Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fad928-339d-4833-9ad8-02c73d6464a8/1/eIGtfhP8ZsItChMzOyNakJze4yw.mft
File:                     eIGtfhP8ZsItChMzOyNakJze4yw.mft (raw, json)
Hash identifier:          EZdMhkbSaWPrtr2K20/9FbIMvdKr0n6XZQieU5Gi9rk=
Subject key identifier:   06:AE:7A:A1:53:3E:2C:A9:6B:5F:68:91:89:44:81:63:23:4D:35:9D
Authority key identifier: 78:81:AD:7E:13:FC:66:C2:2D:0A:13:33:3B:23:5A:90:9C:DE:E3:2C
Certificate issuer:       /CN=7881ad7e13fc66c22d0a13333b235a909cdee32c
Certificate serial:       018538649253F0FCC296FD3F5CE5ED863F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIGtfhP8ZsItChMzOyNakJze4yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/fad928-339d-4833-9ad8-02c73d6464a8/1/eIGtfhP8ZsItChMzOyNakJze4yw.mft
Manifest number:          0390
Signing time:             Thu 22 Dec 2022 05:53:13 +0000
Manifest this update:     Thu 22 Dec 2022 05:53:13 +0000
Manifest next update:     Fri 23 Dec 2022 05:53:13 +0000
Files and hashes:         1: eIGtfhP8ZsItChMzOyNakJze4yw.crl (hash: dmCzysNmdFfZivjWWGWoWFKFtl8qH3TJVaQVRgPRrQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:38:64:92:53:f0:fc:c2:96:fd:3f:5c:e5:ed:86:3f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7881ad7e13fc66c22d0a13333b235a909cdee32c
        Validity
            Not Before: Dec 22 05:53:13 2022 GMT
            Not After : Dec 23 05:53:13 2022 GMT
        Subject: CN=06ae7aa1533e2ca96b5f689189448163234d359d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:b0:e7:c4:6c:24:43:3e:5b:d5:d4:f5:43:
                    9f:e4:c8:19:5d:8a:01:99:1d:b8:ef:83:0e:c5:e5:
                    88:c9:95:20:b2:47:71:c9:c4:25:31:62:2c:e9:34:
                    27:7a:39:4c:00:20:9e:86:22:9d:22:cd:67:8f:27:
                    fa:41:f1:0b:35:41:be:36:35:83:64:6d:9c:08:e8:
                    10:d4:06:fe:54:7e:70:c0:da:42:40:e6:5e:5c:4f:
                    b4:78:c0:a0:30:13:37:c1:c0:c4:af:e0:72:d4:67:
                    ad:76:13:56:f2:67:b5:e2:d3:57:b6:13:b3:0b:69:
                    d0:1d:f6:fc:d2:dc:ed:bf:c5:70:89:09:cb:68:f6:
                    a6:91:e1:4e:dd:9f:3d:12:2e:5d:e8:7e:c7:ef:5d:
                    12:7f:1e:db:49:f2:ac:7a:f3:4a:0e:a3:ed:f5:15:
                    61:68:f2:94:17:65:4e:90:90:f0:23:ae:54:fd:94:
                    5e:7a:80:f6:60:8a:b3:8c:92:84:8d:7e:57:d3:32:
                    f3:3f:8f:49:83:89:d9:f3:30:eb:29:77:03:1a:67:
                    75:71:a6:e8:c7:e3:08:67:cf:39:6f:16:44:5f:31:
                    f8:67:d3:13:1d:f9:50:ec:73:56:31:7f:76:b2:49:
                    9d:05:46:75:f0:1a:0b:f0:3f:79:84:d5:f6:f4:bb:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:7A:A1:53:3E:2C:A9:6B:5F:68:91:89:44:81:63:23:4D:35:9D
            X509v3 Authority Key Identifier:
                keyid:78:81:AD:7E:13:FC:66:C2:2D:0A:13:33:3B:23:5A:90:9C:DE:E3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIGtfhP8ZsItChMzOyNakJze4yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fad928-339d-4833-9ad8-02c73d6464a8/1/eIGtfhP8ZsItChMzOyNakJze4yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fad928-339d-4833-9ad8-02c73d6464a8/1/eIGtfhP8ZsItChMzOyNakJze4yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:ec:d1:60:62:99:70:61:a9:a0:21:f2:43:4e:8b:8a:cc:
         0d:29:0e:b5:25:2c:89:d4:fb:96:df:1e:78:1f:51:68:05:a1:
         8c:1d:39:e4:6b:db:70:de:0e:8d:bf:cd:da:10:74:17:b2:33:
         32:48:8b:4c:c2:ec:34:e5:bd:66:21:c7:fa:9e:23:00:1f:23:
         a5:8b:48:3e:53:df:ca:45:ab:57:00:18:75:f0:15:bb:7c:df:
         b4:e4:b2:9b:71:2d:e3:98:e0:24:a5:6d:22:7a:45:2b:b2:6f:
         1e:55:e2:fd:a4:22:13:99:0b:32:e2:9c:e8:5d:3a:b8:81:98:
         92:2f:9c:5d:3c:a3:bc:7d:a7:99:19:fe:94:b4:d6:ca:80:f7:
         6c:78:c9:f7:c8:01:f9:36:95:c1:0e:10:a4:56:b1:2b:47:65:
         3a:02:a0:c3:a1:44:fd:f7:dd:89:58:ce:2d:9c:9f:30:da:2f:
         5d:84:14:45:13:1a:85:59:67:9c:87:87:6d:a7:64:d6:8c:cd:
         73:28:2e:cf:56:e0:92:97:2d:d2:45:7d:1d:85:a6:83:f6:55:
         37:db:36:ce:83:21:59:60:c2:c7:05:cf:47:e1:b5:ae:56:cf:
         c4:e2:a3:9d:bd:9a:41:77:fc:b5:c4:bb:db:82:e0:d6:25:0c:
         83:96:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----