Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/285984-6a0f-488e-8c89-cdf21a07493e/1/kUIxERDvPCR7QDRIQ07SdRFjywg.mft
File:                     kUIxERDvPCR7QDRIQ07SdRFjywg.mft (raw, json)
Hash identifier:          vr6bpc8B+3WjsXzYOqyMxA6CPC+ljN6tOOm1mBEM6pk=
Subject key identifier:   14:D3:B7:9B:0D:11:4D:9B:F3:7D:3F:13:C6:C9:BC:3E:C9:91:E7:3E
Authority key identifier: 91:42:31:11:10:EF:3C:24:7B:40:34:48:43:4E:D2:75:11:63:CB:08
Certificate issuer:       /CN=9142311110ef3c247b403448434ed2751163cb08
Certificate serial:       0186E4383C3E64FE478FAED05A0D43307A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUIxERDvPCR7QDRIQ07SdRFjywg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/285984-6a0f-488e-8c89-cdf21a07493e/1/kUIxERDvPCR7QDRIQ07SdRFjywg.mft
Manifest number:          01
Signing time:             Wed 15 Mar 2023 07:42:16 +0000
Manifest this update:     Wed 15 Mar 2023 07:42:16 +0000
Manifest next update:     Thu 16 Mar 2023 07:42:16 +0000
Files and hashes:         1: kUIxERDvPCR7QDRIQ07SdRFjywg.crl (hash: U3QehRpmkSB6lw9Ls6mWrt3KTungtp6bMdNdr5KcY9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:38:3c:3e:64:fe:47:8f:ae:d0:5a:0d:43:30:7a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9142311110ef3c247b403448434ed2751163cb08
        Validity
            Not Before: Mar 15 07:42:16 2023 GMT
            Not After : Mar 16 07:42:16 2023 GMT
        Subject: CN=14d3b79b0d114d9bf37d3f13c6c9bc3ec991e73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:2c:e3:e0:c4:70:0b:e9:85:43:06:60:54:
                    52:e7:db:13:a5:03:21:74:0e:40:ea:0b:69:4e:34:
                    73:08:ca:81:56:2c:f5:5e:72:8e:29:47:0e:6d:cd:
                    52:fc:7f:9e:e0:43:df:6b:72:d8:82:68:1d:09:92:
                    2c:e4:63:7f:2e:46:24:d8:d2:d2:de:ba:93:fd:9f:
                    72:f0:8d:da:67:a5:97:38:b4:30:70:fa:37:0d:1e:
                    a9:8b:7f:d2:93:7f:93:ab:9f:86:e5:e1:ca:ab:ff:
                    48:99:62:20:c5:89:b7:5b:d3:2a:7a:d3:cf:61:06:
                    43:96:62:2a:16:e6:59:61:d0:6f:eb:6c:a8:36:35:
                    e2:d7:df:1b:04:96:96:35:05:cf:af:2d:f3:b9:b5:
                    77:aa:0d:b3:01:7c:fc:85:d9:e6:ce:a6:15:e9:81:
                    fc:29:f0:33:1f:8c:24:04:04:c6:e6:c5:66:2c:b0:
                    50:f5:4e:de:20:6b:f5:d7:7e:b9:4d:3f:ef:b4:b3:
                    c4:a0:09:66:cd:20:37:aa:16:93:7f:c6:ae:67:00:
                    f9:a0:b9:81:c8:43:72:ed:e3:2d:55:20:4d:1c:98:
                    0c:57:9e:31:1b:d8:0a:8e:5b:55:ed:59:73:be:fb:
                    d4:63:42:22:83:d0:17:1b:b3:84:05:17:ca:02:e1:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D3:B7:9B:0D:11:4D:9B:F3:7D:3F:13:C6:C9:BC:3E:C9:91:E7:3E
            X509v3 Authority Key Identifier:
                keyid:91:42:31:11:10:EF:3C:24:7B:40:34:48:43:4E:D2:75:11:63:CB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUIxERDvPCR7QDRIQ07SdRFjywg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/285984-6a0f-488e-8c89-cdf21a07493e/1/kUIxERDvPCR7QDRIQ07SdRFjywg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/285984-6a0f-488e-8c89-cdf21a07493e/1/kUIxERDvPCR7QDRIQ07SdRFjywg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a6:45:7b:15:e2:9b:c7:60:11:af:fb:5b:46:6d:3b:8a:3a:
         c6:87:02:b2:fd:a7:b6:5d:36:f3:a5:ab:d8:4c:1b:57:62:48:
         b5:13:bb:67:01:9e:3e:5c:bb:5a:6b:bd:aa:90:6b:89:78:cb:
         f0:46:a5:af:c6:34:38:87:31:aa:f2:b4:2d:ee:61:35:26:f4:
         d5:59:53:5c:2d:78:b9:74:7a:49:c9:42:4c:6f:4f:f3:f7:87:
         99:61:aa:10:68:b3:31:56:0d:f4:a2:df:23:c5:36:49:56:bc:
         23:14:00:76:79:f4:ee:17:cd:9a:ff:da:15:bb:dc:6e:84:15:
         17:2e:94:06:de:83:06:35:35:70:91:7e:a2:e9:fb:4f:d3:4e:
         33:e7:28:c1:82:6f:d0:6d:29:82:96:fb:07:e1:1f:3b:bc:ba:
         3b:86:34:fc:9f:bf:c6:da:ee:ed:b3:1d:39:df:55:b3:9a:93:
         96:bb:7e:50:e2:c3:d0:38:dc:93:76:18:cf:7e:ce:dd:28:ea:
         d1:b7:80:60:af:9e:07:59:39:97:f1:56:4f:f3:69:6a:41:2d:
         44:b5:12:51:8c:f1:c0:81:3b:a6:a2:d3:c6:83:e5:89:71:39:
         46:80:be:71:ff:e0:e8:d8:41:b2:af:89:19:96:a8:63:45:2b:
         f2:78:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----