Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/37b627-b6b7-4179-8f36-57505b049c68/1/GHy2R6RzkUL5wFFiyDpkT9CF6ZQ.mft
File:                     GHy2R6RzkUL5wFFiyDpkT9CF6ZQ.mft (raw, json)
Hash identifier:          BgBcvs3NbvAun9lGyUVYytaQ0WUlZIpZH9rMGJq1yW4=
Subject key identifier:   7D:7C:81:DF:9F:DB:B7:77:4C:25:CD:4C:8D:5F:A8:8D:5C:14:96:E2
Authority key identifier: 18:7C:B6:47:A4:73:91:42:F9:C0:51:62:C8:3A:64:4F:D0:85:E9:94
Certificate issuer:       /CN=187cb647a4739142f9c05162c83a644fd085e994
Certificate serial:       01860E51174C86068EE3F7CD39B72989F176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GHy2R6RzkUL5wFFiyDpkT9CF6ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/37b627-b6b7-4179-8f36-57505b049c68/1/GHy2R6RzkUL5wFFiyDpkT9CF6ZQ.mft
Manifest number:          0284
Signing time:             Wed 01 Feb 2023 18:50:40 +0000
Manifest this update:     Wed 01 Feb 2023 18:50:40 +0000
Manifest next update:     Thu 02 Feb 2023 18:50:40 +0000
Files and hashes:         1: GHy2R6RzkUL5wFFiyDpkT9CF6ZQ.crl (hash: 6q/iZ84mFVY7kS7k98uT4VqyaaxqbNXdQ9paya0dSaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0e:51:17:4c:86:06:8e:e3:f7:cd:39:b7:29:89:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187cb647a4739142f9c05162c83a644fd085e994
        Validity
            Not Before: Feb  1 18:50:40 2023 GMT
            Not After : Feb  2 18:50:40 2023 GMT
        Subject: CN=7d7c81df9fdbb7774c25cd4c8d5fa88d5c1496e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:6b:82:d4:7b:ba:0e:30:48:e7:af:cb:18:
                    fe:d8:7f:37:9f:c8:d2:b9:32:c6:69:64:78:c6:b8:
                    e6:a6:7d:23:19:69:89:43:2e:0b:c1:98:26:82:76:
                    96:5e:08:ee:81:de:8e:12:64:76:95:47:f3:6c:9e:
                    99:a9:ae:2f:4d:ce:e1:c8:23:06:de:b2:5c:fe:bf:
                    72:93:50:e7:c7:ee:fe:cd:9a:10:76:ba:98:18:ea:
                    4c:29:c6:ce:06:88:59:91:bb:a2:4c:90:0a:91:70:
                    92:f7:c3:9c:77:72:cd:33:d6:3b:82:93:7a:c0:50:
                    74:4c:5a:8d:ef:c0:5e:f7:a7:19:2a:8d:1e:54:d1:
                    5a:2c:e3:62:d5:9e:68:ea:a1:44:62:69:ac:34:27:
                    60:33:1e:3c:6d:61:c5:53:66:13:08:4a:62:d6:f3:
                    dc:f4:43:cd:40:29:96:e3:ac:4e:99:37:1f:15:a3:
                    f7:12:26:4d:16:d4:86:83:a3:20:29:e3:0d:7a:34:
                    11:98:e4:3d:9f:13:53:e5:82:d3:f2:98:71:2f:2c:
                    06:32:cd:dd:87:6a:7d:16:d4:4d:2b:e4:ed:31:43:
                    4a:0f:5b:76:36:3b:9f:35:21:f3:b1:b3:4a:67:5b:
                    5e:4a:91:08:c9:81:eb:2c:ca:fd:37:71:d7:81:4b:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7C:81:DF:9F:DB:B7:77:4C:25:CD:4C:8D:5F:A8:8D:5C:14:96:E2
            X509v3 Authority Key Identifier:
                keyid:18:7C:B6:47:A4:73:91:42:F9:C0:51:62:C8:3A:64:4F:D0:85:E9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHy2R6RzkUL5wFFiyDpkT9CF6ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/37b627-b6b7-4179-8f36-57505b049c68/1/GHy2R6RzkUL5wFFiyDpkT9CF6ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/37b627-b6b7-4179-8f36-57505b049c68/1/GHy2R6RzkUL5wFFiyDpkT9CF6ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:60:19:c7:28:79:86:8b:cb:2e:b0:d8:57:81:01:ea:e6:
         a1:94:03:ce:4d:e1:6e:7d:2d:77:47:94:1f:f2:e7:dd:1a:b6:
         3c:47:b2:94:d7:df:de:0e:53:4a:05:ef:ce:68:23:07:84:b9:
         ad:4d:98:93:50:cc:1d:93:ff:7b:c8:8f:16:aa:ea:fc:f1:89:
         ad:6d:11:0c:43:99:c7:d1:c1:05:e2:79:34:2e:d9:c6:9e:aa:
         d4:71:56:da:17:97:4d:95:26:c6:b6:9d:41:b4:49:9a:54:ec:
         ca:fa:a5:5e:bf:8e:2f:4f:ba:e3:f7:57:6d:00:7a:07:f8:04:
         9c:e8:98:a0:39:3c:29:99:de:9a:08:07:c0:bc:e1:0a:ab:8f:
         44:9f:24:73:d0:8c:45:2b:8b:29:ef:36:85:89:c0:75:0a:02:
         3a:19:9c:a7:54:bb:af:19:25:b2:ea:18:7f:87:35:05:05:77:
         de:88:d4:91:2b:d1:ea:b3:ac:0c:04:5a:c2:f5:63:23:a1:65:
         ca:8a:a2:c3:57:c4:46:70:d3:35:0e:af:91:be:5c:1b:f3:01:
         f7:26:4d:88:cf:71:92:ce:4a:de:43:41:3a:4d:de:7d:04:bf:
         af:6b:2b:cd:07:c3:e2:90:d3:ee:f8:76:9d:54:ea:8b:df:a6:
         53:7a:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----