Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/9lXt0LjDTzFWU3HwoWV9HV57A1k.mft
File:                     9lXt0LjDTzFWU3HwoWV9HV57A1k.mft (raw, json)
Hash identifier:          6cPnhUBMvkQNZHmGsTElvJnY0kxv0b4Jc8Wd9UfuH9M=
Subject key identifier:   CB:DE:C5:54:EB:06:41:4F:2B:8F:C4:8D:C8:7E:D7:B4:0B:5D:8F:8D
Authority key identifier: F6:55:ED:D0:B8:C3:4F:31:56:53:71:F0:A1:65:7D:1D:5E:7B:03:59
Certificate issuer:       /CN=f655edd0b8c34f31565371f0a1657d1d5e7b0359
Certificate serial:       018809B245379ED306766B1A1B8D541EAB2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lXt0LjDTzFWU3HwoWV9HV57A1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/9lXt0LjDTzFWU3HwoWV9HV57A1k.mft
Manifest number:          0D76
Signing time:             Thu 11 May 2023 07:24:17 +0000
Manifest this update:     Thu 11 May 2023 07:24:17 +0000
Manifest next update:     Fri 12 May 2023 07:24:17 +0000
Files and hashes:         1: 9lXt0LjDTzFWU3HwoWV9HV57A1k.crl (hash: +P0NSke5REmPnh2xBHHl2epvA2yY3Xi6R4Kn02RCVVc=)
                          2: n7-bDJEU_X4Ik826RkNK1AMnUTs.roa (hash: TIU8FKr0V1P4rOaJhrWfS2l3AkDzUw1/5irLDRuHGVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:09:b2:45:37:9e:d3:06:76:6b:1a:1b:8d:54:1e:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f655edd0b8c34f31565371f0a1657d1d5e7b0359
        Validity
            Not Before: May 11 07:24:17 2023 GMT
            Not After : May 12 07:24:17 2023 GMT
        Subject: CN=cbdec554eb06414f2b8fc48dc87ed7b40b5d8f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:a1:92:ef:29:7f:21:cf:8f:02:3d:85:c0:
                    8b:c4:06:da:08:1c:55:dd:2b:f1:b8:46:e2:38:27:
                    fe:53:c5:d8:1d:84:95:a6:c9:73:25:78:e3:96:64:
                    3c:6c:a8:02:a8:9e:f5:0d:c2:07:db:fd:ad:66:06:
                    5f:80:8e:ec:17:69:2d:b2:f0:5a:a6:dd:85:e1:50:
                    60:b1:e9:ad:12:bb:05:99:d3:d8:2c:23:9f:99:28:
                    91:d1:a5:ba:1b:f3:52:55:ac:88:65:f9:10:7c:e7:
                    b2:75:fe:97:b9:fb:69:d2:8c:08:0c:9a:5e:0b:ea:
                    11:7a:f7:01:3a:dc:ac:7c:e0:21:55:62:7e:57:33:
                    1d:e3:8d:3c:22:e5:3c:6d:77:ce:5e:02:a2:e9:fe:
                    39:ac:9b:cd:d5:f0:11:69:51:36:77:1c:48:f2:28:
                    9f:27:7a:9d:a8:d8:4c:d8:05:67:5c:cb:0b:bf:7c:
                    54:24:dc:d2:45:a2:96:66:7d:93:f8:28:29:a9:f7:
                    5b:fb:c7:b4:3b:7a:fc:18:bc:78:97:b9:c2:a9:58:
                    1a:df:a3:c2:0f:2f:1b:8b:c1:7b:b4:89:68:a2:5b:
                    1f:09:ad:8d:d0:14:4b:53:f7:c7:ee:f0:c5:1f:eb:
                    5e:f1:d1:43:5d:0a:b8:df:fd:c1:50:b5:3c:53:4a:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DE:C5:54:EB:06:41:4F:2B:8F:C4:8D:C8:7E:D7:B4:0B:5D:8F:8D
            X509v3 Authority Key Identifier:
                keyid:F6:55:ED:D0:B8:C3:4F:31:56:53:71:F0:A1:65:7D:1D:5E:7B:03:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lXt0LjDTzFWU3HwoWV9HV57A1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/9lXt0LjDTzFWU3HwoWV9HV57A1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/819c09-5490-4b1e-a30a-79e9071397e2/1/9lXt0LjDTzFWU3HwoWV9HV57A1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:70:0f:ee:50:95:a1:66:1f:f4:56:44:43:96:21:00:90:ed:
         a2:2a:8a:53:ed:80:f8:21:5e:4a:0c:38:20:6e:c3:04:9b:5b:
         2e:91:45:94:91:6d:91:47:30:51:a0:f4:35:be:3b:72:b3:67:
         44:0f:0f:3e:96:6f:71:c6:58:6a:56:87:55:71:bf:1d:6b:a2:
         c3:65:bf:c4:3c:cb:5e:26:dd:fb:35:0c:66:f8:c2:0c:3c:2b:
         de:42:27:20:d8:69:e9:ce:07:92:47:fa:a5:40:bd:bc:e3:81:
         66:a2:b7:bc:17:45:04:bb:eb:44:a7:77:7a:f6:93:fd:b8:cb:
         3f:e4:2f:3f:40:f4:0e:f6:86:02:61:95:a7:4e:ac:05:bc:b3:
         47:28:74:61:8e:83:4f:b5:f7:6c:88:cb:9c:01:bb:f8:30:d0:
         a6:9c:82:69:b0:0b:36:02:f1:f7:01:64:6f:b8:dc:2d:09:95:
         1d:6a:6b:a4:df:63:ab:d0:f9:57:7b:6a:79:46:af:5d:64:6f:
         70:5c:48:85:fa:2f:29:fc:ad:05:8c:8c:38:e0:fe:4d:85:04:
         e8:8f:62:b2:75:da:d5:e1:63:75:ca:e0:ed:db:ef:02:15:c7:
         0b:45:04:2e:cc:07:d0:01:c6:12:13:26:7e:1f:aa:9c:b4:77:
         6f:1c:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----