Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/1p3JEVFuPiYi7penu4RCXdnrhlU.mft
File:                     1p3JEVFuPiYi7penu4RCXdnrhlU.mft (raw, json)
Hash identifier:          ngVRrWeIDGfAs1mxWKi2OjujXLHQe93VLTgMnHEBaTc=
Subject key identifier:   DD:20:FA:87:43:5B:90:5D:3E:33:AA:50:97:C7:6D:03:78:ED:69:55
Authority key identifier: D6:9D:C9:11:51:6E:3E:26:22:EE:97:A7:BB:84:42:5D:D9:EB:86:55
Certificate issuer:       /CN=d69dc911516e3e2622ee97a7bb84425dd9eb8655
Certificate serial:       018BEBF6129C8E7ABDF267F700AE2E63E81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1p3JEVFuPiYi7penu4RCXdnrhlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/1p3JEVFuPiYi7penu4RCXdnrhlU.mft
Manifest number:          0859
Signing time:             Mon 20 Nov 2023 09:00:54 +0000
Manifest this update:     Mon 20 Nov 2023 09:00:54 +0000
Manifest next update:     Tue 21 Nov 2023 09:00:54 +0000
Files and hashes:         1: 1p3JEVFuPiYi7penu4RCXdnrhlU.crl (hash: TLJhc89lBpmPVJhQmxAKn1AVpZ0GOBan2nywEnoLax0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:f6:12:9c:8e:7a:bd:f2:67:f7:00:ae:2e:63:e8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d69dc911516e3e2622ee97a7bb84425dd9eb8655
        Validity
            Not Before: Nov 20 09:00:54 2023 GMT
            Not After : Nov 21 09:00:54 2023 GMT
        Subject: CN=dd20fa87435b905d3e33aa5097c76d0378ed6955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:5d:81:1a:bc:c1:1d:82:54:18:3f:a6:52:
                    21:65:6f:7b:09:4e:f4:7e:65:a2:81:02:ba:76:74:
                    92:6c:bb:32:8d:e0:fa:bc:cf:1b:4a:74:8d:02:78:
                    f5:22:76:77:26:6a:f1:c6:b1:50:12:94:76:94:13:
                    78:b3:56:41:e5:c6:a2:cf:d1:01:85:5a:d6:30:db:
                    c7:69:97:8e:57:40:9e:d8:25:d3:09:ec:44:a1:be:
                    ec:43:de:52:57:4a:b0:59:7e:6c:99:a1:b7:35:2f:
                    23:9f:b0:58:d3:c3:cc:36:72:13:c2:d0:25:6b:fb:
                    fc:a0:75:bc:2b:a4:88:b6:4a:32:92:3c:cd:b8:10:
                    ad:12:f2:37:15:2d:c2:c2:80:22:06:9d:84:0b:3b:
                    8b:f4:e8:25:c6:28:48:29:b9:a8:9a:b4:fd:8c:ac:
                    32:7e:86:e6:62:c8:8e:1e:05:a1:b4:0b:42:6f:82:
                    5e:15:c9:8d:34:6d:9d:d3:80:82:cb:45:21:bf:c1:
                    8f:15:c2:f3:e2:84:c6:7b:d3:0e:eb:72:dc:50:4b:
                    30:51:fd:0e:b2:fb:e4:80:ad:fc:8d:59:c1:ac:7a:
                    48:1b:3b:05:71:e3:d8:df:70:72:32:d8:03:20:c9:
                    b5:d2:1c:68:60:bc:b6:c0:02:b8:36:98:2b:c1:14:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:FA:87:43:5B:90:5D:3E:33:AA:50:97:C7:6D:03:78:ED:69:55
            X509v3 Authority Key Identifier:
                keyid:D6:9D:C9:11:51:6E:3E:26:22:EE:97:A7:BB:84:42:5D:D9:EB:86:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1p3JEVFuPiYi7penu4RCXdnrhlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/1p3JEVFuPiYi7penu4RCXdnrhlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/1p3JEVFuPiYi7penu4RCXdnrhlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:33:7d:8a:31:71:a2:f9:de:99:12:a6:7d:20:a4:04:a5:
         0d:49:be:bf:f0:49:f4:a1:84:79:4d:ba:a6:54:be:fd:95:dd:
         aa:7b:27:e4:e6:06:a3:38:f8:06:74:9a:31:ff:d8:19:6d:1d:
         1f:cf:07:e9:3b:eb:9a:d4:94:46:22:21:d5:46:f2:09:e5:85:
         1c:99:c8:10:f3:83:55:0f:5d:7c:59:d1:ae:03:17:f8:2e:90:
         ae:59:dc:86:d0:07:ff:be:ac:b0:0a:1f:57:6e:2b:a7:92:dd:
         d6:c1:0a:1f:89:0c:ba:db:83:04:63:e0:47:3a:50:2d:da:01:
         00:4b:a9:54:51:1a:22:18:8d:0b:62:a8:0d:16:95:35:df:b5:
         cd:11:c8:24:59:02:99:4b:f1:d0:fc:b5:48:0e:ba:c2:b4:e2:
         19:e9:8b:0e:4b:1a:5b:59:28:b5:22:53:45:c6:14:a0:6a:eb:
         41:b9:c0:d3:51:bf:aa:13:9f:8c:7a:ff:88:9a:fa:7a:5a:1c:
         3c:b4:cf:66:fb:d7:83:67:44:f0:fd:e5:af:bb:e3:71:2a:80:
         56:0e:6d:e8:2e:c7:77:63:d2:b9:11:fc:00:37:a5:fb:0d:bf:
         98:24:7d:e1:4f:7d:55:a2:13:7a:ee:15:b3:0c:a5:4a:f9:cf:
         cc:6d:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----