Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5d1b49-c57c-4291-8313-9d799c604f90/1/1-ND5nGlbDN-3XMedpw_vaCM7W90.mft
File:                     1-ND5nGlbDN-3XMedpw_vaCM7W90.mft (raw, json)
Hash identifier:          Jyfv/M7iF1BNfxETVta+vmEGNjQN9HuAXWvdIMeKTW0=
Subject key identifier:   08:8C:AC:FD:F4:51:4C:99:99:8D:EA:D1:7C:3D:57:4E:DB:36:67:73
Authority key identifier: F8:D0:F9:9C:69:5B:0C:DF:B7:5C:C7:9D:A7:0F:EF:68:23:3B:5B:DD
Certificate issuer:       /CN=f8d0f99c695b0cdfb75cc79da70fef68233b5bdd
Certificate serial:       018B02B7F12685EF3E37BCCD9BA1B7A9FEED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ND5nGlbDN-3XMedpw_vaCM7W90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/5d1b49-c57c-4291-8313-9d799c604f90/1/1-ND5nGlbDN-3XMedpw_vaCM7W90.mft
Manifest number:          0136
Signing time:             Fri 06 Oct 2023 02:01:31 +0000
Manifest this update:     Fri 06 Oct 2023 02:01:31 +0000
Manifest next update:     Sat 07 Oct 2023 02:01:31 +0000
Files and hashes:         1: 1-ND5nGlbDN-3XMedpw_vaCM7W90.crl (hash: lMsXIpGL6U0OXDWWnfoO3S3eg+RM88Cnq68mGTJvpIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:02:b7:f1:26:85:ef:3e:37:bc:cd:9b:a1:b7:a9:fe:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d0f99c695b0cdfb75cc79da70fef68233b5bdd
        Validity
            Not Before: Oct  6 02:01:31 2023 GMT
            Not After : Oct  7 02:01:31 2023 GMT
        Subject: CN=088cacfdf4514c99998dead17c3d574edb366773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:c1:bc:01:11:4e:00:57:70:25:d7:97:df:
                    3f:ac:30:5d:af:35:b8:36:5b:56:cc:88:04:8e:c7:
                    76:2e:2d:3b:98:e7:a9:88:ac:c9:7f:54:b0:ca:06:
                    53:17:ba:bd:4a:e2:d1:0f:de:3d:71:35:bc:87:40:
                    a1:10:15:2e:b9:6f:93:ea:9b:88:de:b9:1f:20:27:
                    69:a8:2f:16:62:ae:d4:eb:3d:5a:4f:12:26:9a:a1:
                    01:20:82:d2:4f:a8:71:00:d7:ec:42:fd:4d:e5:89:
                    1f:d5:ec:4e:74:c7:7b:78:8f:59:66:84:c7:31:cc:
                    c6:81:ba:81:c0:fe:1f:0d:d6:29:ea:87:8a:3a:51:
                    c4:71:05:f8:59:c1:ed:7d:09:fa:07:cd:c9:2a:93:
                    7b:5e:31:a6:50:80:6a:17:9d:68:41:73:94:96:be:
                    ca:51:3f:ad:66:1b:0a:dd:c6:f2:96:8b:f6:d4:6a:
                    75:13:e2:af:2e:ad:ec:4c:94:a8:32:a1:e0:95:8a:
                    9d:fa:8a:96:23:19:7b:f3:91:34:a5:d4:6a:1b:d7:
                    f6:c3:96:57:f2:47:aa:78:1a:ec:ad:63:2a:62:96:
                    50:1f:b9:50:8b:24:c8:3f:b0:37:01:36:c5:a7:8c:
                    fb:ff:a6:71:73:6c:69:f8:24:75:03:c9:fb:9a:e3:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:AC:FD:F4:51:4C:99:99:8D:EA:D1:7C:3D:57:4E:DB:36:67:73
            X509v3 Authority Key Identifier:
                keyid:F8:D0:F9:9C:69:5B:0C:DF:B7:5C:C7:9D:A7:0F:EF:68:23:3B:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ND5nGlbDN-3XMedpw_vaCM7W90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5d1b49-c57c-4291-8313-9d799c604f90/1/1-ND5nGlbDN-3XMedpw_vaCM7W90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5d1b49-c57c-4291-8313-9d799c604f90/1/1-ND5nGlbDN-3XMedpw_vaCM7W90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:56:dd:b0:12:df:b8:32:1f:fb:50:a7:cf:ff:0a:88:cb:d2:
         e3:11:fa:43:25:30:c4:92:c8:66:ec:a1:5d:12:41:50:55:15:
         42:90:23:95:ce:8e:41:9c:98:a4:f1:9e:1b:6d:e3:5d:f0:57:
         7a:4c:9a:55:0f:15:18:f0:02:75:64:38:8f:b0:49:33:d0:e4:
         f5:58:7c:16:ee:ba:ac:d2:ec:03:8e:65:94:c9:c5:f7:7c:ed:
         ad:99:46:aa:30:da:52:51:4f:12:c9:08:a3:23:78:32:ac:25:
         97:9f:b5:9b:0f:2b:e6:f9:a9:bf:c5:6b:a7:2d:c8:67:79:f4:
         e1:4d:57:ad:b3:c9:92:ed:08:43:c9:da:43:41:d5:e2:f6:aa:
         5b:d8:37:6c:ae:b8:26:94:9d:c8:4a:3e:55:0e:a0:51:be:8e:
         cd:84:19:ec:47:77:e7:97:9e:bd:5a:2e:64:25:09:2a:95:11:
         ed:eb:ae:46:9b:28:b7:4b:10:f7:4d:b8:4c:01:2b:e9:c4:3a:
         f7:5e:65:17:5d:2c:a5:60:08:3d:8a:10:26:3d:46:2c:45:7c:
         11:ac:ed:0e:df:37:3d:30:c6:fd:dd:db:49:a5:07:38:68:a4:
         bd:92:a7:a5:72:cf:c3:3c:54:b5:cb:95:01:2a:b0:6b:99:69:
         43:18:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----