Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8f4e55-0760-4ddf-8033-578f155f7f8e/1/jJ1OsXQmxqRfT0E49UxUSM0Fazo.mft
File:                     jJ1OsXQmxqRfT0E49UxUSM0Fazo.mft (raw, json)
Hash identifier:          mc9wZel5L2QcdIUtCwI4lgNHetewVY53BUohO0KvWs8=
Subject key identifier:   5E:A3:2F:CA:18:00:09:D2:7D:5B:64:98:F5:63:4A:36:0D:6B:8A:3E
Authority key identifier: 8C:9D:4E:B1:74:26:C6:A4:5F:4F:41:38:F5:4C:54:48:CD:05:6B:3A
Certificate issuer:       /CN=8c9d4eb17426c6a45f4f4138f54c5448cd056b3a
Certificate serial:       018DEDDF5E56E078068B2C434709B4A37B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJ1OsXQmxqRfT0E49UxUSM0Fazo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/8f4e55-0760-4ddf-8033-578f155f7f8e/1/jJ1OsXQmxqRfT0E49UxUSM0Fazo.mft
Manifest number:          052A
Signing time:             Wed 28 Feb 2024 04:00:55 +0000
Manifest this update:     Wed 28 Feb 2024 04:00:55 +0000
Manifest next update:     Thu 29 Feb 2024 04:00:55 +0000
Files and hashes:         1: jJ1OsXQmxqRfT0E49UxUSM0Fazo.crl (hash: +r5EGKHajJtwkUukfDBWejFX0XvIFSdVip80k55LcUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ed:df:5e:56:e0:78:06:8b:2c:43:47:09:b4:a3:7b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9d4eb17426c6a45f4f4138f54c5448cd056b3a
        Validity
            Not Before: Feb 28 04:00:55 2024 GMT
            Not After : Feb 29 04:00:55 2024 GMT
        Subject: CN=5ea32fca180009d27d5b6498f5634a360d6b8a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:ec:3f:18:39:ac:8f:cd:1b:e1:69:d0:84:
                    8f:39:de:ee:1f:6f:21:9a:0b:31:d6:da:ec:f1:05:
                    e8:0e:1d:66:88:37:9e:ef:2a:52:15:2f:81:1d:04:
                    cd:9d:86:d2:d5:04:7e:2a:65:74:df:ea:ad:6e:c2:
                    74:23:d3:aa:d2:2a:00:d3:86:e7:f4:a5:2f:e5:c2:
                    a5:00:2b:9b:00:83:b2:c8:bd:e6:d1:92:a8:ad:c3:
                    ee:bb:12:51:db:4d:d9:da:3e:3f:4f:ce:bb:f8:dd:
                    7b:df:36:d4:37:cf:f3:48:01:c1:0a:52:17:61:da:
                    65:b2:6c:49:9c:f6:5b:12:4d:29:d3:7b:66:7f:d5:
                    2b:29:fa:ae:f9:64:34:e6:6f:df:9e:fe:d2:22:16:
                    f9:1d:04:a9:ba:01:0e:b5:fa:cb:ef:43:22:b2:c2:
                    89:89:d5:aa:d8:b9:d1:d0:e9:95:5b:f7:f3:cf:7d:
                    f9:95:02:61:c5:6b:f1:95:e9:2a:86:3d:cb:4f:bf:
                    bd:6c:c7:40:77:e5:61:aa:ac:90:b9:eb:af:79:86:
                    65:3a:2a:87:7d:ae:71:d0:34:cd:e0:9e:c8:08:7f:
                    01:fb:e9:44:bd:b9:c1:84:ce:8b:7c:49:64:77:67:
                    6e:fd:21:61:70:6e:3f:c2:08:84:3f:2c:e3:e3:5e:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A3:2F:CA:18:00:09:D2:7D:5B:64:98:F5:63:4A:36:0D:6B:8A:3E
            X509v3 Authority Key Identifier:
                keyid:8C:9D:4E:B1:74:26:C6:A4:5F:4F:41:38:F5:4C:54:48:CD:05:6B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ1OsXQmxqRfT0E49UxUSM0Fazo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8f4e55-0760-4ddf-8033-578f155f7f8e/1/jJ1OsXQmxqRfT0E49UxUSM0Fazo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8f4e55-0760-4ddf-8033-578f155f7f8e/1/jJ1OsXQmxqRfT0E49UxUSM0Fazo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1f:e0:24:fa:06:70:08:bd:10:32:bc:b0:db:9d:92:38:ba:
         33:85:93:b2:bb:92:5a:37:12:da:d9:75:28:8e:dd:2a:8f:5b:
         0d:5c:39:3e:59:76:b2:da:e9:9a:53:41:33:62:8e:e1:44:54:
         06:30:72:6b:47:27:06:f9:14:11:89:b0:44:81:58:b3:a8:6d:
         d7:62:09:a5:1d:4b:8b:56:1c:51:a7:f4:c0:24:a4:90:de:d0:
         44:79:00:b6:fe:9c:99:ac:a7:22:96:84:28:61:dc:9b:8f:81:
         6b:c8:c5:60:77:60:d9:e7:cb:9f:20:ef:8c:ca:e6:c0:1b:1e:
         55:79:25:8f:2c:10:8d:dc:88:ed:e3:cf:a9:bd:a7:86:11:70:
         1d:66:cb:c8:94:53:ee:b8:27:a1:14:36:cc:8c:e6:c4:38:6a:
         0f:39:f4:38:c0:35:4c:57:60:44:06:d3:99:8a:16:fb:1a:91:
         82:08:f4:56:81:98:e9:1e:52:64:9d:43:a4:b7:bd:08:a7:9e:
         6a:9c:a5:53:fd:12:96:fe:53:26:dc:5e:4d:32:e1:8c:1a:c9:
         b2:c1:c1:82:de:1f:8d:7b:69:29:49:1a:59:b4:3f:7b:bc:d5:
         48:66:12:ab:ff:de:13:f4:a3:08:b9:38:2a:cd:a2:84:57:08:
         30:48:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----