Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c0ecc-413b-4ff4-9d45-8d1bac1a4f68/1/wNrAskBp3fB5naJTz2YRLgxryO0.mft
File:                     wNrAskBp3fB5naJTz2YRLgxryO0.mft (raw, json)
Hash identifier:          SwoecQOboZ0hJGaWvjuzwBfb4DVZTDPZTBjjbtVRz8c=
Subject key identifier:   44:3C:7F:68:73:8F:36:E2:16:6C:80:0A:BA:93:0B:C6:F2:86:5D:7B
Authority key identifier: C0:DA:C0:B2:40:69:DD:F0:79:9D:A2:53:CF:66:11:2E:0C:6B:C8:ED
Certificate issuer:       /CN=c0dac0b24069ddf0799da253cf66112e0c6bc8ed
Certificate serial:       1CF85B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNrAskBp3fB5naJTz2YRLgxryO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/4c0ecc-413b-4ff4-9d45-8d1bac1a4f68/1/wNrAskBp3fB5naJTz2YRLgxryO0.mft
Manifest number:          08F1
Signing time:             Wed 13 Apr 2022 06:50:31 +0000
Manifest this update:     Wed 13 Apr 2022 06:50:31 +0000
Manifest next update:     Thu 14 Apr 2022 06:50:31 +0000
Files and hashes:         1: wNrAskBp3fB5naJTz2YRLgxryO0.crl (hash: dBTulPFYihYwLGo8lIw60WMQVRkDHSU5AUuFWYwE2LI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486038365 (0x1cf85b5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0dac0b24069ddf0799da253cf66112e0c6bc8ed
        Validity
            Not Before: Apr 13 06:50:31 2022 GMT
            Not After : Apr 14 06:50:31 2022 GMT
        Subject: CN=443c7f68738f36e2166c800aba930bc6f2865d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:22:2c:2f:85:7a:2e:f4:46:04:6a:ef:dd:
                    7e:fa:5f:e4:7a:a2:80:d6:da:a3:a4:21:6b:d1:6c:
                    cf:ee:32:88:ec:d4:26:65:e4:1b:d8:40:03:d8:ae:
                    ea:46:19:e2:18:8b:cb:af:1a:b1:6a:33:7c:74:dd:
                    8a:a9:17:30:23:cf:23:18:a4:b2:e6:71:6e:22:d1:
                    94:44:1d:27:c3:9f:1f:64:73:96:85:70:9e:54:e5:
                    27:09:d4:48:27:25:fb:db:c7:03:1b:06:70:81:0f:
                    ab:22:ac:e2:1e:fa:53:e4:eb:5b:fc:ab:58:13:5d:
                    06:64:34:90:4a:03:0a:2e:11:fb:77:34:9c:14:26:
                    c2:ab:e8:1c:44:85:37:4a:7b:e3:4c:53:98:13:58:
                    a8:44:39:2c:2c:08:8c:ba:ee:64:83:fe:a5:f2:42:
                    c5:fa:49:a1:91:c2:ef:f1:e0:67:c1:60:43:f9:bb:
                    ec:8d:38:e8:1e:b5:66:ad:03:8c:d0:02:93:99:c8:
                    b3:5b:99:70:81:33:4c:9f:95:9f:5e:8d:ca:3a:d4:
                    ac:14:19:3e:12:e9:fe:fe:03:a9:c8:41:9e:63:17:
                    69:ce:26:2b:09:6d:c0:e5:e9:0a:32:6e:8c:1c:1d:
                    4f:79:aa:82:a3:bf:16:84:5c:92:96:f3:67:00:e4:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3C:7F:68:73:8F:36:E2:16:6C:80:0A:BA:93:0B:C6:F2:86:5D:7B
            X509v3 Authority Key Identifier:
                keyid:C0:DA:C0:B2:40:69:DD:F0:79:9D:A2:53:CF:66:11:2E:0C:6B:C8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNrAskBp3fB5naJTz2YRLgxryO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c0ecc-413b-4ff4-9d45-8d1bac1a4f68/1/wNrAskBp3fB5naJTz2YRLgxryO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c0ecc-413b-4ff4-9d45-8d1bac1a4f68/1/wNrAskBp3fB5naJTz2YRLgxryO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:66:9f:00:43:0b:6f:15:d0:08:93:a4:fe:49:7f:78:4f:bc:
         87:c6:3b:76:c2:a0:1b:be:64:66:6b:c3:2d:fa:1e:e9:8f:ce:
         f5:18:ad:da:f4:62:5c:15:f5:56:1f:da:4d:c4:f8:04:5c:7b:
         c1:c5:83:95:56:a2:2b:02:77:51:1d:48:53:ec:d5:d1:2f:38:
         8d:f2:e8:e9:3e:73:3b:12:e9:1e:44:41:4f:06:d8:85:2c:1f:
         5c:2d:10:16:96:fb:9b:69:1f:bc:f8:11:5d:28:e5:58:f3:67:
         43:b7:d1:55:5e:05:34:2a:8b:68:98:de:0c:de:6e:9d:90:de:
         18:b4:d8:00:67:52:0f:62:cc:05:02:2c:83:14:dc:32:29:a6:
         3f:b0:ec:ff:71:2a:83:11:3a:0b:72:ff:da:21:50:1d:bd:2b:
         1f:42:23:97:47:d3:a9:b3:ee:de:1b:60:f3:9b:fd:cf:f4:dc:
         83:15:54:3d:74:59:69:7b:2d:b1:a6:31:dc:c6:47:7d:83:77:
         cf:f8:1b:fb:bc:2f:0c:34:b2:c7:dd:a3:f4:79:06:b5:df:21:
         97:60:ad:d7:33:82:cc:32:2e:00:b6:89:c6:bb:bd:bb:6e:77:
         52:1f:3c:3c:b9:01:71:89:6e:4f:21:07:e4:3f:3a:be:2e:95:
         5a:26:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----