Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/877ca8-4bba-4dc2-979c-99e5e3e8abfb/1/GRmMpOIF1yOSp7dYW8-g0bbIYNA.mft
File:                     GRmMpOIF1yOSp7dYW8-g0bbIYNA.mft (raw, json)
Hash identifier:          sTCy0hQr7cvGMZeJ+tBFYxJj+s0Q3Them5aB2Rw8AQQ=
Subject key identifier:   60:86:EC:6B:3E:06:A5:11:26:BA:62:6C:E4:91:18:2E:49:5C:4D:5F
Authority key identifier: 19:19:8C:A4:E2:05:D7:23:92:A7:B7:58:5B:CF:A0:D1:B6:C8:60:D0
Certificate issuer:       /CN=19198ca4e205d72392a7b7585bcfa0d1b6c860d0
Certificate serial:       018B02EE6E79A92EF71A8579BC4ED1D892AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRmMpOIF1yOSp7dYW8-g0bbIYNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/877ca8-4bba-4dc2-979c-99e5e3e8abfb/1/GRmMpOIF1yOSp7dYW8-g0bbIYNA.mft
Manifest number:          02F5
Signing time:             Fri 06 Oct 2023 03:01:02 +0000
Manifest this update:     Fri 06 Oct 2023 03:01:02 +0000
Manifest next update:     Sat 07 Oct 2023 03:01:02 +0000
Files and hashes:         1: GRmMpOIF1yOSp7dYW8-g0bbIYNA.crl (hash: u2T9eQ08Xqp5XPdp7Yn/vM0vCa24CKhncaMypTNiTUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:02:ee:6e:79:a9:2e:f7:1a:85:79:bc:4e:d1:d8:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19198ca4e205d72392a7b7585bcfa0d1b6c860d0
        Validity
            Not Before: Oct  6 03:01:02 2023 GMT
            Not After : Oct  7 03:01:02 2023 GMT
        Subject: CN=6086ec6b3e06a51126ba626ce491182e495c4d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:df:4d:6d:7b:f2:0f:e2:3a:60:f9:8f:35:
                    75:60:e1:f0:79:45:bc:95:69:28:d3:33:ea:70:f2:
                    6b:4b:68:b0:f1:9a:aa:5c:c4:5c:dd:1d:a2:7a:a0:
                    2f:82:c6:67:9d:c9:54:04:46:7d:4f:ce:d8:ef:46:
                    9f:25:a7:ef:cb:80:31:37:38:cb:67:22:c3:a1:e3:
                    24:92:9b:fd:6f:b5:8b:73:32:0f:76:36:57:c8:89:
                    6d:55:d7:30:03:40:04:fa:cd:92:a7:4f:90:c4:ba:
                    31:b0:ff:81:8e:fe:57:bf:f7:8a:17:42:2c:ba:3d:
                    ec:37:2d:7d:53:78:c9:80:2f:1b:f5:ca:ec:f8:7c:
                    49:e6:7b:9b:47:58:75:7e:a1:73:ea:9c:6a:52:4c:
                    1c:9b:c4:61:b1:e0:f9:b1:89:97:3c:14:3a:94:1f:
                    6e:12:fc:26:10:ce:52:51:39:6c:ee:ee:8b:1e:59:
                    51:b9:ea:58:b9:66:19:f4:f8:6c:ce:df:69:e2:a2:
                    9e:15:65:20:d4:b9:82:fb:0d:a0:a7:f6:8f:9e:f7:
                    ee:f4:9b:bb:ad:4c:a8:c1:11:6a:12:74:9c:35:72:
                    f6:85:1c:05:ad:2e:c8:2c:fb:0f:4f:4e:4c:57:02:
                    2c:99:32:ec:e7:50:d3:d7:82:2a:12:f8:04:23:04:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:86:EC:6B:3E:06:A5:11:26:BA:62:6C:E4:91:18:2E:49:5C:4D:5F
            X509v3 Authority Key Identifier:
                keyid:19:19:8C:A4:E2:05:D7:23:92:A7:B7:58:5B:CF:A0:D1:B6:C8:60:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRmMpOIF1yOSp7dYW8-g0bbIYNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/877ca8-4bba-4dc2-979c-99e5e3e8abfb/1/GRmMpOIF1yOSp7dYW8-g0bbIYNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/877ca8-4bba-4dc2-979c-99e5e3e8abfb/1/GRmMpOIF1yOSp7dYW8-g0bbIYNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ba:80:d1:50:f1:d3:fb:92:13:08:d6:e2:36:71:65:96:53:
         cb:a5:83:c3:91:75:f9:78:c2:48:97:1e:48:33:e0:c3:5a:6d:
         8e:c6:00:f2:41:74:73:9c:55:5d:6b:2b:f7:1d:f2:82:02:ff:
         5b:b9:a1:63:17:3e:64:dc:11:44:50:49:46:4d:88:f3:bd:7d:
         75:4d:ad:8f:28:96:5f:92:d6:c2:cf:25:99:f2:ae:f0:8d:1c:
         1a:4d:c9:0c:aa:08:64:08:a8:40:a5:4b:86:6b:e5:2b:1b:41:
         c0:54:3d:21:11:2e:13:79:4c:05:3b:20:18:e3:9d:17:72:cd:
         eb:d1:0f:2d:d3:e8:30:63:61:fd:64:56:90:0d:34:ef:59:78:
         6a:84:c3:25:18:1c:30:3f:60:a2:e4:4f:27:20:83:ab:d7:13:
         f6:29:99:e7:cf:a5:f0:0c:38:64:a1:dd:cd:76:4e:25:a2:e5:
         42:83:cb:8b:1a:d2:6d:d2:51:c0:c7:cb:87:72:0e:3e:d4:fd:
         ce:84:0e:c6:2a:08:79:f8:ba:6e:29:d9:ce:e9:b2:4b:c1:5b:
         7c:65:86:dd:ee:18:e2:da:29:5f:b4:e2:e1:6b:2f:c2:9c:7d:
         a5:19:f7:c0:f6:29:d3:b9:f9:b9:9d:f6:97:34:b4:f8:94:51:
         99:c4:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----