Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9ed8e6-dc9c-494f-9be8-3fc11762e689/1/clrfKXu7QgxQo5pt9LNE8mCrQQk.mft
File:                     clrfKXu7QgxQo5pt9LNE8mCrQQk.mft (raw, json)
Hash identifier:          diK0HI34dIJL0IIhkYeVyWfoxgV7zbpG+Pp3JkhPQ4k=
Subject key identifier:   C2:DA:AB:4D:D0:E1:23:70:10:CF:30:B2:B0:5B:F2:0E:C1:37:0E:1C
Authority key identifier: 72:5A:DF:29:7B:BB:42:0C:50:A3:9A:6D:F4:B3:44:F2:60:AB:41:09
Certificate issuer:       /CN=725adf297bbb420c50a39a6df4b344f260ab4109
Certificate serial:       018BC6693EB1DBAA9FD255142A7F66775D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clrfKXu7QgxQo5pt9LNE8mCrQQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9ed8e6-dc9c-494f-9be8-3fc11762e689/1/clrfKXu7QgxQo5pt9LNE8mCrQQk.mft
Manifest number:          0F15
Signing time:             Mon 13 Nov 2023 02:01:07 +0000
Manifest this update:     Mon 13 Nov 2023 02:01:07 +0000
Manifest next update:     Tue 14 Nov 2023 02:01:07 +0000
Files and hashes:         1: clrfKXu7QgxQo5pt9LNE8mCrQQk.crl (hash: WQrZ7O/u1dguBH+5xI7WGkCogDu26TyInfwOaSAxtmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c6:69:3e:b1:db:aa:9f:d2:55:14:2a:7f:66:77:5d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725adf297bbb420c50a39a6df4b344f260ab4109
        Validity
            Not Before: Nov 13 02:01:07 2023 GMT
            Not After : Nov 14 02:01:07 2023 GMT
        Subject: CN=c2daab4dd0e1237010cf30b2b05bf20ec1370e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:29:c2:f7:01:9f:32:c4:37:61:d6:f3:83:63:
                    e8:02:c8:4d:ec:27:8c:2c:0b:66:14:1e:11:31:f5:
                    bb:c2:a4:f7:fa:73:93:2e:8e:ef:cf:3a:c9:be:7a:
                    65:f9:93:d0:14:55:22:35:38:6f:7a:1e:18:69:27:
                    15:a5:61:8e:93:c0:c0:eb:cc:ad:1a:e0:8a:3c:bb:
                    36:c7:54:18:47:9b:c4:46:52:58:88:3b:85:dc:a1:
                    01:b4:1f:c8:d9:fc:3c:21:47:9e:b4:0f:32:de:96:
                    da:17:52:c5:d5:a6:a9:6d:a5:b5:c9:fe:90:54:57:
                    90:19:ba:4d:ea:4f:d4:d6:45:32:9b:48:ec:da:2a:
                    52:21:31:f9:00:5d:e4:9a:c4:ae:6e:1c:76:fe:e4:
                    91:2b:29:0f:a2:5e:cc:d5:7e:a5:ed:f9:00:e4:d6:
                    16:f9:76:77:b2:37:b3:e3:f1:c0:34:ee:34:cb:dd:
                    9a:0c:af:96:8a:8e:cc:73:13:ca:62:a1:82:a3:88:
                    a0:9c:85:18:ca:91:f5:3d:ff:eb:e9:bc:53:35:8f:
                    34:99:20:1b:0a:ca:27:1f:75:35:e3:db:3c:5c:33:
                    22:ae:ba:fb:83:d7:a5:fe:05:82:03:d0:84:49:0b:
                    a1:be:cb:0b:1c:7d:7e:75:89:0c:17:2a:40:98:03:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DA:AB:4D:D0:E1:23:70:10:CF:30:B2:B0:5B:F2:0E:C1:37:0E:1C
            X509v3 Authority Key Identifier:
                keyid:72:5A:DF:29:7B:BB:42:0C:50:A3:9A:6D:F4:B3:44:F2:60:AB:41:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clrfKXu7QgxQo5pt9LNE8mCrQQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9ed8e6-dc9c-494f-9be8-3fc11762e689/1/clrfKXu7QgxQo5pt9LNE8mCrQQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9ed8e6-dc9c-494f-9be8-3fc11762e689/1/clrfKXu7QgxQo5pt9LNE8mCrQQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:69:16:d4:91:58:b4:1e:8c:98:41:9d:2e:b9:dd:26:4d:b1:
         6e:b9:77:1e:4f:39:ec:48:e3:e7:6d:89:1e:c8:f2:d6:8a:06:
         49:33:5d:1a:69:3c:4e:19:4a:c3:c6:12:e1:c5:6b:f3:73:66:
         d3:94:8c:d7:3b:89:17:7d:08:88:17:c4:10:c6:2b:16:55:b5:
         4e:30:38:3a:c4:fa:16:21:13:8c:0d:2d:99:79:66:b0:34:b8:
         88:cf:0c:a1:71:cb:05:c4:38:4f:75:46:d3:e8:a7:85:c0:20:
         a5:48:60:db:f1:89:fc:a5:fd:33:5b:4e:3a:69:d9:6c:62:21:
         d7:51:e4:9a:c7:90:b7:a7:8e:3b:83:a0:d3:68:5c:46:86:a9:
         e3:13:16:75:2d:7b:f1:ed:b9:28:97:ad:50:d2:28:d0:c6:6d:
         dd:e7:3d:8a:e6:6b:44:cd:c2:23:5f:f3:c9:ba:2b:2e:c8:18:
         e3:91:fb:a3:3c:bd:dc:c0:0a:6e:72:08:d4:b5:68:51:f8:3f:
         6d:9a:e4:d0:7f:48:0f:07:1b:fa:df:f4:13:99:00:0d:f7:6d:
         61:cd:be:1f:69:73:5b:4e:4f:2a:94:0f:ab:5c:f7:f8:59:5b:
         fe:b1:be:6f:64:01:c5:68:0e:43:31:92:ca:7f:8a:ad:06:b9:
         64:e3:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----