Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/M5GOx_AsrK_iZUa-HhmA-cOj6JA.mft
File:                     M5GOx_AsrK_iZUa-HhmA-cOj6JA.mft (raw, json)
Hash identifier:          Cz3332E35ag75IStYBZ0WTkK6N1FNb02NH1YDwK1CnI=
Subject key identifier:   F4:10:A4:AF:B3:B0:FC:68:9D:60:A9:4E:32:CD:82:30:94:29:D3:F9
Authority key identifier: 33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90
Certificate issuer:       /CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
Certificate serial:       01892922D23677EE0D95760AE9397B9935DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/M5GOx_AsrK_iZUa-HhmA-cOj6JA.mft
Manifest number:          0878
Signing time:             Thu 06 Jul 2023 02:58:15 +0000
Manifest this update:     Thu 06 Jul 2023 02:58:15 +0000
Manifest next update:     Fri 07 Jul 2023 02:58:15 +0000
Files and hashes:         1: M5GOx_AsrK_iZUa-HhmA-cOj6JA.crl (hash: l41En/xjDifRsUx3HYGHaugpOxPMaHrznxCXhpvgHzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:29:22:d2:36:77:ee:0d:95:76:0a:e9:39:7b:99:35:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
        Validity
            Not Before: Jul  6 02:58:15 2023 GMT
            Not After : Jul  7 02:58:15 2023 GMT
        Subject: CN=f410a4afb3b0fc689d60a94e32cd82309429d3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:3c:1e:45:a5:06:40:8b:b4:f8:47:56:04:
                    39:05:48:ce:b8:2f:83:08:24:01:c8:55:21:e0:10:
                    5f:1c:18:cd:7a:de:2c:70:fd:29:a6:78:8c:5d:11:
                    75:12:ca:06:14:1f:8a:30:b5:b2:9c:d9:a1:b2:80:
                    15:d1:9f:ed:a2:62:47:97:5e:eb:12:f2:f7:b2:d2:
                    b6:ae:43:19:42:1d:14:02:82:74:cc:15:56:35:62:
                    79:d8:eb:43:53:9e:fa:0b:fe:60:3c:ec:b3:ec:ba:
                    3a:b2:19:87:e8:cd:17:5d:1a:ab:57:db:ae:51:da:
                    23:d0:bf:09:42:76:79:4f:6e:68:97:b0:98:2c:8e:
                    ab:05:66:9a:15:c6:b2:1a:7e:0c:f4:70:63:a9:31:
                    1d:49:2d:04:06:65:de:28:b9:a2:6f:e8:6b:39:2f:
                    da:39:be:c6:67:c2:9f:13:cb:07:21:60:41:8b:aa:
                    0c:c9:da:a5:1c:85:37:f3:d3:78:d7:90:da:8c:b5:
                    09:f6:71:a0:15:a9:e1:f7:bd:36:3c:d0:8e:53:32:
                    21:99:11:a9:96:8a:19:41:d6:a4:4a:31:da:e8:26:
                    f4:cb:74:96:68:56:ac:0a:e7:2d:05:1b:11:01:00:
                    f4:2a:fa:87:af:20:7e:e2:10:78:b9:5a:21:43:ad:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:10:A4:AF:B3:B0:FC:68:9D:60:A9:4E:32:CD:82:30:94:29:D3:F9
            X509v3 Authority Key Identifier:
                keyid:33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/M5GOx_AsrK_iZUa-HhmA-cOj6JA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/M5GOx_AsrK_iZUa-HhmA-cOj6JA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:bd:18:06:97:7c:63:86:d7:f7:db:0a:a2:6b:ad:25:a2:9f:
         51:81:fd:fa:00:f8:1c:60:6f:08:5d:a6:ca:3c:4c:0e:36:fc:
         d8:2b:ac:f3:be:2d:68:be:a5:af:ff:67:de:ac:31:29:e9:50:
         8a:9e:38:88:8f:8f:90:c6:0f:e8:67:46:87:f3:3b:45:6a:45:
         39:46:fd:17:e2:01:8d:6c:c4:70:c3:09:26:a5:15:26:12:95:
         c7:cd:37:ee:65:1e:c4:36:8f:10:41:f3:be:8f:bc:56:29:29:
         ef:63:7e:be:78:df:0d:9d:cc:f7:8d:94:a6:cf:7c:26:b7:54:
         37:80:6c:a4:51:0c:25:28:68:df:1b:fc:70:1f:f5:6a:8f:17:
         39:15:a2:46:b8:56:a1:6a:32:38:cc:53:d0:10:ec:7e:99:b6:
         7e:24:4a:90:95:26:2f:61:d7:18:91:36:dd:d3:8d:0c:a8:51:
         19:33:f5:96:9f:42:a8:ac:72:07:e4:d5:03:e9:7f:88:9b:7b:
         10:ec:5c:52:e3:06:7e:cc:c9:24:d1:10:98:b1:a2:1a:0e:63:
         66:95:97:ad:db:65:ad:a1:80:70:9e:c1:d5:ba:74:7c:51:9b:
         f4:d4:21:3e:58:10:a7:7c:b1:33:ce:07:46:c3:0f:82:0d:9e:
         5a:fd:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----