Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/cb620b-5e0c-4450-8dc3-cc95a134299b/1/M03W7ixgTf4evUrwyPfnLfsSiAc.mft
File:                     M03W7ixgTf4evUrwyPfnLfsSiAc.mft (raw, json)
Hash identifier:          T0mXhy6z3zny1ARbTiRllW4e8+Eny0mrn414caNsJ2w=
Subject key identifier:   C1:CF:A4:96:57:1A:77:E5:96:C3:48:14:07:2A:E7:E7:A8:69:71:CE
Authority key identifier: 33:4D:D6:EE:2C:60:4D:FE:1E:BD:4A:F0:C8:F7:E7:2D:FB:12:88:07
Certificate issuer:       /CN=334dd6ee2c604dfe1ebd4af0c8f7e72dfb128807
Certificate serial:       0187946BE790593A15B2E5D037895298E0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M03W7ixgTf4evUrwyPfnLfsSiAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/cb620b-5e0c-4450-8dc3-cc95a134299b/1/M03W7ixgTf4evUrwyPfnLfsSiAc.mft
Manifest number:          028B
Signing time:             Tue 18 Apr 2023 12:51:52 +0000
Manifest this update:     Tue 18 Apr 2023 12:51:52 +0000
Manifest next update:     Wed 19 Apr 2023 12:51:52 +0000
Files and hashes:         1: M03W7ixgTf4evUrwyPfnLfsSiAc.crl (hash: EogKgrcGqEGuoJWLScbhN/PYIacrnhJrleje62XylK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:94:6b:e7:90:59:3a:15:b2:e5:d0:37:89:52:98:e0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334dd6ee2c604dfe1ebd4af0c8f7e72dfb128807
        Validity
            Not Before: Apr 18 12:51:52 2023 GMT
            Not After : Apr 19 12:51:52 2023 GMT
        Subject: CN=c1cfa496571a77e596c34814072ae7e7a86971ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:47:80:e7:95:56:70:46:bc:e2:ab:02:9f:
                    cb:f0:a4:5f:50:23:88:aa:ee:5f:ab:01:ec:f1:31:
                    1e:11:f3:c0:ce:8e:d8:a6:11:b4:73:83:ce:3b:47:
                    18:5e:4a:65:1c:9c:1f:7d:2a:4f:08:2e:3e:9b:41:
                    b3:df:d2:02:38:86:8e:6e:5e:be:4a:cb:4e:c9:6d:
                    d0:04:fb:71:8c:a0:3d:0c:4f:e0:23:81:c6:6f:d0:
                    c2:16:59:ad:31:a4:51:5a:57:3c:59:68:d2:a3:93:
                    0e:56:85:fd:08:93:54:d8:55:3b:18:e2:19:e7:e6:
                    50:43:55:04:a6:4e:c0:f7:60:5f:a3:02:47:28:e6:
                    a1:61:c2:bd:a6:61:bc:2f:b7:d2:a6:10:5c:45:2e:
                    b0:f1:c4:2e:f6:74:a3:78:9c:8e:09:2b:68:6f:72:
                    b4:b2:5e:1d:e5:bd:95:5f:c6:61:ec:b8:b3:da:cc:
                    0b:0c:6c:62:57:01:b1:c4:02:5d:07:14:e9:29:1c:
                    49:e4:0b:c6:04:e8:b9:eb:97:f0:3a:ab:48:5a:c2:
                    20:e7:e2:64:84:3c:d6:ed:b2:34:16:76:36:d0:fd:
                    b2:ea:44:be:a9:a7:08:bb:e1:df:f7:38:cb:94:ba:
                    a5:58:d3:a2:fa:66:00:5e:c6:d0:d5:c1:a9:76:3d:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CF:A4:96:57:1A:77:E5:96:C3:48:14:07:2A:E7:E7:A8:69:71:CE
            X509v3 Authority Key Identifier:
                keyid:33:4D:D6:EE:2C:60:4D:FE:1E:BD:4A:F0:C8:F7:E7:2D:FB:12:88:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M03W7ixgTf4evUrwyPfnLfsSiAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/cb620b-5e0c-4450-8dc3-cc95a134299b/1/M03W7ixgTf4evUrwyPfnLfsSiAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/cb620b-5e0c-4450-8dc3-cc95a134299b/1/M03W7ixgTf4evUrwyPfnLfsSiAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cb:b9:40:e8:86:fe:fa:68:0e:f1:2c:00:c7:9d:a6:f5:a6:
         3f:1e:44:66:57:c2:c4:88:17:59:30:8a:bc:0a:05:e0:9c:4b:
         8e:2e:04:0e:47:fb:12:f2:1c:8d:2a:8a:2e:c3:a9:b0:c1:4c:
         21:61:e0:02:7b:85:87:ea:33:82:3d:fa:39:f8:3e:8b:8d:fb:
         74:e8:77:26:97:a4:d1:8a:f3:af:72:cd:35:37:92:fa:ac:d8:
         2d:f1:44:2f:71:3b:4e:97:af:4e:71:b1:bf:ca:89:b0:3c:48:
         da:6a:55:5c:2d:26:c9:f0:1e:1c:d2:ba:95:00:0d:e2:a0:e4:
         f2:31:47:01:e4:15:c0:45:07:3f:2e:09:b3:37:54:7d:f0:71:
         2a:95:be:1a:e3:8e:9d:2c:55:2d:cc:cf:cd:c5:97:27:f0:ee:
         17:dd:8b:cd:dd:4e:4c:64:24:8c:de:83:b8:17:26:a3:ed:8f:
         d7:f9:6a:73:0e:6e:c2:83:b4:c8:ec:0b:9f:35:9b:d6:7c:86:
         26:69:75:9f:2c:8b:9b:16:86:68:7a:22:a6:5d:69:4d:ed:44:
         9f:99:a3:65:f2:5f:d1:07:a0:0a:f9:d0:d3:dd:90:37:0c:46:
         14:d3:6b:fc:96:ff:b6:7f:f7:6a:fc:29:91:87:53:7b:c2:0d:
         83:6a:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----