Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/0uNa8961OjF_sOc2WlpP_i-tljU.mft
File:                     0uNa8961OjF_sOc2WlpP_i-tljU.mft (raw, json)
Hash identifier:          g3miMTm387sHkXk1AKWaYOws4xm+3UbM3zmnzc2HmmU=
Subject key identifier:   29:AE:15:C7:B3:0D:B6:CD:5D:D0:B6:A9:23:5A:67:50:1C:36:04:DA
Authority key identifier: D2:E3:5A:F3:DE:B5:3A:31:7F:B0:E7:36:5A:5A:4F:FE:2F:AD:96:35
Certificate issuer:       /CN=d2e35af3deb53a317fb0e7365a5a4ffe2fad9635
Certificate serial:       018AF86E1A2BA88A5DAC70EAB19ECAAABFDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uNa8961OjF_sOc2WlpP_i-tljU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/0uNa8961OjF_sOc2WlpP_i-tljU.mft
Manifest number:          08B0
Signing time:             Wed 04 Oct 2023 02:04:39 +0000
Manifest this update:     Wed 04 Oct 2023 02:04:39 +0000
Manifest next update:     Thu 05 Oct 2023 02:04:39 +0000
Files and hashes:         1: 0uNa8961OjF_sOc2WlpP_i-tljU.crl (hash: y+og7YTi1LyXLoQ40UnBrXcVDoQNsoluEsYLti1liN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:6e:1a:2b:a8:8a:5d:ac:70:ea:b1:9e:ca:aa:bf:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e35af3deb53a317fb0e7365a5a4ffe2fad9635
        Validity
            Not Before: Oct  4 02:04:39 2023 GMT
            Not After : Oct  5 02:04:39 2023 GMT
        Subject: CN=29ae15c7b30db6cd5dd0b6a9235a67501c3604da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:94:ed:51:8b:d5:ef:79:27:e0:7c:27:fa:
                    6d:c4:77:d4:bc:e2:0f:64:1c:90:f7:62:a7:cf:2b:
                    5f:ef:be:74:26:37:b5:8b:03:63:ba:9b:72:fc:6d:
                    4d:da:77:24:8c:88:95:c1:2d:3c:85:23:ba:f1:e4:
                    af:8e:5f:a7:cf:3b:6f:21:6e:03:8a:f3:38:42:b4:
                    64:01:74:92:47:4f:55:dd:57:88:9a:0d:82:b0:41:
                    07:63:28:c7:2e:a1:4c:73:b9:c4:46:c0:19:e3:5b:
                    0f:f2:91:93:0b:c5:08:6c:75:89:03:50:fe:1b:d6:
                    f8:69:f1:c9:f5:e3:8d:26:0c:cf:1b:8b:de:d5:dc:
                    ed:90:9b:17:d3:6f:5b:8b:38:5d:ce:a3:a6:ea:0f:
                    37:75:2b:97:1e:3b:70:6c:cd:49:ef:ac:0a:ef:2b:
                    af:bd:1f:08:d7:96:7a:5c:c0:a6:2b:f8:5e:53:62:
                    22:13:27:3b:cd:6f:c2:ce:c3:59:c5:9e:87:18:aa:
                    e5:db:84:26:29:5f:f7:21:aa:dd:b3:9f:46:5b:07:
                    4d:fd:19:98:15:c8:5b:71:f5:21:3e:a4:a0:e5:bf:
                    b4:42:81:7b:22:f9:c7:2f:23:89:2b:34:d5:18:df:
                    a5:7e:a4:c8:54:81:a2:c5:dd:f9:9e:33:eb:30:0d:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:15:C7:B3:0D:B6:CD:5D:D0:B6:A9:23:5A:67:50:1C:36:04:DA
            X509v3 Authority Key Identifier:
                keyid:D2:E3:5A:F3:DE:B5:3A:31:7F:B0:E7:36:5A:5A:4F:FE:2F:AD:96:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uNa8961OjF_sOc2WlpP_i-tljU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/0uNa8961OjF_sOc2WlpP_i-tljU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/0uNa8961OjF_sOc2WlpP_i-tljU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:12:7c:64:b7:61:f4:48:c0:50:17:76:12:81:9a:3d:2f:e2:
         fc:f5:a4:4a:9f:b7:cd:cb:68:2a:5f:fc:0e:27:ce:07:2a:ce:
         ba:97:77:88:88:c4:3e:a0:27:b2:29:d0:82:bc:d0:41:c2:e6:
         84:c6:ec:9d:db:c7:71:67:1d:1e:78:4b:ea:f9:59:4d:25:54:
         fe:dd:a9:3b:4b:32:63:81:8f:cd:f0:19:dd:39:79:c3:97:14:
         d9:4d:0f:84:b4:45:ff:49:4a:69:8d:c5:f5:f8:f6:fa:8b:47:
         61:35:30:c6:cd:38:90:92:8a:ef:59:24:57:87:69:a0:89:f4:
         91:14:2a:b5:94:93:e4:67:2c:00:3e:f7:e0:a9:63:51:18:83:
         ca:8c:12:58:11:2b:7e:81:85:9b:87:8e:da:49:58:1f:bb:aa:
         11:20:b6:09:b2:d5:21:6c:13:0e:df:1b:92:7b:63:6e:23:1f:
         55:58:60:28:65:aa:56:8b:98:8b:61:6f:0a:6c:fa:f2:d1:fc:
         26:3a:6e:7c:10:87:ba:c3:02:56:c3:73:dc:63:00:a7:61:b6:
         3c:d0:1c:2b:5b:80:7a:b1:ab:2b:7f:e7:3f:af:61:2e:33:8d:
         b4:0a:82:fe:c3:7d:f8:6d:a6:4b:19:9d:f3:6a:e9:4f:d6:df:
         ef:61:46:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----