Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36b36e-f7f2-416f-ae42-07404c27c9eb/1/4TOvC9Hn_qkipUUSUVQiHm-0Fa0.mft
File:                     4TOvC9Hn_qkipUUSUVQiHm-0Fa0.mft (raw, json)
Hash identifier:          26eP0NNqKap5hedNorxxj/wD1f6S4EzqO9uQ0XZEPeU=
Subject key identifier:   25:51:D4:B4:37:0F:D3:20:39:07:0A:98:C2:BB:12:F3:B5:C1:76:30
Authority key identifier: E1:33:AF:0B:D1:E7:FE:A9:22:A5:45:12:51:54:22:1E:6F:B4:15:AD
Certificate issuer:       /CN=e133af0bd1e7fea922a545125154221e6fb415ad
Certificate serial:       018BEAAC21B4B8AC74A057675A0B4C2E21F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TOvC9Hn_qkipUUSUVQiHm-0Fa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/36b36e-f7f2-416f-ae42-07404c27c9eb/1/4TOvC9Hn_qkipUUSUVQiHm-0Fa0.mft
Manifest number:          57
Signing time:             Mon 20 Nov 2023 03:00:31 +0000
Manifest this update:     Mon 20 Nov 2023 03:00:31 +0000
Manifest next update:     Tue 21 Nov 2023 03:00:31 +0000
Files and hashes:         1: 4TOvC9Hn_qkipUUSUVQiHm-0Fa0.crl (hash: 0llVKNQY0yGkbfXwMPfhWyFMQtG3yumUsYvDmR0lSMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:ac:21:b4:b8:ac:74:a0:57:67:5a:0b:4c:2e:21:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e133af0bd1e7fea922a545125154221e6fb415ad
        Validity
            Not Before: Nov 20 03:00:31 2023 GMT
            Not After : Nov 21 03:00:31 2023 GMT
        Subject: CN=2551d4b4370fd32039070a98c2bb12f3b5c17630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:e1:7b:29:28:53:f1:c9:79:20:4d:61:bd:
                    a9:fd:72:54:ad:eb:9d:82:87:2b:68:2c:d1:08:cb:
                    e3:1c:ad:c2:e4:89:75:42:f5:bc:07:a8:75:96:8f:
                    67:7e:a4:df:67:6b:42:94:0b:52:f8:dd:11:c1:3c:
                    8f:24:0f:5a:6f:3d:1b:74:55:50:b9:72:db:d8:48:
                    47:27:5a:bf:5c:99:60:31:62:35:aa:93:28:3b:26:
                    44:ab:db:cf:9f:d3:d8:06:c2:85:c8:ae:24:4b:50:
                    cf:e8:27:7d:c7:0f:a1:bf:61:14:54:95:da:fd:67:
                    10:95:2b:41:a2:05:75:1e:c7:9f:ed:b5:6e:ca:11:
                    ad:7f:51:3d:cc:a5:15:02:7f:d8:56:01:78:17:e2:
                    9e:1f:87:ba:50:9a:d8:7c:82:32:b9:54:0b:f8:bc:
                    a7:96:d6:57:7b:4f:ac:7c:f1:4f:e6:12:38:01:6b:
                    bc:6b:5e:51:3a:91:12:1f:84:91:89:10:0c:1d:f6:
                    a7:fe:96:8a:9f:86:ae:ac:93:39:a8:b7:07:b9:0c:
                    97:d4:e8:0e:e3:39:7c:7d:43:96:54:18:2b:18:f7:
                    66:16:e4:2e:6a:05:e5:5e:09:ee:d6:be:53:9a:cc:
                    82:4e:2e:29:8a:92:bf:19:87:e2:23:79:75:8a:ee:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:D4:B4:37:0F:D3:20:39:07:0A:98:C2:BB:12:F3:B5:C1:76:30
            X509v3 Authority Key Identifier:
                keyid:E1:33:AF:0B:D1:E7:FE:A9:22:A5:45:12:51:54:22:1E:6F:B4:15:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TOvC9Hn_qkipUUSUVQiHm-0Fa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36b36e-f7f2-416f-ae42-07404c27c9eb/1/4TOvC9Hn_qkipUUSUVQiHm-0Fa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36b36e-f7f2-416f-ae42-07404c27c9eb/1/4TOvC9Hn_qkipUUSUVQiHm-0Fa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:38:40:f1:35:c9:75:96:2d:c7:75:cb:52:31:53:5c:8f:
         18:06:7a:a2:3c:89:7a:42:f4:86:d0:5e:8e:3f:e9:a5:a9:26:
         17:b9:29:ea:4d:aa:84:90:56:a6:05:5b:c8:8b:6e:6f:25:97:
         98:23:d7:ac:9a:ed:9e:10:4e:90:44:62:a7:0d:59:fb:f9:b3:
         a2:e0:7a:dd:ff:49:63:46:45:94:e1:06:44:17:01:56:5d:62:
         30:7c:5d:7f:c5:de:11:96:c0:e7:95:5d:be:50:d2:1f:6c:4e:
         a6:67:ea:b4:48:b8:23:7a:c8:a5:77:b4:5b:04:8a:e2:d4:34:
         ec:05:a9:e2:8e:14:a8:36:0f:4c:c0:f3:e9:6d:7e:60:fd:cb:
         5c:7e:8c:ca:eb:39:fc:16:ca:81:6f:ee:4b:31:87:7a:27:7e:
         d2:fa:43:7c:cb:bd:bd:96:35:cd:96:94:a8:29:1f:1d:42:7c:
         ed:96:63:49:86:c2:a5:61:9c:05:ee:30:56:0d:5a:c5:96:ee:
         00:f8:0b:a8:3b:ba:aa:a4:0f:05:bd:c1:a1:33:77:a8:d4:be:
         19:a3:5c:31:85:e4:ca:cc:9f:90:d6:5d:90:20:8c:58:e6:e4:
         78:53:58:61:7d:e8:78:59:39:a4:a2:98:db:22:46:91:52:83:
         02:01:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----