Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e8bcbd-ddeb-466e-a9bd-969316a27f1e/1/Th6VW09zJjsIOc0ShnrpGCPqBn8.mft
File:                     Th6VW09zJjsIOc0ShnrpGCPqBn8.mft (raw, json)
Hash identifier:          wTFJgs8svxGOgw8ikBpiR1bMX6W8TooQEC2dPREerv8=
Subject key identifier:   7B:A4:03:DE:8D:8F:D5:45:16:DF:FC:81:67:F1:10:2D:D7:9B:46:C0
Authority key identifier: 4E:1E:95:5B:4F:73:26:3B:08:39:CD:12:86:7A:E9:18:23:EA:06:7F
Certificate issuer:       /CN=4e1e955b4f73263b0839cd12867ae91823ea067f
Certificate serial:       0185C7C55BC1A14E880B45EB884D2FFCA837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Th6VW09zJjsIOc0ShnrpGCPqBn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e8bcbd-ddeb-466e-a9bd-969316a27f1e/1/Th6VW09zJjsIOc0ShnrpGCPqBn8.mft
Manifest number:          0626
Signing time:             Thu 19 Jan 2023 02:04:38 +0000
Manifest this update:     Thu 19 Jan 2023 02:04:38 +0000
Manifest next update:     Fri 20 Jan 2023 02:04:38 +0000
Files and hashes:         1: Th6VW09zJjsIOc0ShnrpGCPqBn8.crl (hash: o7fNuLtK6Iqwq8sB3ELAQ0wLXMhLh1eMHAHisB3mUqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c7:c5:5b:c1:a1:4e:88:0b:45:eb:88:4d:2f:fc:a8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1e955b4f73263b0839cd12867ae91823ea067f
        Validity
            Not Before: Jan 19 02:04:38 2023 GMT
            Not After : Jan 20 02:04:38 2023 GMT
        Subject: CN=7ba403de8d8fd54516dffc8167f1102dd79b46c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:b3:6c:5b:c0:13:5f:b8:62:41:ff:4e:d8:
                    ae:a9:cc:8c:fe:53:de:79:ea:b0:89:05:70:3a:29:
                    25:d8:e8:28:76:f4:9f:1c:2a:08:12:fb:b5:1a:1a:
                    e1:3a:11:0b:bb:95:90:d7:0c:23:8f:88:3b:c1:86:
                    8d:41:30:fe:5c:06:7f:6f:91:92:3e:74:55:9d:c4:
                    5f:12:6e:e2:c9:e5:b5:9b:7b:e6:2b:25:14:88:4a:
                    b3:90:5b:a1:c8:39:f1:16:1f:78:84:ea:5a:03:0d:
                    a4:cc:b5:96:0a:cc:78:7a:b2:7c:40:c7:b4:ac:53:
                    b7:13:f3:31:87:60:65:bb:4a:03:6c:93:54:91:53:
                    44:7e:5e:37:c9:d7:d6:9c:0a:f1:6a:bb:c4:ad:93:
                    7e:d5:62:4b:65:47:6a:9d:68:e8:90:e3:6d:e9:78:
                    97:c7:e1:d3:ea:4d:7a:7b:ec:b5:db:ec:25:b8:fc:
                    b7:f6:13:df:09:44:0e:e0:84:6c:a6:46:62:c9:42:
                    d2:78:a8:23:e8:3f:e1:99:b7:a2:a4:6b:6e:1b:81:
                    d4:9a:b9:88:7a:db:cc:4a:8e:b2:22:46:2d:01:1d:
                    f8:2f:5a:c9:54:90:97:fd:06:11:18:b7:fe:fe:bb:
                    68:8c:8a:60:ff:20:db:93:c8:d2:c8:c6:67:2d:f6:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:03:DE:8D:8F:D5:45:16:DF:FC:81:67:F1:10:2D:D7:9B:46:C0
            X509v3 Authority Key Identifier:
                keyid:4E:1E:95:5B:4F:73:26:3B:08:39:CD:12:86:7A:E9:18:23:EA:06:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Th6VW09zJjsIOc0ShnrpGCPqBn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e8bcbd-ddeb-466e-a9bd-969316a27f1e/1/Th6VW09zJjsIOc0ShnrpGCPqBn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e8bcbd-ddeb-466e-a9bd-969316a27f1e/1/Th6VW09zJjsIOc0ShnrpGCPqBn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:d8:79:a1:3d:4a:dd:94:e6:a5:4a:c3:e8:16:fb:e7:67:
         e5:04:2e:7f:17:57:38:b1:8e:1b:0b:18:c2:90:58:2b:a0:0e:
         4a:a7:3b:1b:a7:55:86:98:bb:ef:83:68:c4:4e:46:99:1e:81:
         8c:de:30:81:f7:42:c8:fa:77:da:2a:30:3b:d9:f1:88:fb:a4:
         9f:bd:bf:ba:cd:9f:72:42:d7:cd:9d:34:29:6e:34:bb:71:c6:
         71:cc:f7:83:08:d7:e9:77:31:53:b1:46:28:31:03:98:04:5b:
         39:28:68:ed:d0:d7:58:f2:76:0c:8b:0a:12:c3:32:5b:ff:50:
         84:af:fd:4d:77:df:6d:7e:34:62:e5:06:f3:6a:14:52:7f:e1:
         4a:c6:91:df:3e:e7:c5:9a:a5:38:07:bb:9e:40:e7:1a:98:c1:
         6c:4c:8a:08:ef:52:2d:44:90:99:62:6d:08:9b:2a:3f:99:6a:
         ab:ac:ab:87:22:df:9b:62:37:96:23:14:df:f0:f3:d8:00:d2:
         5b:a4:12:ef:02:1f:93:3a:15:9d:1f:1b:fa:b1:0e:b1:a7:98:
         a8:8c:bc:1d:d4:81:da:7c:4c:1b:8c:d8:7a:9f:44:c7:cc:d8:
         5e:b3:f1:9b:0a:dc:c0:53:b5:81:db:c8:6d:ed:8a:dd:6e:15:
         8e:94:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----