Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a9e127-b52d-4b81-8bea-bf769f08fe71/1/j_jBL-3U7XoKhO-zZXNXWgbocwc.mft
File:                     j_jBL-3U7XoKhO-zZXNXWgbocwc.mft (raw, json)
Hash identifier:          fpsWUB6qQG4QVic12By4UfGSbDbZWNv+BOf7mryCk2E=
Subject key identifier:   31:14:29:F3:31:16:98:35:8B:A9:90:84:06:CA:FD:15:EE:7B:1C:0E
Authority key identifier: 8F:F8:C1:2F:ED:D4:ED:7A:0A:84:EF:B3:65:73:57:5A:06:E8:73:07
Certificate issuer:       /CN=8ff8c12fedd4ed7a0a84efb36573575a06e87307
Certificate serial:       018C0F26A78AF5D29FC1962BE18C9D5D7A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_jBL-3U7XoKhO-zZXNXWgbocwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/a9e127-b52d-4b81-8bea-bf769f08fe71/1/j_jBL-3U7XoKhO-zZXNXWgbocwc.mft
Manifest number:          08D9
Signing time:             Mon 27 Nov 2023 05:00:40 +0000
Manifest this update:     Mon 27 Nov 2023 05:00:40 +0000
Manifest next update:     Tue 28 Nov 2023 05:00:40 +0000
Files and hashes:         1: j_jBL-3U7XoKhO-zZXNXWgbocwc.crl (hash: tNLX9sftqJq0q1G1naR1/UQKbPTELKPbtw3ucCV6bg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:26:a7:8a:f5:d2:9f:c1:96:2b:e1:8c:9d:5d:7a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ff8c12fedd4ed7a0a84efb36573575a06e87307
        Validity
            Not Before: Nov 27 05:00:40 2023 GMT
            Not After : Nov 28 05:00:40 2023 GMT
        Subject: CN=311429f3311698358ba9908406cafd15ee7b1c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:d8:c4:a3:60:fd:10:71:b7:ae:17:43:bb:
                    41:3a:a1:8d:66:e5:34:ab:72:63:6a:c6:91:f6:76:
                    40:9e:9e:8c:0e:28:11:4b:9e:4f:d7:ea:12:e9:a6:
                    85:99:50:65:81:b2:52:20:4d:19:d3:5c:13:85:22:
                    d6:4b:63:e2:eb:77:b1:68:a1:6a:1a:5d:ee:18:3f:
                    1b:11:d0:3e:c0:cf:3b:78:18:4c:3e:0b:26:c2:5e:
                    4f:08:20:b7:f5:f4:24:9c:c2:32:1d:c8:a6:65:e3:
                    da:c0:ed:a7:e5:75:ec:d2:15:63:85:7c:99:0f:31:
                    23:2e:29:38:e2:3c:46:f6:30:d8:10:a9:16:68:04:
                    57:cd:d8:c2:48:8a:ed:04:c3:b1:a4:8d:78:93:4f:
                    5e:55:41:d1:8a:41:5a:50:2a:3f:51:88:28:1f:3f:
                    70:fc:5f:a3:74:94:52:dc:59:74:1e:23:5d:ec:33:
                    2e:3b:37:98:62:6b:43:0a:82:75:13:ec:94:6a:63:
                    4d:de:aa:7d:e9:5a:cb:78:0a:52:e5:a6:5b:71:6f:
                    c0:47:f2:f6:6a:9b:90:3e:2e:ca:25:2d:e2:05:fd:
                    e9:3a:6a:5b:d3:b7:3b:2c:a5:d5:33:68:ce:6e:25:
                    12:9e:5e:78:82:2f:6e:37:6a:80:95:73:8c:dd:de:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:14:29:F3:31:16:98:35:8B:A9:90:84:06:CA:FD:15:EE:7B:1C:0E
            X509v3 Authority Key Identifier:
                keyid:8F:F8:C1:2F:ED:D4:ED:7A:0A:84:EF:B3:65:73:57:5A:06:E8:73:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_jBL-3U7XoKhO-zZXNXWgbocwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a9e127-b52d-4b81-8bea-bf769f08fe71/1/j_jBL-3U7XoKhO-zZXNXWgbocwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a9e127-b52d-4b81-8bea-bf769f08fe71/1/j_jBL-3U7XoKhO-zZXNXWgbocwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:4d:61:7c:a9:97:17:5c:08:c1:1c:23:73:a6:b0:d9:d4:
         aa:50:b4:b6:c0:ff:26:61:31:58:53:c9:2f:ad:60:0f:f0:26:
         8a:53:b9:93:18:a9:80:e7:7c:4c:70:76:04:f3:48:ee:41:bb:
         f5:c9:2d:93:85:29:47:c8:fc:2d:0c:7b:12:7d:36:da:bd:9a:
         47:c3:70:35:1e:2f:76:f8:c1:bc:6d:e0:e2:d9:04:43:f2:e5:
         44:ef:a9:9c:1c:94:79:ec:98:ca:46:8a:4d:36:bb:84:dd:98:
         76:ee:25:eb:ab:be:47:38:52:e4:b8:0d:cf:dd:64:1d:83:40:
         80:9f:7b:b1:1f:f9:94:7f:a6:0c:c1:5f:7d:54:02:c2:1e:f6:
         f8:f4:5e:5e:22:69:e2:35:2d:ad:f5:58:1a:98:d2:28:2a:e5:
         1c:42:58:bb:b1:a9:40:a7:8e:7a:ca:70:2d:14:33:99:40:5c:
         3b:7b:a1:a0:b0:f6:c3:df:9c:0d:e5:0f:d3:25:52:f0:94:ef:
         7c:16:73:11:6e:21:f3:0e:dd:ff:8e:21:09:5e:2e:7a:a1:64:
         66:8a:ab:3e:20:07:1a:74:ab:4b:63:f9:4d:7b:99:c6:c1:4d:
         82:53:9d:72:66:52:bc:47:84:16:2f:d7:1b:8f:ce:b2:ce:34:
         39:12:9a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----