Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d3d774-0bad-4d7f-88c0-add3b39ea43b/1/FcZqnZJBwcRiDnWMj8IPzUYb9fg.mft
File:                     FcZqnZJBwcRiDnWMj8IPzUYb9fg.mft (raw, json)
Hash identifier:          LI9Wm0EZ1ctRMHSv4KsWJJUqzXVDmdxeVoExVMZL4cE=
Subject key identifier:   D7:2D:E7:C1:56:6E:F1:F3:A8:64:DE:51:C4:07:CA:94:C3:64:99:78
Authority key identifier: 15:C6:6A:9D:92:41:C1:C4:62:0E:75:8C:8F:C2:0F:CD:46:1B:F5:F8
Certificate issuer:       /CN=15c66a9d9241c1c4620e758c8fc20fcd461bf5f8
Certificate serial:       0188FBA3625E71CD7131AC7E16DEDB6CF048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcZqnZJBwcRiDnWMj8IPzUYb9fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d3d774-0bad-4d7f-88c0-add3b39ea43b/1/FcZqnZJBwcRiDnWMj8IPzUYb9fg.mft
Manifest number:          0754
Signing time:             Tue 27 Jun 2023 06:56:08 +0000
Manifest this update:     Tue 27 Jun 2023 06:56:08 +0000
Manifest next update:     Wed 28 Jun 2023 06:56:08 +0000
Files and hashes:         1: FcZqnZJBwcRiDnWMj8IPzUYb9fg.crl (hash: +HPFrbXy/8WeR2C0ULQ4V48x19OXIbLIa7dprw9K/DA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fb:a3:62:5e:71:cd:71:31:ac:7e:16:de:db:6c:f0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c66a9d9241c1c4620e758c8fc20fcd461bf5f8
        Validity
            Not Before: Jun 27 06:56:08 2023 GMT
            Not After : Jun 28 06:56:08 2023 GMT
        Subject: CN=d72de7c1566ef1f3a864de51c407ca94c3649978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:40:41:d0:da:ba:b9:af:ab:1f:af:b6:31:
                    14:d3:77:5d:e4:c6:58:15:b9:8b:70:07:32:83:a9:
                    35:3b:90:28:00:9d:b2:7c:d0:99:20:2b:60:06:a2:
                    53:bb:7d:fb:a6:d4:f4:e8:78:14:ee:7d:77:2f:10:
                    e4:68:72:c8:e2:b8:a3:23:ce:3a:88:cd:3b:94:2f:
                    1e:fa:0a:4c:3c:60:37:49:3b:56:5f:60:3e:00:f9:
                    02:09:0c:ec:6c:9d:55:e4:58:19:02:de:ca:fe:e6:
                    f6:28:79:0c:71:ff:b5:26:3c:b1:41:31:ca:9e:a5:
                    d6:e8:70:ec:06:4a:bb:a8:ad:6b:66:eb:37:fc:90:
                    16:3e:e0:05:e1:82:f8:ec:92:1a:6b:02:73:75:c1:
                    dc:f1:d2:6a:50:27:40:54:5f:1d:c8:7f:03:05:e9:
                    83:bc:8d:c7:c0:4e:ea:d8:a6:bc:55:98:e7:2a:a9:
                    ef:65:1e:41:90:6a:5f:c9:a6:d3:08:0c:ea:a3:e6:
                    48:9a:a5:6f:08:85:61:9b:d1:d1:f4:49:14:b6:99:
                    4b:c2:f5:6e:e3:e3:b6:f6:16:6b:30:fb:b7:e8:72:
                    1c:be:aa:8c:d3:54:94:8d:3d:29:f6:85:f3:f9:f7:
                    e8:cd:1a:6c:0c:f8:fa:ba:b7:d1:2e:99:84:3d:43:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2D:E7:C1:56:6E:F1:F3:A8:64:DE:51:C4:07:CA:94:C3:64:99:78
            X509v3 Authority Key Identifier:
                keyid:15:C6:6A:9D:92:41:C1:C4:62:0E:75:8C:8F:C2:0F:CD:46:1B:F5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcZqnZJBwcRiDnWMj8IPzUYb9fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d3d774-0bad-4d7f-88c0-add3b39ea43b/1/FcZqnZJBwcRiDnWMj8IPzUYb9fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d3d774-0bad-4d7f-88c0-add3b39ea43b/1/FcZqnZJBwcRiDnWMj8IPzUYb9fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a4:9d:70:b5:ee:f6:dd:60:8a:e8:4d:90:43:16:86:dd:43:
         64:e4:6c:12:35:c7:15:4f:82:5e:37:08:4c:cf:c0:3e:ef:90:
         9c:eb:0f:78:e5:23:9a:e6:89:c0:03:a4:17:18:d4:a5:33:56:
         72:78:49:60:b9:e2:a9:c7:3c:62:e6:98:1c:23:0b:70:38:01:
         ec:3b:9e:21:5e:aa:42:70:c5:b2:e6:66:77:e3:76:62:89:ad:
         8b:23:5f:31:3f:ce:5a:70:1f:7c:f3:5d:ff:76:49:19:9a:b2:
         d2:a3:52:a6:fa:da:7f:c4:30:7e:ae:2b:9b:bc:f8:2e:d0:9d:
         d2:f7:c4:ad:d4:4c:9b:06:a1:62:d5:c8:f5:46:3f:1d:f1:e0:
         ef:fa:31:fb:c3:b2:4c:ac:d4:6c:d9:a2:0a:82:c9:0d:e9:17:
         74:cc:2b:c6:4c:54:1d:01:fd:ea:a5:3b:a8:04:cf:93:34:c7:
         2f:a1:f7:f8:2c:88:36:4b:7b:73:76:ad:54:fe:d2:f6:ad:91:
         25:dd:cf:64:76:64:97:ed:b2:d2:c2:5f:12:c1:f0:5b:cc:3e:
         83:bd:38:51:d5:09:33:27:35:bb:05:8d:b4:d7:5f:ab:b7:92:
         eb:20:50:58:6b:0b:82:89:c4:59:f2:46:12:10:e1:89:c4:07:
         48:b8:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----