Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2665f1-d69f-4d06-aa7e-02de02a8ff59/1/enHaxjEjasASLLYtzMR4r_hQ6ok.mft
File:                     enHaxjEjasASLLYtzMR4r_hQ6ok.mft (raw, json)
Hash identifier:          5X9eVKX50bwwufxoqHzSdISM85/8wNsyBvLEbhrL1vE=
Subject key identifier:   B5:91:0B:46:EA:65:F2:FB:D4:5E:94:19:3F:64:8F:C3:F5:84:3D:1E
Authority key identifier: 7A:71:DA:C6:31:23:6A:C0:12:2C:B6:2D:CC:C4:78:AF:F8:50:EA:89
Certificate issuer:       /CN=7a71dac631236ac0122cb62dccc478aff850ea89
Certificate serial:       018634D7BA883B6BC4EC3FC31D6FAF4C7341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enHaxjEjasASLLYtzMR4r_hQ6ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/2665f1-d69f-4d06-aa7e-02de02a8ff59/1/enHaxjEjasASLLYtzMR4r_hQ6ok.mft
Manifest number:          0386
Signing time:             Thu 09 Feb 2023 06:23:18 +0000
Manifest this update:     Thu 09 Feb 2023 06:23:18 +0000
Manifest next update:     Fri 10 Feb 2023 06:23:18 +0000
Files and hashes:         1: enHaxjEjasASLLYtzMR4r_hQ6ok.crl (hash: 7gi9es7jnJ699SHVI2VGENizWmew2AG6afLRU7Sl/Iw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:34:d7:ba:88:3b:6b:c4:ec:3f:c3:1d:6f:af:4c:73:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a71dac631236ac0122cb62dccc478aff850ea89
        Validity
            Not Before: Feb  9 06:23:18 2023 GMT
            Not After : Feb 10 06:23:18 2023 GMT
        Subject: CN=b5910b46ea65f2fbd45e94193f648fc3f5843d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:65:69:97:52:f1:f8:ed:b8:ae:f6:d6:eb:
                    ff:87:06:dd:4d:28:b3:c9:c1:17:97:d1:6f:5a:1d:
                    aa:7d:1b:f0:36:c0:d9:ac:5d:cb:07:ae:f8:09:5c:
                    17:63:fc:bb:e8:bd:3a:3b:c7:f1:14:30:2b:6a:e3:
                    47:4c:6b:1c:b1:e9:f1:7f:de:19:56:63:4b:f5:34:
                    f8:54:ee:b5:17:6d:4d:10:02:1c:6e:28:79:6d:68:
                    25:45:c2:0e:c7:69:9c:25:72:f8:76:b5:48:b1:f0:
                    23:6e:12:f8:81:b5:06:75:31:81:da:a4:c7:bc:d1:
                    31:5c:8d:77:1a:1c:ed:65:52:09:86:3a:ab:da:df:
                    aa:41:6c:76:b5:f1:61:58:73:f4:46:e4:21:e3:0e:
                    01:b2:db:de:99:07:8b:14:9d:f8:83:17:11:d3:80:
                    b1:69:f3:d3:cc:37:37:7c:89:d1:dd:a5:63:a0:93:
                    11:3d:00:fd:62:04:16:1f:e5:02:a4:4e:3f:2b:66:
                    f1:6b:e0:78:a7:ea:98:01:88:dd:77:a4:b7:eb:3c:
                    6b:27:77:7b:e2:88:2f:d1:81:5d:9b:74:6e:db:8e:
                    2c:5f:9f:bd:d2:55:52:97:d4:48:4c:e2:d1:0b:18:
                    39:ef:4a:22:4b:c8:cc:e1:42:b1:aa:a2:5c:b9:ce:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:91:0B:46:EA:65:F2:FB:D4:5E:94:19:3F:64:8F:C3:F5:84:3D:1E
            X509v3 Authority Key Identifier:
                keyid:7A:71:DA:C6:31:23:6A:C0:12:2C:B6:2D:CC:C4:78:AF:F8:50:EA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enHaxjEjasASLLYtzMR4r_hQ6ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2665f1-d69f-4d06-aa7e-02de02a8ff59/1/enHaxjEjasASLLYtzMR4r_hQ6ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2665f1-d69f-4d06-aa7e-02de02a8ff59/1/enHaxjEjasASLLYtzMR4r_hQ6ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:05:fa:76:37:2a:30:5a:5b:cc:0a:bc:f4:e6:c4:08:c0:
         95:cc:bc:80:89:e7:7d:07:67:bf:a8:33:fd:8f:71:ab:c9:8a:
         67:1e:16:65:07:bc:4f:96:6d:a4:be:e9:77:55:34:81:e2:25:
         c0:fd:c8:12:99:86:65:ee:34:50:aa:dd:07:19:79:4f:41:38:
         95:55:a1:0b:51:b6:86:42:c4:67:5b:d8:01:08:8e:cd:9f:ef:
         ba:6e:ca:c3:45:d7:4d:0e:79:e1:f9:a1:5a:35:59:aa:0e:39:
         e7:1d:d9:81:07:e4:00:dd:7e:f1:e8:ea:23:7c:ae:56:5c:6c:
         cb:92:15:91:4e:0d:c8:db:65:8e:32:14:29:4b:1c:5f:d1:fb:
         80:f2:f7:b8:38:e5:c0:06:d6:98:a6:13:20:96:0d:de:60:45:
         e1:1a:9b:97:c7:b9:11:e3:f2:0d:50:29:0a:fa:9d:0c:4f:31:
         4e:b7:b0:46:4d:f2:ec:55:a8:51:29:f9:e5:a2:51:a5:04:9a:
         63:b1:d7:b4:4a:26:2f:3a:f5:39:cb:50:4c:5f:0f:1d:34:cb:
         f9:bd:38:02:81:3b:8b:72:ab:20:b3:ae:41:59:1f:36:e3:90:
         70:35:c2:3c:db:1b:7e:c6:41:d1:a1:d4:25:4c:d7:b0:fc:90:
         5c:1b:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----