Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/60b98b-085e-4dfb-9a6d-d4d6e58bb006/1/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.mft
File:                     KgyMS4gYDHjEEb9QjRxr-g5SXmQ.mft (raw, json)
Hash identifier:          aUeU0/qrVhG5SgTy854JnSkT9vilvYBkhOk4JnByeBQ=
Subject key identifier:   74:CA:CF:2B:37:11:60:3E:19:84:0A:D6:80:1E:E5:F7:00:8F:09:81
Authority key identifier: 2A:0C:8C:4B:88:18:0C:78:C4:11:BF:50:8D:1C:6B:FA:0E:52:5E:64
Certificate issuer:       /CN=2a0c8c4b88180c78c411bf508d1c6bfa0e525e64
Certificate serial:       018BCCD9A90C2BC63214F6A4FE27E0C591DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/60b98b-085e-4dfb-9a6d-d4d6e58bb006/1/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.mft
Manifest number:          0C
Signing time:             Tue 14 Nov 2023 08:01:38 +0000
Manifest this update:     Tue 14 Nov 2023 08:01:38 +0000
Manifest next update:     Wed 15 Nov 2023 08:01:38 +0000
Files and hashes:         1: 3gEl4Ct3_6QyxFXNH4vSy0B3Abo.roa (hash: /102j2vTG+8RyndGY+Uo6nz46SGwAjs+an10Vvc9H+E=)
                          2: KgyMS4gYDHjEEb9QjRxr-g5SXmQ.crl (hash: HN8kYQNLR+HI6hAdBMyRul0yMjqKWv2xIGQUhxW7iPo=)
                          3: ZT310wrSa5R7Qoo1hjr55XJ_Biw.roa (hash: HyHJqdvWax77PEcHIjAkTN/JWGRvNc3SnRbwhJgZcpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cc:d9:a9:0c:2b:c6:32:14:f6:a4:fe:27:e0:c5:91:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0c8c4b88180c78c411bf508d1c6bfa0e525e64
        Validity
            Not Before: Nov 14 08:01:38 2023 GMT
            Not After : Nov 15 08:01:38 2023 GMT
        Subject: CN=74cacf2b3711603e19840ad6801ee5f7008f0981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:2b:27:e4:ca:99:71:0d:bd:51:00:b1:a9:
                    9f:b1:64:f6:0d:0a:c9:31:58:26:1e:44:38:92:7f:
                    c6:48:3d:02:3b:ef:6b:8b:ac:7d:00:12:5e:c0:4d:
                    d4:cf:37:7c:26:1e:c7:89:76:89:b9:c6:47:5b:c4:
                    92:26:c6:65:06:68:a9:83:16:48:8e:b1:48:5c:8d:
                    e3:45:0d:d9:d1:99:d8:a5:99:e5:c4:c9:61:32:6a:
                    69:5a:c6:f7:b4:32:b6:6c:d3:32:2e:27:f7:08:82:
                    33:49:21:d3:83:16:2b:f9:7a:7b:ba:44:ea:1f:2b:
                    82:79:40:e5:9f:6b:d5:30:7f:9d:6d:52:fa:98:78:
                    c0:5a:91:34:a8:a9:45:2e:86:64:1b:5b:3d:8e:bc:
                    36:ee:95:5a:43:81:88:25:24:d5:78:38:08:93:c6:
                    23:f8:ff:9a:b9:cf:32:8f:5c:ca:88:1d:36:56:4e:
                    04:04:1e:74:ae:06:e3:c4:68:0e:92:69:6f:a6:64:
                    56:5c:39:f0:57:97:bc:45:df:58:04:c0:a6:06:d3:
                    c7:9b:01:b6:16:d5:6e:97:d7:08:67:ac:6e:66:d4:
                    e4:ab:d1:f8:fc:7e:4f:1e:56:db:54:92:6c:b3:84:
                    f7:96:93:6d:86:b3:fd:b5:42:17:f7:4d:b5:ea:e7:
                    f9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:CF:2B:37:11:60:3E:19:84:0A:D6:80:1E:E5:F7:00:8F:09:81
            X509v3 Authority Key Identifier:
                keyid:2A:0C:8C:4B:88:18:0C:78:C4:11:BF:50:8D:1C:6B:FA:0E:52:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/60b98b-085e-4dfb-9a6d-d4d6e58bb006/1/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/60b98b-085e-4dfb-9a6d-d4d6e58bb006/1/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:17:89:0c:0d:07:f2:05:2b:c5:a0:e1:e9:4d:6e:fb:bc:72:
         c1:f3:42:e6:8e:34:a5:6a:34:3c:84:88:bb:ad:c6:16:fb:de:
         13:57:8b:6b:3e:bf:c2:5e:12:35:52:39:3a:64:d3:42:6a:53:
         60:57:37:66:20:24:40:06:de:97:67:01:d3:50:02:14:39:da:
         35:e5:8a:5b:96:03:9b:08:f0:b6:9f:25:54:3e:16:2a:13:05:
         a1:31:29:52:16:86:58:6e:ac:3f:c9:7e:6f:e3:1c:c4:25:82:
         6b:98:5b:dc:3b:51:13:52:83:7d:fd:cf:a9:75:46:e0:42:b1:
         40:2e:2b:54:82:ec:53:c4:13:27:e8:a2:e9:9c:96:ce:ee:c4:
         c1:9a:84:75:de:c4:f8:80:6f:cb:5d:f5:d3:47:81:6a:5a:f8:
         bb:c1:0e:2b:94:fd:8e:7a:fe:fe:b2:ac:df:40:c6:54:53:e2:
         eb:b9:d8:e3:8d:ec:ad:ef:b7:8a:fd:a1:ca:4e:65:e4:64:8b:
         ab:d6:c1:98:43:e9:50:f0:cb:a3:d2:3d:2f:d0:cb:09:a2:e5:
         8e:aa:05:b4:b2:76:a2:ff:e3:31:e7:a3:10:6e:30:34:c2:b8:
         ba:f2:81:3a:33:1b:c9:05:04:d4:34:f4:5f:dd:2b:18:21:fa:
         a5:24:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----