Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/bb2775-69ae-4985-94c3-5f0471864166/1/Gjt547STLIPQqVu5Gl0TeGc16CA.mft
File:                     Gjt547STLIPQqVu5Gl0TeGc16CA.mft (raw, json)
Hash identifier:          dTiiNfpbnsPwSURIteMdgRXTnefSswwApbnVBXt2xoU=
Subject key identifier:   2D:1C:21:2E:F8:47:3B:58:1B:DF:02:C0:ED:58:07:D8:F3:A1:3B:F8
Authority key identifier: 1A:3B:79:E3:B4:93:2C:83:D0:A9:5B:B9:1A:5D:13:78:67:35:E8:20
Certificate issuer:       /CN=1a3b79e3b4932c83d0a95bb91a5d13786735e820
Certificate serial:       018C6D5971387E5821BCFA9C24C676374B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gjt547STLIPQqVu5Gl0TeGc16CA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/bb2775-69ae-4985-94c3-5f0471864166/1/Gjt547STLIPQqVu5Gl0TeGc16CA.mft
Manifest number:          0B69
Signing time:             Fri 15 Dec 2023 12:00:27 +0000
Manifest this update:     Fri 15 Dec 2023 12:00:27 +0000
Manifest next update:     Sat 16 Dec 2023 12:00:27 +0000
Files and hashes:         1: Gjt547STLIPQqVu5Gl0TeGc16CA.crl (hash: 7p4zqDoxTqdFEYNmg4oY269tTTFR/+NnseKGHAuYySQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6d:59:71:38:7e:58:21:bc:fa:9c:24:c6:76:37:4b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3b79e3b4932c83d0a95bb91a5d13786735e820
        Validity
            Not Before: Dec 15 12:00:27 2023 GMT
            Not After : Dec 16 12:00:27 2023 GMT
        Subject: CN=2d1c212ef8473b581bdf02c0ed5807d8f3a13bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:d8:4a:84:ff:39:00:c2:48:47:26:a6:64:
                    77:02:ca:c3:13:41:e3:70:d2:f3:b0:2d:54:c4:51:
                    cb:57:08:5f:7c:07:96:1d:70:37:1f:3a:15:da:5f:
                    be:c3:71:40:b3:01:22:5c:9d:1b:e6:29:08:8b:52:
                    60:e4:02:28:6e:d5:dd:dd:dc:bc:71:a2:c9:fd:ab:
                    cc:93:58:f3:0c:b0:9a:4d:32:56:ad:47:a5:31:72:
                    dc:a1:8d:97:1f:da:a7:a2:92:5b:93:41:b0:68:8a:
                    8a:fc:cc:06:79:8a:cd:67:33:0e:8d:03:26:41:97:
                    d1:fd:07:e2:50:9e:e2:58:83:93:e4:8f:b9:1b:4a:
                    f1:63:14:d1:09:cf:03:54:a8:8a:fd:3e:c2:40:bd:
                    3d:d5:bb:4a:e8:82:49:fe:99:c6:34:ad:f4:c7:e1:
                    2f:92:f6:18:f8:4b:d6:9d:c8:29:0b:5d:3d:3c:b2:
                    6f:43:01:d6:00:b3:b7:86:d9:4c:e2:92:dc:b6:d5:
                    b4:cd:68:d1:07:d7:68:1b:05:2d:62:4e:2c:02:bf:
                    11:51:f5:b2:83:50:cf:8c:b0:3d:b3:5e:4b:78:76:
                    66:3c:86:1b:3f:8d:f2:3c:a1:14:8c:32:ec:ce:42:
                    5d:fc:b8:e5:16:8a:e2:be:ee:21:c6:a9:07:36:a5:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1C:21:2E:F8:47:3B:58:1B:DF:02:C0:ED:58:07:D8:F3:A1:3B:F8
            X509v3 Authority Key Identifier:
                keyid:1A:3B:79:E3:B4:93:2C:83:D0:A9:5B:B9:1A:5D:13:78:67:35:E8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjt547STLIPQqVu5Gl0TeGc16CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/bb2775-69ae-4985-94c3-5f0471864166/1/Gjt547STLIPQqVu5Gl0TeGc16CA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/bb2775-69ae-4985-94c3-5f0471864166/1/Gjt547STLIPQqVu5Gl0TeGc16CA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:e3:ed:bb:b2:87:8c:45:84:8d:36:fd:37:39:e0:06:e2:
         ba:ab:df:31:0a:75:37:6d:25:65:52:79:d7:cb:9d:40:26:0a:
         a8:38:32:48:9d:4d:df:24:31:d8:b6:bf:01:c7:47:08:9a:5d:
         be:fc:35:c1:4e:52:68:a5:f9:fa:1e:d8:13:ec:c5:0b:aa:6b:
         cf:6d:d0:0d:07:80:1f:b8:4c:9d:cf:a6:9e:e0:0b:c5:38:c6:
         01:98:40:f5:ed:ad:2a:24:3e:96:7c:46:91:f2:b1:26:d6:a2:
         79:f8:5e:fc:7f:6e:64:5e:fd:2c:57:72:b6:92:cd:07:a2:85:
         9c:39:0f:7e:66:c6:4a:dd:b2:98:26:7d:8c:af:8d:99:f2:b8:
         00:11:bf:e8:6d:d0:4f:65:eb:9a:80:0c:bc:46:44:fa:a0:fb:
         c6:bf:80:34:ee:df:69:f2:81:0f:66:15:b4:3e:f5:39:db:41:
         64:c9:c2:e4:ef:07:92:cf:e1:b4:c9:2a:ce:1e:d5:8b:3b:8d:
         dc:51:49:ba:12:c8:af:43:6d:8e:2a:c4:c3:db:ef:a9:b9:76:
         b6:b5:2f:e0:1e:8b:1d:25:39:fd:e3:da:ba:8c:88:5c:f6:71:
         86:6b:c6:d5:bb:c1:6b:90:b1:38:ef:71:f5:04:03:88:9a:89:
         c4:a2:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----