81:90:d3:5f:72:35:
                    06:98:37:65:ad:cd:da:89:ca:82:57:59:e0:24:10:
                    5a:7b:9a:19:97:5a:3d:de:6e:30:4e:0b:98:d0:2c:
                    e0:09:20:d6:8a:f5:6c:d5:be:8e:b0:8e:75:3d:c9:
                    c0:4a:85:c4:46:27:bf:ab:cb:3e:cb:ed:eb:d1:05:
                    a5:29:79:ac:bc:20:68:0d:1a:4e:60:00:10:e2:ac:
                    5c:be:ff:c1:e4:f6:9c:66:9f:12:84:ef:e1:01:1c:
                    c0:d5:4b:bc:2d:bb:66:f9:16:1e:28:df:a7:a5:09:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:89:49:F8:C7:D5:93:F6:67:EA:D7:15:64:D3:A4:C3:B6:37:14:20
            X509v3 Authority Key Identifier:
                keyid:69:0D:C9:44:75:25:6E:93:9D:E3:92:BD:C7:2F:47:7A:FF:CB:24:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQ3JRHUlbpOd45K9xy9Hev_LJO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2e4b47-680a-4455-9b69-9febec645b6d/1/aQ3JRHUlbpOd45K9xy9Hev_LJO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2e4b47-680a-4455-9b69-9febec645b6d/1/aQ3JRHUlbpOd45K9xy9Hev_LJO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:6e:b2:0f:fa:a5:8b:19:0f:e2:2e:97:59:9e:65:cb:bc:
         02:8f:fa:b3:17:64:91:6e:49:fe:75:a2:bf:40:cd:05:d2:fd:
         10:79:f0:6d:81:77:6a:6d:97:e0:5f:fa:63:60:88:f6:50:32:
         85:97:c9:fd:75:62:e8:c4:57:dc:57:ae:19:fa:30:00:fb:8c:
         a8:0e:b7:fc:e2:50:47:6f:66:fe:08:ec:e9:de:09:b8:3b:92:
         6f:59:e5:68:3a:5a:fb:7a:71:87:04:0c:38:07:b6:df:4b:a1:
         18:c2:89:eb:a6:03:d5:db:47:6e:1f:06:32:3f:19:e3:8e:f4:
         c4:21:5e:d2:ac:ce:02:dd:55:d2:1a:6c:d9:18:e8:64:1c:b8:
         3b:56:88:b4:61:91:93:dd:37:9d:3c:07:f9:4c:ae:76:22:f3:
         6d:d4:97:92:53:27:75:9c:50:a5:8e:4e:a9:28:7c:57:cd:a2:
         25:16:e4:87:ad:43:1a:91:a0:70:5a:bf:38:f3:5a:e4:26:7c:
         35:0f:b2:1a:46:3e:b4:23:fe:48:ea:23:05:e4:e5:bf:ad:c3:
         99:39:3f:90:87:29:ad:d5:13:20:ce:2e:cb:f7:95:56:2b:2f:
         7f:df:2f:62:70:04:95:b3:fc:b6:5a:f2:a7:6f:37:33:2f:fd:
         d4:4d:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----