Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2839a4-f8bc-4e93-a8f8-4bcd94c73a18/1/JTdBoxLFeinVHeA6agbfY_ko4lE.mft
File:                     JTdBoxLFeinVHeA6agbfY_ko4lE.mft (raw, json)
Hash identifier:          5n8k1Ni8DGHoXPCpHr3js9RknAHA+XVEZpkyn3IL++0=
Subject key identifier:   9E:58:2B:0F:16:92:7D:E1:CD:FC:AD:AB:ED:FD:44:FC:12:DF:59:44
Authority key identifier: 25:37:41:A3:12:C5:7A:29:D5:1D:E0:3A:6A:06:DF:63:F9:28:E2:51
Certificate issuer:       /CN=253741a312c57a29d51de03a6a06df63f928e251
Certificate serial:       018474B3F36CFDE5968DCECA173623CAAFA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTdBoxLFeinVHeA6agbfY_ko4lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2839a4-f8bc-4e93-a8f8-4bcd94c73a18/1/JTdBoxLFeinVHeA6agbfY_ko4lE.mft
Manifest number:          0B6A
Signing time:             Mon 14 Nov 2022 05:54:21 +0000
Manifest this update:     Mon 14 Nov 2022 05:54:21 +0000
Manifest next update:     Tue 15 Nov 2022 05:54:21 +0000
Files and hashes:         1: JTdBoxLFeinVHeA6agbfY_ko4lE.crl (hash: VOQSHOvbpPEf6eTX4laEZD0tcCixz4ZRNfaovTU9ZeU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:74:b3:f3:6c:fd:e5:96:8d:ce:ca:17:36:23:ca:af:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253741a312c57a29d51de03a6a06df63f928e251
        Validity
            Not Before: Nov 14 05:54:21 2022 GMT
            Not After : Nov 15 05:54:21 2022 GMT
        Subject: CN=9e582b0f16927de1cdfcadabedfd44fc12df5944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:eb:74:7f:96:6a:ab:2b:c1:d8:88:47:24:
                    a9:a7:c1:f7:f3:d3:7a:78:78:a6:28:d1:e0:8c:3a:
                    d0:eb:99:07:0c:f6:a0:46:0d:bc:4f:1b:ee:0c:a7:
                    ed:b2:51:cc:67:af:8b:a5:21:b2:6d:59:41:9a:88:
                    58:44:0a:e9:cf:2b:8e:b8:08:b6:fa:81:e5:07:a1:
                    d2:4f:7d:b6:e5:be:8b:d2:5a:e5:41:15:95:84:98:
                    d5:50:bb:87:98:4e:34:4b:6e:68:17:ce:5e:37:f1:
                    e4:a0:34:36:33:51:bc:68:4c:17:00:0f:f6:d7:94:
                    0e:55:74:19:11:53:08:4c:d9:1a:51:fa:67:41:4b:
                    2b:cf:f1:05:2a:40:a8:81:18:aa:36:40:37:28:c5:
                    86:7e:65:62:dc:a6:a9:b1:c9:f6:69:75:47:24:3a:
                    b7:4d:a0:6f:51:da:9a:b2:26:56:a7:7d:1c:5b:57:
                    2d:bf:ac:65:bf:24:15:a8:dd:33:d4:45:3b:b3:66:
                    50:fd:51:65:55:09:c6:e0:f1:a0:0f:ff:4c:fc:25:
                    87:33:bf:bd:2b:71:80:db:98:55:08:e7:02:d1:d5:
                    73:48:37:a5:0a:09:79:a9:a6:f4:0d:a9:4d:1f:7f:
                    1d:c6:f8:85:d7:15:66:0b:df:91:13:fa:26:fb:71:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:58:2B:0F:16:92:7D:E1:CD:FC:AD:AB:ED:FD:44:FC:12:DF:59:44
            X509v3 Authority Key Identifier:
                keyid:25:37:41:A3:12:C5:7A:29:D5:1D:E0:3A:6A:06:DF:63:F9:28:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTdBoxLFeinVHeA6agbfY_ko4lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2839a4-f8bc-4e93-a8f8-4bcd94c73a18/1/JTdBoxLFeinVHeA6agbfY_ko4lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2839a4-f8bc-4e93-a8f8-4bcd94c73a18/1/JTdBoxLFeinVHeA6agbfY_ko4lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:6b:95:f3:11:89:e4:98:37:8f:e2:ef:3d:03:03:ab:b2:
         ed:60:2e:d6:88:65:e1:0e:f1:04:8c:15:19:c9:cf:8f:4d:80:
         bf:31:27:eb:15:5c:77:5e:ed:9f:da:02:c3:b8:25:2d:4c:82:
         32:8f:08:02:4b:95:b7:04:7b:ba:de:5c:02:d5:e7:de:0d:70:
         4a:94:5b:75:04:f2:05:13:3b:8c:49:64:57:8b:08:01:b6:b6:
         48:ee:b1:6e:92:ee:56:70:b5:f6:a4:61:7d:35:a2:6e:70:9c:
         0a:42:42:04:8a:2a:7e:fe:58:33:75:94:6b:81:bb:32:d9:c7:
         bf:72:ae:5f:7e:58:79:8a:9b:78:9f:00:ff:c5:7f:29:6f:61:
         f0:80:e3:1e:4b:96:7f:b8:1c:e7:65:d2:86:a2:6b:e2:bb:8c:
         4d:e4:32:ca:c7:db:75:bb:48:c4:10:1c:d1:1e:c8:28:82:74:
         fc:1c:ce:57:3f:c5:bb:a3:1e:38:58:10:74:92:27:6b:de:2b:
         25:b1:0f:a3:72:df:44:fe:e3:c4:21:0a:dc:e5:89:c1:58:8c:
         cb:19:9b:e0:48:30:51:51:d4:20:a2:ec:62:ac:09:12:8b:3d:
         85:33:14:ed:3e:9a:b6:67:f5:8b:ff:70:cf:97:03:a3:00:76:
         a0:5a:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----