Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c65ff8-cf51-4c5a-b19b-23783ca7fd20/1/8xxZgf7EUG-i9TtrKLgtFHeTSKs.mft
File:                     8xxZgf7EUG-i9TtrKLgtFHeTSKs.mft (raw, json)
Hash identifier:          i56sNORLWM5DrWL2C7b8hFPNBTJYkxvIF1kf5DnJNmA=
Subject key identifier:   EE:B8:0A:5E:DE:0E:47:54:FC:75:B5:3C:7B:0F:95:73:91:EA:AE:33
Authority key identifier: F3:1C:59:81:FE:C4:50:6F:A2:F5:3B:6B:28:B8:2D:14:77:93:48:AB
Certificate issuer:       /CN=f31c5981fec4506fa2f53b6b28b82d14779348ab
Certificate serial:       018B36A5B3CFF34DC4418A64D0E60013A3FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8xxZgf7EUG-i9TtrKLgtFHeTSKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c65ff8-cf51-4c5a-b19b-23783ca7fd20/1/8xxZgf7EUG-i9TtrKLgtFHeTSKs.mft
Manifest number:          0F39
Signing time:             Mon 16 Oct 2023 04:01:50 +0000
Manifest this update:     Mon 16 Oct 2023 04:01:50 +0000
Manifest next update:     Tue 17 Oct 2023 04:01:50 +0000
Files and hashes:         1: 8xxZgf7EUG-i9TtrKLgtFHeTSKs.crl (hash: LDvflOwKjDGa6EpRg1o/XAhi1RN6jJ1QOkw+4Q1a6to=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:a5:b3:cf:f3:4d:c4:41:8a:64:d0:e6:00:13:a3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31c5981fec4506fa2f53b6b28b82d14779348ab
        Validity
            Not Before: Oct 16 04:01:50 2023 GMT
            Not After : Oct 17 04:01:50 2023 GMT
        Subject: CN=eeb80a5ede0e4754fc75b53c7b0f957391eaae33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:ca:cd:48:bd:e8:9b:3b:96:35:05:79:33:
                    95:ea:ee:28:d3:81:73:e6:ea:54:99:20:e0:95:94:
                    25:94:45:0c:6e:0e:82:76:5c:69:5e:5d:e9:59:ce:
                    75:4c:c9:b9:fb:0a:57:b1:cb:2e:09:bb:ef:5f:c3:
                    86:d0:12:9f:b2:5a:20:59:c4:fe:c2:55:a6:75:39:
                    d3:d0:31:7e:be:c1:68:ea:5e:8a:9d:9c:54:c6:ce:
                    92:d8:89:68:ec:a8:74:7b:49:07:09:6c:a2:f0:5e:
                    b5:d3:f6:e2:7b:1b:98:f4:d3:7d:95:c8:ed:76:4b:
                    60:8f:77:a6:75:aa:56:3d:c8:56:4f:c4:6f:a7:2b:
                    b0:37:9b:b5:d7:b0:88:f6:71:39:61:8c:2e:1c:5d:
                    31:9c:1f:ba:fa:cc:df:7d:a6:78:0c:c0:95:e8:2e:
                    d6:d3:9f:a6:cc:00:33:d2:24:63:9f:84:da:e1:80:
                    60:61:cd:62:fd:25:4f:31:4c:e2:f7:9b:a6:70:f4:
                    5f:0e:9f:ee:1d:7d:28:32:2e:6f:9c:32:42:9a:ec:
                    b5:3e:9e:02:a2:1d:b4:00:2a:15:fd:6d:db:bf:bf:
                    0e:05:61:d9:a7:c6:21:36:35:5a:df:96:59:d8:be:
                    b4:7c:71:6a:65:34:9b:1a:d3:db:b8:96:c4:ff:f0:
                    cf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B8:0A:5E:DE:0E:47:54:FC:75:B5:3C:7B:0F:95:73:91:EA:AE:33
            X509v3 Authority Key Identifier:
                keyid:F3:1C:59:81:FE:C4:50:6F:A2:F5:3B:6B:28:B8:2D:14:77:93:48:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xxZgf7EUG-i9TtrKLgtFHeTSKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c65ff8-cf51-4c5a-b19b-23783ca7fd20/1/8xxZgf7EUG-i9TtrKLgtFHeTSKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c65ff8-cf51-4c5a-b19b-23783ca7fd20/1/8xxZgf7EUG-i9TtrKLgtFHeTSKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:76:25:88:93:17:02:06:2c:ab:de:9a:28:11:2c:f8:8c:b5:
         30:83:5a:a1:19:fb:a6:5b:e4:05:5b:72:fd:ba:98:9a:88:13:
         1f:91:82:44:62:b5:23:6d:b7:b0:89:25:55:34:70:7a:86:69:
         5e:40:82:91:5b:5a:63:94:b0:2c:a3:b7:06:d8:16:c8:e5:f1:
         88:46:be:26:9e:a3:3a:0e:c1:71:4b:0b:63:39:91:4d:f1:6f:
         7e:8a:52:21:13:a3:58:f6:28:81:a6:66:9e:7c:3d:63:8d:c0:
         50:42:4d:28:6e:f0:b9:ae:06:8d:12:51:c6:5c:ec:22:61:92:
         4f:e0:7c:ec:14:50:6a:de:5a:83:d4:e3:15:15:f0:33:47:35:
         96:13:13:ca:46:36:a5:a9:63:ce:d2:36:91:cf:66:c1:04:b4:
         7a:af:d1:3e:03:d0:d3:47:b7:c9:a2:51:3c:46:06:3f:f0:37:
         e2:db:ab:9a:46:88:a4:22:a4:aa:ee:9f:37:10:af:e8:cf:4a:
         90:d3:5b:57:a2:2b:b2:de:c8:1e:37:59:39:bf:8d:4e:14:7b:
         07:20:b1:39:cf:21:b2:f3:2d:74:e7:ae:9d:7e:75:e4:a3:5f:
         85:d3:67:84:30:2c:a0:0f:1b:66:dc:f8:6f:b5:3e:16:4a:fc:
         ad:b1:df:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----