Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.mft
File:                     eum-sU5VcrrE_JMLJsrPPZIClmI.mft (raw, json)
Hash identifier:          t4x+007R+PhmveNGP7UxSSXhGE2zOLhC2y4m5yECBpc=
Subject key identifier:   B6:68:8F:8F:2C:F1:B5:57:DF:F2:63:FE:DF:80:33:F2:40:B8:8C:62
Authority key identifier: 7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
Certificate issuer:       /CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
Certificate serial:       018678161BEE3FA476C28834A78EBF4A4589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.mft
Manifest number:          09F5
Signing time:             Wed 22 Feb 2023 07:46:00 +0000
Manifest this update:     Wed 22 Feb 2023 07:46:00 +0000
Manifest next update:     Thu 23 Feb 2023 07:46:00 +0000
Files and hashes:         1: eum-sU5VcrrE_JMLJsrPPZIClmI.crl (hash: E83oZWHJNl0CJrK/lNhjpEpL0IAu2flo1lltuzOYkoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:78:16:1b:ee:3f:a4:76:c2:88:34:a7:8e:bf:4a:45:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
        Validity
            Not Before: Feb 22 07:46:00 2023 GMT
            Not After : Feb 23 07:46:00 2023 GMT
        Subject: CN=b6688f8f2cf1b557dff263fedf8033f240b88c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:99:d4:2d:bc:9b:7d:bc:7f:4b:97:ea:3a:a2:
                    cf:b5:f7:42:ce:ac:46:27:f8:fa:f8:ad:2b:f1:b5:
                    aa:5f:cb:1f:51:48:c4:64:4e:2a:1c:27:00:c1:19:
                    dd:21:73:8a:e1:25:f6:f0:c6:dc:54:15:00:11:5c:
                    3c:70:2d:e4:f6:cb:74:b3:4e:cd:5f:74:d8:55:9b:
                    ef:b0:72:29:16:86:c1:e6:f7:3e:d9:9e:4b:46:9d:
                    ee:f9:df:90:49:83:32:16:ff:92:f4:86:67:83:79:
                    bd:9d:3d:a3:08:0e:37:86:1f:aa:5d:37:ed:cd:0a:
                    d6:6e:23:9f:47:a2:1e:2d:ee:5a:d9:bc:57:b0:1f:
                    fa:e9:2e:50:66:ae:7a:0c:ed:dc:8b:b2:7f:9c:92:
                    3c:92:68:c9:b7:70:e0:34:74:8e:9d:e5:fa:78:e1:
                    1d:eb:80:5d:34:c5:8c:4c:00:36:8b:c7:bb:83:3d:
                    5c:54:ee:e4:7f:4c:a0:5d:0b:73:81:a7:a3:81:77:
                    69:28:fd:5d:8c:6d:c3:14:1e:c1:90:2a:78:f4:36:
                    5e:9c:77:cd:37:b3:24:14:ec:6c:77:99:c5:ad:7d:
                    a0:b3:d6:e5:aa:2e:da:51:1c:1a:8c:59:52:2f:08:
                    20:01:ef:f7:95:f8:43:3e:14:a0:73:18:e6:e6:b4:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:68:8F:8F:2C:F1:B5:57:DF:F2:63:FE:DF:80:33:F2:40:B8:8C:62
            X509v3 Authority Key Identifier:
                keyid:7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b1:9b:e3:7a:21:67:cc:0a:ba:01:fe:8f:f6:44:69:4f:85:
         34:cf:ea:7d:8d:00:b9:46:94:36:44:51:c4:dc:b3:e5:dd:96:
         5c:91:bc:99:f8:81:21:e5:df:3c:a1:af:db:5f:af:a2:ef:a0:
         81:d7:bf:19:f7:9d:a0:60:15:df:01:4f:da:49:8b:c8:d7:3b:
         a2:52:3f:18:66:ac:82:79:9e:2b:2c:fa:5f:e2:a7:39:6c:c2:
         dc:11:e5:bc:03:1b:3d:67:11:e8:0f:97:ba:b9:e9:a2:2f:00:
         fc:bc:98:93:d2:3a:2b:43:1c:9b:1e:8b:8e:1f:4e:3a:22:ea:
         84:30:b1:00:96:d0:06:b4:1e:82:cb:8d:0f:35:0f:8d:e8:f5:
         54:22:d3:2f:30:01:bf:3c:f1:54:e9:f2:1e:e0:c6:a1:83:e5:
         84:c5:da:30:98:8f:2e:9d:f9:55:c6:32:3d:5a:ae:28:d6:0e:
         6a:46:9c:6e:e9:f6:ba:a2:82:12:e8:27:3b:8a:98:4c:d0:e3:
         81:a0:fe:41:5e:78:2d:97:ba:b1:e1:e5:28:58:9b:33:1b:e0:
         fa:93:3c:b5:84:bb:c7:ec:e3:ff:5e:3e:c4:2e:eb:6f:ea:43:
         07:bf:cd:43:49:24:c2:2d:1c:40:bc:f1:63:8e:14:3d:56:7b:
         38:dc:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----