Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.mft
File:                     7JBVnQkwTyLR1CwsyRiIBc_10wY.mft (raw, json)
Hash identifier:          JHUeWN2agx8FEEpheA6SHoUvTQjFiZbsMuMhOnhKS6Y=
Subject key identifier:   13:4A:33:24:D5:51:E6:D8:AE:B1:EA:E0:68:F4:D3:48:92:D4:CA:B3
Authority key identifier: EC:90:55:9D:09:30:4F:22:D1:D4:2C:2C:C9:18:88:05:CF:F5:D3:06
Certificate issuer:       /CN=ec90559d09304f22d1d42c2cc9188805cff5d306
Certificate serial:       01870DE82FDAF97F4876836696E5901521D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JBVnQkwTyLR1CwsyRiIBc_10wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.mft
Manifest number:          04F5
Signing time:             Thu 23 Mar 2023 09:58:52 +0000
Manifest this update:     Thu 23 Mar 2023 09:58:52 +0000
Manifest next update:     Fri 24 Mar 2023 09:58:52 +0000
Files and hashes:         1: 7JBVnQkwTyLR1CwsyRiIBc_10wY.crl (hash: HaGlM80+NIeWD393bK/QUey6d6SRZ6FVjtSwgOE5+Cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:e8:2f:da:f9:7f:48:76:83:66:96:e5:90:15:21:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec90559d09304f22d1d42c2cc9188805cff5d306
        Validity
            Not Before: Mar 23 09:58:52 2023 GMT
            Not After : Mar 24 09:58:52 2023 GMT
        Subject: CN=134a3324d551e6d8aeb1eae068f4d34892d4cab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:31:37:11:dc:93:c0:ab:8e:d9:19:cc:25:
                    fb:c0:01:d6:0e:53:1e:e8:a1:fd:4c:2b:94:c2:38:
                    7e:5a:7b:6c:25:a5:b4:ac:ba:ff:dd:6c:08:c9:5f:
                    a6:74:21:7f:62:ec:29:b8:03:87:98:a0:3c:c6:0b:
                    98:8e:4f:96:bc:29:f5:8f:dc:2c:72:67:36:55:33:
                    38:a3:2f:61:96:24:14:89:84:32:42:c9:06:2c:98:
                    ca:de:15:d7:67:61:d2:dc:96:87:8c:95:79:de:96:
                    6d:ae:01:dc:22:95:c4:87:f1:a5:04:76:16:7b:c7:
                    86:35:f0:9f:d1:dd:b5:e8:9f:a9:78:35:62:bd:68:
                    ba:2d:33:a5:8b:60:44:32:64:d5:d9:b7:f9:51:ed:
                    ed:2a:e2:62:1c:68:18:eb:9e:bd:6a:68:2c:b9:ad:
                    5c:b4:b2:fe:7e:4f:7a:0b:f7:bb:6b:b8:72:d2:40:
                    92:5f:15:bd:2e:50:68:6e:a5:44:a3:a8:a3:bf:58:
                    bd:cd:b8:2b:87:e7:f1:db:c2:f6:99:b2:49:fa:4d:
                    81:ad:33:c4:a8:10:53:0b:91:92:18:fa:37:e9:03:
                    8c:ad:69:45:25:40:55:f1:0d:62:d2:1e:b1:52:cf:
                    9c:ee:3d:97:45:b6:93:8d:d9:37:e7:4e:7b:cd:d4:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4A:33:24:D5:51:E6:D8:AE:B1:EA:E0:68:F4:D3:48:92:D4:CA:B3
            X509v3 Authority Key Identifier:
                keyid:EC:90:55:9D:09:30:4F:22:D1:D4:2C:2C:C9:18:88:05:CF:F5:D3:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JBVnQkwTyLR1CwsyRiIBc_10wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:3a:92:20:af:19:2f:13:82:cf:fc:a0:6c:9b:b2:e4:36:
         26:67:e3:c0:37:f5:ae:a4:8b:8b:ef:60:c6:dd:2a:5e:8d:8b:
         06:40:95:34:9e:7f:76:c0:7f:78:fc:26:5c:6b:25:cf:f8:55:
         2c:50:2d:13:4e:55:4b:66:a2:60:87:5d:83:4f:7c:20:cc:f9:
         ef:c2:aa:9b:ba:d0:3c:8e:ef:c9:3a:2b:df:33:ac:77:68:85:
         84:73:61:4e:c8:30:9b:90:19:c2:f5:27:66:8a:b2:59:4e:16:
         da:ba:60:18:58:83:eb:21:7d:ae:58:32:36:71:9b:d1:52:3e:
         7f:f1:79:a2:0d:06:7b:3d:77:81:f4:83:94:54:c0:3c:77:4a:
         02:1c:50:5f:51:14:e7:0c:4f:39:ba:2e:9d:e7:04:08:37:5b:
         c6:eb:de:45:94:ab:e8:48:07:7a:56:6a:90:23:8e:ad:9f:dd:
         34:bc:98:f4:97:f5:57:31:aa:19:b9:8f:4e:ed:88:b7:fe:ba:
         82:4c:1c:df:68:17:8b:dc:34:17:ad:3c:1d:7c:00:a4:bd:39:
         47:31:83:c1:c0:a1:17:b5:9c:0a:5a:28:2a:c9:fb:5e:8c:4f:
         0a:25:52:a5:b4:99:d8:a9:c4:9a:65:27:dd:cc:07:5f:f5:f6:
         c6:b6:0f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----