Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/c1c475-5003-4df7-ab3a-13b3e6072431/1/TxZ56k_-tbUDhYRWQvkNi3q8sY0.mft
File:                     TxZ56k_-tbUDhYRWQvkNi3q8sY0.mft (raw, json)
Hash identifier:          4kYVG5djF/ueXkB/mERiMhbe88TK6E9M8uZjOdPp4Zw=
Subject key identifier:   B9:FA:06:BE:CE:4E:14:0E:B1:63:B5:58:9F:43:0F:4F:15:42:12:FD
Authority key identifier: 4F:16:79:EA:4F:FE:B5:B5:03:85:84:56:42:F9:0D:8B:7A:BC:B1:8D
Certificate issuer:       /CN=4f1679ea4ffeb5b50385845642f90d8b7abcb18d
Certificate serial:       01879312A6CCFABEB7B75D7FAAC8E1B7FA29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxZ56k_-tbUDhYRWQvkNi3q8sY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/c1c475-5003-4df7-ab3a-13b3e6072431/1/TxZ56k_-tbUDhYRWQvkNi3q8sY0.mft
Manifest number:          0CC4
Signing time:             Tue 18 Apr 2023 06:34:45 +0000
Manifest this update:     Tue 18 Apr 2023 06:34:45 +0000
Manifest next update:     Wed 19 Apr 2023 06:34:45 +0000
Files and hashes:         1: TxZ56k_-tbUDhYRWQvkNi3q8sY0.crl (hash: eY3/pGvM6yD5f5jfNF7a8rAMJUKubzzvyZXUbUVqwyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:93:12:a6:cc:fa:be:b7:b7:5d:7f:aa:c8:e1:b7:fa:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1679ea4ffeb5b50385845642f90d8b7abcb18d
        Validity
            Not Before: Apr 18 06:34:45 2023 GMT
            Not After : Apr 19 06:34:45 2023 GMT
        Subject: CN=b9fa06bece4e140eb163b5589f430f4f154212fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:ad:0f:1a:0a:ed:d3:d1:50:48:9a:fa:e5:
                    28:b5:6f:ab:41:74:f3:8e:10:25:ce:f3:06:42:70:
                    bd:8e:8c:9a:d4:8d:38:28:9d:da:99:74:18:a4:cd:
                    af:a2:6f:30:f8:41:4f:17:fa:8e:75:1d:fe:6e:d6:
                    e9:69:5d:ae:95:c3:d6:55:68:8b:e8:1f:3e:2d:ce:
                    cd:31:ed:13:13:df:24:f7:07:8d:f6:ad:11:cd:a9:
                    21:77:e4:39:94:12:64:82:ac:87:94:08:5d:a0:7c:
                    da:8c:ed:20:6c:81:53:e0:5a:50:13:58:1a:4d:35:
                    55:3b:60:33:a2:ac:45:64:96:4f:2a:bf:f0:bf:8b:
                    89:74:74:aa:55:56:ae:e1:e3:5a:af:60:e4:7a:de:
                    78:65:ef:ea:9a:89:21:f9:c5:b4:5a:bc:cd:b2:35:
                    87:89:2d:34:77:31:71:e7:89:09:68:1c:fb:26:a5:
                    78:e7:df:27:65:51:34:ed:53:79:f0:8c:a5:7e:54:
                    c6:65:c9:ba:79:a3:38:2b:e9:07:3b:55:31:5c:91:
                    86:10:49:dc:2d:c6:bf:b7:0f:50:0e:fe:0f:a0:5c:
                    02:d7:6a:fb:35:39:a8:0f:ce:81:bb:9c:d8:22:5e:
                    a2:d8:d7:ce:11:5f:39:85:6b:32:e1:27:80:cc:5b:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:06:BE:CE:4E:14:0E:B1:63:B5:58:9F:43:0F:4F:15:42:12:FD
            X509v3 Authority Key Identifier:
                keyid:4F:16:79:EA:4F:FE:B5:B5:03:85:84:56:42:F9:0D:8B:7A:BC:B1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxZ56k_-tbUDhYRWQvkNi3q8sY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/c1c475-5003-4df7-ab3a-13b3e6072431/1/TxZ56k_-tbUDhYRWQvkNi3q8sY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/c1c475-5003-4df7-ab3a-13b3e6072431/1/TxZ56k_-tbUDhYRWQvkNi3q8sY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:ad:6a:a9:75:f4:3a:eb:e2:f4:ac:86:63:1a:9d:b8:d9:
         f1:08:49:4e:1a:82:2a:3c:26:42:62:4d:a4:43:f8:82:a0:4b:
         ca:13:1e:69:53:21:50:34:5d:ca:18:f2:4c:00:40:2a:c9:ae:
         dd:d3:4a:b7:77:da:f1:59:e2:d1:5c:72:37:28:4c:76:b5:6b:
         f7:71:e8:23:18:77:98:bc:2a:a8:c8:06:fc:b1:6b:77:14:49:
         18:ef:e7:eb:e7:3b:a2:90:e0:94:1e:8b:51:f3:99:c2:8a:2d:
         5a:8c:83:e8:30:d4:45:ac:7e:c8:f4:66:32:50:c9:bd:a2:26:
         a6:ac:d2:34:06:ae:7a:6a:15:18:bc:7b:35:a2:c9:ed:a2:78:
         06:4d:6f:52:0f:2a:f8:24:1b:d5:f8:1c:c5:69:ad:bd:26:19:
         1b:7f:9a:52:6b:42:0c:86:38:be:57:88:66:a8:f3:5a:8e:65:
         8b:bb:d2:fc:d9:43:c3:98:fd:dd:62:a3:fb:60:fa:58:95:48:
         3b:3f:3d:f5:b3:82:48:04:8b:1c:e2:d5:8d:fc:78:0b:ca:c0:
         96:75:d8:f0:00:17:2f:9b:e5:0f:1a:27:8e:82:b5:1e:c0:e8:
         fb:6f:76:8c:f8:ca:69:8a:2e:e3:20:e0:ed:45:af:2f:59:bf:
         60:0f:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----