Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1d3148-0941-427a-b86a-2d9c5b8ccc07/1/TIp1JMEF2qC7SxQIJ41lVB1tSqM.mft
File:                     TIp1JMEF2qC7SxQIJ41lVB1tSqM.mft (raw, json)
Hash identifier:          YVR868SAPnBkRLNnZxNrqcqoSF9Oym8byVjPm/5g59k=
Subject key identifier:   CD:EE:4C:D3:C3:3C:30:D4:AB:8D:F2:E8:D2:1D:83:60:E9:8C:A2:C1
Authority key identifier: 4C:8A:75:24:C1:05:DA:A0:BB:4B:14:08:27:8D:65:54:1D:6D:4A:A3
Certificate issuer:       /CN=4c8a7524c105daa0bb4b1408278d65541d6d4aa3
Certificate serial:       01892A1A03084CA4CFD124C0FEF83C2D771E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIp1JMEF2qC7SxQIJ41lVB1tSqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1d3148-0941-427a-b86a-2d9c5b8ccc07/1/TIp1JMEF2qC7SxQIJ41lVB1tSqM.mft
Manifest number:          A1
Signing time:             Thu 06 Jul 2023 07:28:14 +0000
Manifest this update:     Thu 06 Jul 2023 07:28:14 +0000
Manifest next update:     Fri 07 Jul 2023 07:28:14 +0000
Files and hashes:         1: TIp1JMEF2qC7SxQIJ41lVB1tSqM.crl (hash: 0mrib2MUcbLFt9P4i/bVv+Dk3ffrPkMsMXgVyY7WP7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2a:1a:03:08:4c:a4:cf:d1:24:c0:fe:f8:3c:2d:77:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8a7524c105daa0bb4b1408278d65541d6d4aa3
        Validity
            Not Before: Jul  6 07:28:14 2023 GMT
            Not After : Jul  7 07:28:14 2023 GMT
        Subject: CN=cdee4cd3c33c30d4ab8df2e8d21d8360e98ca2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:b4:c5:de:43:a4:b5:54:e4:3a:4d:af:f3:
                    6e:36:26:dc:f8:61:24:85:4b:91:68:1b:c5:07:f6:
                    8f:24:b9:f6:ef:5c:47:d4:ad:98:7a:a5:30:c0:9e:
                    25:e7:24:14:99:33:25:2e:d5:ee:79:d3:38:31:ff:
                    9e:2c:1f:6e:a2:97:60:28:07:09:6b:a5:27:6a:25:
                    fc:22:3c:3e:76:9a:1a:5a:3d:53:d9:e4:24:ad:42:
                    8a:df:87:47:05:11:2f:88:2c:b6:ad:42:96:3d:53:
                    ad:92:d5:2e:70:2d:71:8d:17:f9:91:2d:22:97:42:
                    f3:bb:d1:fb:26:1b:03:06:93:40:a3:5f:dd:2b:89:
                    14:36:d7:75:3d:f0:86:e3:15:51:ed:46:eb:b6:62:
                    8b:dd:61:c3:17:85:3b:5f:97:84:1a:f8:2a:d5:49:
                    11:f0:a1:96:1e:cf:3a:53:37:56:ad:a1:db:70:3f:
                    a0:3a:45:ef:03:18:71:55:e8:21:ff:cc:e9:d1:59:
                    58:74:f6:af:f5:94:dc:3d:17:bd:fa:43:3f:64:f8:
                    61:af:fb:e3:30:f8:d9:60:3c:0a:66:4d:ec:6a:30:
                    36:05:69:f0:b5:c9:ad:5c:0d:3a:65:7e:ba:e3:d2:
                    03:81:42:4b:e4:06:50:84:04:74:30:4a:b5:94:c6:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EE:4C:D3:C3:3C:30:D4:AB:8D:F2:E8:D2:1D:83:60:E9:8C:A2:C1
            X509v3 Authority Key Identifier:
                keyid:4C:8A:75:24:C1:05:DA:A0:BB:4B:14:08:27:8D:65:54:1D:6D:4A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp1JMEF2qC7SxQIJ41lVB1tSqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1d3148-0941-427a-b86a-2d9c5b8ccc07/1/TIp1JMEF2qC7SxQIJ41lVB1tSqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1d3148-0941-427a-b86a-2d9c5b8ccc07/1/TIp1JMEF2qC7SxQIJ41lVB1tSqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:ab:c9:0d:47:64:a7:53:4f:e0:e8:53:a9:ee:31:91:76:
         95:13:a6:7d:ba:13:ec:da:eb:88:ee:0d:72:52:a0:3c:88:b5:
         ee:f5:84:62:97:91:21:9c:3d:10:66:5d:ca:ce:b4:3d:71:04:
         a5:1f:4f:f6:76:97:02:d5:af:15:57:d4:27:e8:7e:18:14:f6:
         4b:4a:f2:5a:ed:8e:b4:6d:3b:71:83:58:e1:9c:4d:45:12:70:
         5d:b6:f3:6b:a7:53:f2:4a:b4:c0:48:6a:79:c7:6a:79:b6:3b:
         79:52:8f:6a:82:29:71:17:28:d4:63:78:94:08:82:68:55:f3:
         fa:7a:e9:fe:f7:ca:73:6b:e5:3c:28:06:7a:7a:e0:1a:62:05:
         96:df:44:77:77:d6:2b:41:76:74:9d:2e:62:04:22:14:9c:fb:
         4d:ce:f7:cc:cb:1b:d0:67:07:2a:a3:fb:2c:86:94:09:e5:75:
         86:32:a1:13:b3:a0:40:dd:7d:12:43:fd:54:94:00:af:d6:6d:
         a2:92:18:a6:06:7b:75:d4:71:81:a3:cf:7f:bf:c5:e2:e3:bf:
         ae:97:a7:de:7b:ee:22:69:97:4f:b6:3b:ed:94:b9:ce:bd:3d:
         52:da:11:46:41:37:06:53:29:6a:d3:0c:f1:53:cc:2e:c3:ac:
         4e:06:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----