Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.mft
File:                     NclgZQk5mLpCz7oRvw0X06xAPUA.mft (raw, json)
Hash identifier:          bN7d1IV4w5cciijQItvhWRnsQ0l7BPHOfBq9elzHrDY=
Subject key identifier:   39:A1:1A:57:26:1D:00:1F:EE:40:E3:2F:6B:16:35:E7:55:3D:2F:04
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Certificate issuer:       /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial:       018BCD7E7A0FD1436D815620B4CEE4AEBC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.mft
Manifest number:          0AB7
Signing time:             Tue 14 Nov 2023 11:01:39 +0000
Manifest this update:     Tue 14 Nov 2023 11:01:39 +0000
Manifest next update:     Wed 15 Nov 2023 11:01:39 +0000
Files and hashes:         1: NclgZQk5mLpCz7oRvw0X06xAPUA.crl (hash: jLTYT0RzPFlbaWb7h8yRdq55PSvTV4R0eO5lxc06eYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cd:7e:7a:0f:d1:43:6d:81:56:20:b4:ce:e4:ae:bc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
        Validity
            Not Before: Nov 14 11:01:39 2023 GMT
            Not After : Nov 15 11:01:39 2023 GMT
        Subject: CN=39a11a57261d001fee40e32f6b1635e7553d2f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:33:a3:27:89:78:49:dc:fa:ef:81:86:e7:
                    97:16:64:c7:d9:49:a9:23:0e:a3:64:dd:0a:73:54:
                    c8:74:b7:0e:ac:41:2e:0a:1d:b5:f5:c7:35:7f:d6:
                    b1:3f:2e:d7:2f:b0:e6:70:e8:f2:38:60:b8:6f:69:
                    c6:cd:4e:c7:32:b4:f7:71:36:84:59:b0:3b:5d:12:
                    99:12:f2:70:d3:74:da:db:5a:ef:9c:0c:16:41:74:
                    72:72:91:2b:65:75:63:5e:9b:13:07:17:2c:5c:6a:
                    33:8b:5c:da:c9:c5:d9:13:b7:8b:a4:ae:fa:f7:ea:
                    b4:a6:43:31:0b:e1:3d:ca:1b:d9:15:79:13:8e:61:
                    ac:c9:eb:3c:68:2b:0f:d7:f8:98:65:88:76:c5:7e:
                    38:0c:ee:4e:08:2b:36:ad:84:4a:cd:96:70:a7:9e:
                    f8:46:8f:60:14:53:e1:2a:1e:b4:80:75:b0:5d:48:
                    0c:09:79:ee:e3:98:54:5a:f4:a0:3c:e0:2c:bc:63:
                    e9:30:ae:d9:ad:92:98:80:99:16:34:ab:19:3a:66:
                    e9:3c:e2:bb:1a:9a:13:a8:80:2f:00:9c:8e:13:65:
                    5c:6e:15:25:d4:5b:ee:2f:f0:2f:7c:0c:ef:14:1a:
                    ed:85:bf:4e:3f:f2:d5:9f:52:eb:81:43:6c:3c:5b:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:1A:57:26:1D:00:1F:EE:40:E3:2F:6B:16:35:E7:55:3D:2F:04
            X509v3 Authority Key Identifier:
                keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:4b:5a:79:6a:1c:d2:f8:37:a1:a0:69:ec:e9:06:71:b2:
         30:9f:0d:8f:10:31:ec:cc:0a:82:24:31:a6:6e:e0:f3:35:60:
         9f:fc:86:c0:30:f0:78:71:3e:1d:49:f5:06:5b:f8:4a:92:b0:
         db:86:c4:95:0e:4e:cf:eb:ce:1d:f2:a3:0d:48:c4:41:76:7d:
         75:9d:ab:70:24:58:22:9d:9e:c8:6a:02:af:05:3a:6a:9e:b3:
         ee:0b:7f:d8:11:cd:99:1d:74:d4:d8:d6:4f:e4:5d:7f:d0:37:
         02:23:a9:09:02:ef:f0:dd:6f:4e:e0:b2:8f:7c:6a:13:d3:be:
         03:f2:d0:8a:61:55:1b:ea:d6:ef:8f:ea:ee:ed:2a:f6:d4:43:
         63:4a:98:fa:08:d8:6f:9d:6c:99:43:8d:eb:eb:5c:0b:6a:49:
         28:7e:91:fd:4f:2d:2a:9b:b0:0f:6d:dc:79:69:ad:34:91:11:
         d7:6d:30:41:3c:b4:0a:a3:3f:42:ff:86:af:3a:b1:66:c4:b2:
         6d:a9:91:cb:5e:2d:0b:30:75:e5:25:e4:cf:2b:80:6d:1a:fd:
         a0:d3:d9:80:20:b3:18:43:99:b9:21:94:f1:3b:a2:46:83:fd:
         96:d3:ab:09:18:26:2b:e2:0d:b3:12:ae:0a:3d:d3:1d:62:49:
         3c:76:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----