Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/26464a-bdc6-4324-ae9f-aa258b031770/1/02p6yc6Fjf0xvaqcgeTUaakXeVY.mft
File:                     02p6yc6Fjf0xvaqcgeTUaakXeVY.mft (raw, json)
Hash identifier:          VSQh8MIVitPkr2sZRi15ubJj2YTIjz4t4Oxs22dCPW4=
Subject key identifier:   51:46:DE:31:74:26:9E:2A:DB:24:26:D5:15:D9:D5:3A:62:E1:46:0C
Authority key identifier: D3:6A:7A:C9:CE:85:8D:FD:31:BD:AA:9C:81:E4:D4:69:A9:17:79:56
Certificate issuer:       /CN=d36a7ac9ce858dfd31bdaa9c81e4d469a9177956
Certificate serial:       018BDBDDB36379E2C22B49A7EDB0088AE203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02p6yc6Fjf0xvaqcgeTUaakXeVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/26464a-bdc6-4324-ae9f-aa258b031770/1/02p6yc6Fjf0xvaqcgeTUaakXeVY.mft
Manifest number:          09E1
Signing time:             Fri 17 Nov 2023 06:00:21 +0000
Manifest this update:     Fri 17 Nov 2023 06:00:21 +0000
Manifest next update:     Sat 18 Nov 2023 06:00:21 +0000
Files and hashes:         1: 02p6yc6Fjf0xvaqcgeTUaakXeVY.crl (hash: uFR0Qe0WUx+Z7VcRZKKN/DG9lIGb2iPt+Q4wOx/wznw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:db:dd:b3:63:79:e2:c2:2b:49:a7:ed:b0:08:8a:e2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36a7ac9ce858dfd31bdaa9c81e4d469a9177956
        Validity
            Not Before: Nov 17 06:00:21 2023 GMT
            Not After : Nov 18 06:00:21 2023 GMT
        Subject: CN=5146de3174269e2adb2426d515d9d53a62e1460c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:3f:06:f7:87:25:5e:c2:b6:55:9d:54:cd:
                    62:db:87:24:34:34:ec:85:59:f5:34:c1:47:96:df:
                    c0:5a:5e:5d:5a:07:f2:5b:5d:c5:c1:7d:81:13:5e:
                    5b:c6:a5:58:2c:6e:95:9e:6c:6c:bb:73:c5:d2:49:
                    e1:11:22:4e:e3:a8:84:e7:95:8c:bd:fe:e1:c7:6b:
                    f0:31:24:1f:e8:24:dc:e0:de:34:d5:93:cf:f4:94:
                    c2:d0:61:ad:5a:60:dd:ec:eb:b4:b9:1e:46:5e:f6:
                    d8:c9:0c:74:aa:3a:64:2e:a5:10:0d:ed:16:d4:36:
                    dd:c0:8b:27:fb:10:bc:fa:d3:49:c5:05:02:83:e5:
                    88:92:bc:46:71:d5:9c:f0:bf:b8:71:a3:db:3f:6a:
                    3d:3d:32:16:4d:13:4c:16:e5:42:47:ff:c0:45:78:
                    73:db:37:94:63:25:b3:a4:91:57:71:8b:4d:1e:8b:
                    db:7a:98:22:5e:59:b1:d3:56:ac:6f:09:d8:0a:74:
                    bf:b3:ba:79:f3:ce:c2:11:99:89:5b:ef:89:cc:3c:
                    d5:be:24:98:e1:2b:c8:05:2f:d4:6e:7d:4e:17:98:
                    c0:6b:ec:52:6a:cc:25:de:5a:a4:4f:83:81:69:3f:
                    7d:51:2e:51:97:8c:f2:8b:87:86:1f:3f:4b:48:84:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:DE:31:74:26:9E:2A:DB:24:26:D5:15:D9:D5:3A:62:E1:46:0C
            X509v3 Authority Key Identifier:
                keyid:D3:6A:7A:C9:CE:85:8D:FD:31:BD:AA:9C:81:E4:D4:69:A9:17:79:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02p6yc6Fjf0xvaqcgeTUaakXeVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/26464a-bdc6-4324-ae9f-aa258b031770/1/02p6yc6Fjf0xvaqcgeTUaakXeVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/26464a-bdc6-4324-ae9f-aa258b031770/1/02p6yc6Fjf0xvaqcgeTUaakXeVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:23:5c:24:89:fc:9b:b0:47:b9:41:06:13:62:d7:b6:94:10:
         e3:50:ea:37:28:f9:4a:cb:b3:de:e3:e2:1c:b7:82:88:17:d5:
         cc:b5:12:aa:f9:3d:48:39:34:5e:dd:45:ef:5b:20:38:90:57:
         33:ef:47:88:90:8c:eb:59:66:43:e2:1d:49:ef:64:62:28:65:
         65:41:83:9e:72:44:73:ed:7f:ac:c5:31:50:51:49:fd:f6:bc:
         2d:1f:d2:8c:34:fb:0a:50:4d:93:ba:a4:65:b1:13:ab:90:f8:
         e5:2e:63:ae:b6:bc:dc:79:31:48:81:27:4a:bd:32:a0:40:d8:
         94:2a:88:00:f9:36:26:18:36:cc:10:3c:d7:fd:9e:93:5e:ba:
         d8:c9:4d:de:bb:c0:88:62:a6:a5:37:52:25:27:64:14:27:78:
         f6:0a:3c:04:fd:90:d0:7c:40:1c:17:51:15:1c:6f:7a:31:79:
         41:32:d8:70:78:c6:2b:ed:6e:5a:2b:71:cc:69:6b:bd:e7:14:
         ab:7d:ef:6c:e8:ce:59:58:86:73:98:5a:85:cb:2c:c0:66:e5:
         df:eb:ca:ce:2a:02:04:99:84:dc:65:15:bf:15:99:99:2f:22:
         6e:08:8d:f7:34:3d:f1:e7:bb:7a:1d:3b:f2:40:56:65:17:a5:
         72:cd:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----