Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.mft
File:                     pcZu2IDk4o6KbkobX54JIiNQK7Y.mft (raw, json)
Hash identifier:          IMfUb+CTZzNPqfp281H/Q8otupBwJOQn03LQWLmiilU=
Subject key identifier:   71:BB:83:C0:A8:7F:F5:D3:6D:62:4A:42:A4:2B:8D:B7:23:CB:FC:FE
Authority key identifier: A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
Certificate issuer:       /CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
Certificate serial:       018BA9039B6654F4E0CF09376C0C77A23DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.mft
Manifest number:          0861
Signing time:             Tue 07 Nov 2023 09:01:07 +0000
Manifest this update:     Tue 07 Nov 2023 09:01:07 +0000
Manifest next update:     Wed 08 Nov 2023 09:01:07 +0000
Files and hashes:         1: pcZu2IDk4o6KbkobX54JIiNQK7Y.crl (hash: rioX67kjCg/iZRHETpTLh4ayp7MjoPSM1oEWUtb/6Z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a9:03:9b:66:54:f4:e0:cf:09:37:6c:0c:77:a2:3d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
        Validity
            Not Before: Nov  7 09:01:07 2023 GMT
            Not After : Nov  8 09:01:07 2023 GMT
        Subject: CN=71bb83c0a87ff5d36d624a42a42b8db723cbfcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:ad:d0:b6:7c:3c:75:b1:a6:7a:02:6a:f7:
                    aa:4b:30:de:af:e2:a1:77:4e:31:86:9a:0f:c4:ba:
                    54:cc:be:e0:12:45:dd:84:40:c8:8d:28:10:48:93:
                    41:b0:fd:a4:99:67:3e:cc:8b:4d:ca:d3:12:e7:ed:
                    d4:84:88:e8:cd:70:03:37:60:d7:e6:4d:b3:92:a0:
                    12:05:95:94:d2:bd:4e:2e:c2:8f:ff:1d:08:37:59:
                    dd:5d:7f:c0:f9:66:32:e5:ce:00:cc:3b:d3:f7:39:
                    f9:ee:0e:6b:d9:2b:b9:21:b1:24:07:87:b0:29:9b:
                    74:1e:2d:af:16:64:0e:6f:1d:1e:fc:2c:24:86:bf:
                    0f:23:f9:31:bf:29:e7:d0:05:d9:77:cf:c3:25:21:
                    90:f6:0d:5a:8e:22:80:22:dc:a0:a9:95:83:3a:a6:
                    8e:5d:9a:76:81:5c:c4:43:3b:f2:11:60:3f:0b:25:
                    c8:ab:4e:79:1b:a3:c1:55:12:98:76:bf:7e:22:7f:
                    44:6d:3a:e7:71:9a:33:bd:08:e4:62:cf:88:a4:7b:
                    b7:a5:dd:3d:22:38:ef:85:5e:5c:b3:ab:b9:cc:ce:
                    41:70:04:24:e9:34:2d:1d:8f:38:c9:85:90:c4:31:
                    22:72:7b:32:c5:b3:63:f3:3d:dd:cf:86:09:84:5d:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BB:83:C0:A8:7F:F5:D3:6D:62:4A:42:A4:2B:8D:B7:23:CB:FC:FE
            X509v3 Authority Key Identifier:
                keyid:A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:9a:0f:39:64:f5:7d:a8:5a:b7:c0:e8:24:41:f1:43:5d:
         b5:ae:7b:c6:e5:72:ed:fc:a5:70:7b:19:a5:1b:c4:06:54:91:
         60:f1:d9:85:39:ca:b8:50:04:73:be:a0:a4:7e:a4:ed:48:60:
         d9:b2:89:86:d7:4b:34:f8:77:31:26:89:af:4a:a1:9e:a7:21:
         ef:35:66:16:f7:74:fc:27:a4:42:46:13:13:ed:bd:ca:42:70:
         0e:19:31:f1:2d:af:6c:48:32:3d:50:48:75:d9:a9:90:fe:8c:
         08:23:32:fc:1c:95:dd:44:fb:9c:ab:e0:c5:0f:81:68:26:8f:
         56:e2:36:f0:a7:97:62:63:18:59:af:da:c4:08:fb:a5:77:2c:
         67:cc:b5:1b:65:ac:39:dc:1c:94:2f:fd:cf:2a:25:d4:fd:4d:
         a4:70:bc:66:41:91:2f:b0:21:19:2c:a4:d5:de:36:c8:d6:1e:
         f8:73:c6:ec:07:0c:20:98:b5:5a:ef:73:3a:4a:80:f5:46:1f:
         58:9f:02:20:8a:bf:7c:09:00:03:79:72:58:7b:1b:58:a3:75:
         d9:bc:7c:a4:a6:4f:a6:1a:49:fe:52:32:55:11:b0:ed:51:90:
         43:a6:26:fd:c1:17:4e:d9:02:ed:c5:7a:3b:63:36:c5:19:34:
         fb:e7:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----