Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0f7c1f-60c4-4b07-bc14-483b5ae3bffe/1/uEQurSgJtPou7FE3Id0tH-PAD-A.mft
File:                     uEQurSgJtPou7FE3Id0tH-PAD-A.mft (raw, json)
Hash identifier:          R8+gzi3cclE8k7K8lTRA6ihAyVGiGf0cV4VAJ6qvESs=
Subject key identifier:   A9:42:68:1B:3F:C0:31:59:04:8A:94:7C:A3:9B:F9:5D:B8:76:CA:50
Authority key identifier: B8:44:2E:AD:28:09:B4:FA:2E:EC:51:37:21:DD:2D:1F:E3:C0:0F:E0
Certificate issuer:       /CN=b8442ead2809b4fa2eec513721dd2d1fe3c00fe0
Certificate serial:       018E0DA0901F47C9493035780C889F1CB4E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEQurSgJtPou7FE3Id0tH-PAD-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0f7c1f-60c4-4b07-bc14-483b5ae3bffe/1/uEQurSgJtPou7FE3Id0tH-PAD-A.mft
Manifest number:          09AE
Signing time:             Tue 05 Mar 2024 08:00:10 +0000
Manifest this update:     Tue 05 Mar 2024 08:00:10 +0000
Manifest next update:     Wed 06 Mar 2024 08:00:10 +0000
Files and hashes:         1: uEQurSgJtPou7FE3Id0tH-PAD-A.crl (hash: rfbgzKFNi9aHAxjqe0HSr/2AJ8bNW2HBxAPuH53kgpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:0d:a0:90:1f:47:c9:49:30:35:78:0c:88:9f:1c:b4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8442ead2809b4fa2eec513721dd2d1fe3c00fe0
        Validity
            Not Before: Mar  5 08:00:10 2024 GMT
            Not After : Mar  6 08:00:10 2024 GMT
        Subject: CN=a942681b3fc03159048a947ca39bf95db876ca50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:77:62:ac:9a:45:15:c1:3b:d3:80:46:e4:
                    64:0d:05:4e:a9:53:00:4c:e4:54:b4:88:b4:92:3a:
                    92:33:5d:62:99:00:b1:6a:da:83:df:23:13:65:15:
                    86:10:58:31:20:8a:e7:53:f7:95:cc:3f:c2:35:4d:
                    1b:7d:21:a2:57:4b:08:a1:5c:02:70:2d:cf:fc:cb:
                    5d:c3:94:d3:1a:ff:5d:40:72:63:1f:cb:51:07:91:
                    80:11:bb:ba:12:53:80:73:e8:f4:7b:28:aa:da:d5:
                    70:03:9d:1a:4f:8e:a1:02:cd:5d:1e:e8:06:3a:95:
                    bd:81:02:c1:99:d0:a2:41:9b:fc:22:62:01:35:8f:
                    0a:46:3b:cb:7f:d7:55:15:3f:c9:1d:e1:ed:18:48:
                    f7:ec:10:8e:25:14:ce:60:88:31:de:ac:a6:cb:90:
                    9d:36:b1:60:77:55:dc:f1:6c:6b:a7:ce:9a:69:2e:
                    99:a9:44:85:06:c0:27:bc:83:95:8b:08:fe:ab:ae:
                    5c:8c:2f:b7:c5:b0:01:5b:7f:03:8a:9b:9a:fe:53:
                    51:0d:4e:d5:8e:66:d9:72:26:40:24:99:56:d4:a5:
                    cc:1c:c6:e5:f1:50:dc:df:82:bf:0a:e9:40:68:3e:
                    dd:8a:b8:d0:53:e2:87:9a:e4:6d:38:42:dc:50:f9:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:68:1B:3F:C0:31:59:04:8A:94:7C:A3:9B:F9:5D:B8:76:CA:50
            X509v3 Authority Key Identifier:
                keyid:B8:44:2E:AD:28:09:B4:FA:2E:EC:51:37:21:DD:2D:1F:E3:C0:0F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEQurSgJtPou7FE3Id0tH-PAD-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0f7c1f-60c4-4b07-bc14-483b5ae3bffe/1/uEQurSgJtPou7FE3Id0tH-PAD-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0f7c1f-60c4-4b07-bc14-483b5ae3bffe/1/uEQurSgJtPou7FE3Id0tH-PAD-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ad:3e:0b:47:53:45:3e:f3:8e:35:f1:2f:bd:dd:27:2d:5c:
         78:e0:2a:c6:48:22:e6:e6:6f:42:81:db:93:c2:8b:cb:78:a0:
         cd:cf:b4:72:0e:42:d5:a4:9d:8c:40:a5:d6:81:9a:e7:60:5f:
         5d:95:9c:70:40:c2:8d:6d:5d:81:9c:bc:a8:25:db:89:1a:16:
         6e:29:73:b8:aa:ce:e6:d7:45:7a:53:da:3f:a5:70:0b:90:1c:
         0c:7f:f3:d9:c2:e1:d0:ab:b7:8b:49:54:c1:95:66:ea:d3:76:
         20:47:b2:fe:e4:41:8b:44:af:36:f1:34:1d:fd:64:97:4a:32:
         4c:70:07:d4:8d:a2:a7:c3:09:f4:fb:64:86:54:1f:eb:81:f5:
         e3:3a:4a:5a:af:d6:4b:1c:ef:2a:84:6e:bd:3a:3d:81:fb:5e:
         13:09:4f:75:b7:44:a9:4d:9b:d6:82:4c:4a:77:aa:61:56:0a:
         7e:84:87:48:fd:4f:3c:77:c0:c9:a7:5b:82:61:b1:17:5c:79:
         94:c1:8e:6c:d9:53:ef:61:74:19:7e:99:73:01:e9:47:0e:19:
         66:50:9e:f9:5d:16:b2:1c:fa:b5:93:77:dc:9c:0a:e5:25:70:
         bf:5d:f9:68:ad:4c:8e:29:9d:66:b5:95:29:f1:54:c8:36:e1:
         bf:03:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----