Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0d99e0-3b42-4f1a-aa11-24690b043800/1/TZEOJ26cPgUFiHhf3JqSddiA1Ko.mft
File:                     TZEOJ26cPgUFiHhf3JqSddiA1Ko.mft (raw, json)
Hash identifier:          kqO1Oe5xlOl+Vq1/Yvgey0or3OkHR3QrLKH5h1HiZVs=
Subject key identifier:   25:E3:DA:26:E6:BE:BF:31:BB:58:33:AC:59:2B:15:88:A1:5B:A2:D7
Authority key identifier: 4D:91:0E:27:6E:9C:3E:05:05:88:78:5F:DC:9A:92:75:D8:80:D4:AA
Certificate issuer:       /CN=4d910e276e9c3e050588785fdc9a9275d880d4aa
Certificate serial:       018B7A3C895375870FC15E54FD9ABB5C5CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZEOJ26cPgUFiHhf3JqSddiA1Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/0d99e0-3b42-4f1a-aa11-24690b043800/1/TZEOJ26cPgUFiHhf3JqSddiA1Ko.mft
Manifest number:          08
Signing time:             Sun 29 Oct 2023 07:01:09 +0000
Manifest this update:     Sun 29 Oct 2023 07:01:09 +0000
Manifest next update:     Mon 30 Oct 2023 07:01:09 +0000
Files and hashes:         1: TZEOJ26cPgUFiHhf3JqSddiA1Ko.crl (hash: 02q2k0NPGMKhVpwY/sacPNpJxJ9s+o6GW32ttv0xekM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7a:3c:89:53:75:87:0f:c1:5e:54:fd:9a:bb:5c:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d910e276e9c3e050588785fdc9a9275d880d4aa
        Validity
            Not Before: Oct 29 07:01:09 2023 GMT
            Not After : Oct 30 07:01:09 2023 GMT
        Subject: CN=25e3da26e6bebf31bb5833ac592b1588a15ba2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:f0:88:d9:c4:7b:38:8f:df:8f:18:83:6e:
                    44:42:10:e3:18:37:59:a5:5b:b3:b3:66:a5:56:67:
                    94:32:0d:32:5a:28:f8:47:00:5f:b2:c0:5d:fa:fb:
                    cd:00:4e:15:d9:22:b9:74:fa:55:ad:6f:82:40:14:
                    9c:f2:32:29:22:c0:43:9b:be:e0:e1:8b:97:f0:13:
                    72:5e:0f:4a:6b:e3:df:cf:12:78:75:c6:a9:ac:73:
                    3d:cb:49:55:3e:6d:cb:3b:e2:4a:14:76:89:d9:d3:
                    c3:35:17:fd:51:fa:fa:e7:8c:1b:15:78:9c:81:5b:
                    19:94:a1:3b:7f:22:83:62:77:0d:ba:70:83:e4:dc:
                    aa:98:ff:57:31:e2:e5:ad:17:31:a4:23:fe:a8:e1:
                    5c:11:c2:6b:d6:b4:8e:83:f6:aa:86:39:28:ad:34:
                    53:d3:5c:3a:39:ae:70:40:71:a8:f5:50:2f:d0:ff:
                    b8:fd:22:d7:1c:34:a1:0f:8f:53:00:14:24:6c:52:
                    38:5d:e1:c6:61:c7:e2:ce:ea:c5:1e:28:15:2d:e4:
                    b3:67:b6:13:2e:a4:c8:2d:ff:c7:d6:c3:48:18:b7:
                    64:7f:30:8a:d5:72:1f:30:0e:73:4c:93:f9:a4:41:
                    93:15:11:34:b8:01:0b:5a:1a:e8:a3:57:0f:b8:26:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E3:DA:26:E6:BE:BF:31:BB:58:33:AC:59:2B:15:88:A1:5B:A2:D7
            X509v3 Authority Key Identifier:
                keyid:4D:91:0E:27:6E:9C:3E:05:05:88:78:5F:DC:9A:92:75:D8:80:D4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZEOJ26cPgUFiHhf3JqSddiA1Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0d99e0-3b42-4f1a-aa11-24690b043800/1/TZEOJ26cPgUFiHhf3JqSddiA1Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0d99e0-3b42-4f1a-aa11-24690b043800/1/TZEOJ26cPgUFiHhf3JqSddiA1Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:01:ab:67:7b:48:7c:b9:2b:64:a1:c2:05:e4:74:21:9a:
         1a:fc:2b:f1:24:ae:e3:f0:1f:f6:2f:87:0d:1c:71:e7:b0:21:
         7f:e7:97:98:41:40:51:4d:1d:50:5f:5b:d2:87:a9:66:27:e2:
         7e:9e:ae:67:5c:73:e5:3c:6d:86:a6:af:07:3b:40:a0:a0:7a:
         70:c2:9d:42:da:17:f6:ea:51:4e:90:45:e9:9b:00:ce:ea:f5:
         d5:d0:28:34:ce:04:3f:e7:b0:5e:0e:7f:b4:c6:fb:63:e7:5c:
         76:5c:fd:a4:f8:6d:39:af:5b:d1:72:14:30:0c:14:c5:fe:cc:
         f0:53:54:4d:19:77:e1:ea:0e:8e:67:2a:41:dc:25:6f:51:32:
         cf:24:7f:01:d3:ab:97:92:ca:9f:f5:d2:75:3c:be:6e:57:63:
         4e:bd:b0:d2:4c:31:aa:e0:d4:37:af:2b:e2:55:97:ce:c1:3e:
         8d:53:d1:ad:dc:0e:56:36:34:c2:3d:92:e0:fb:de:c6:11:2a:
         eb:24:c6:97:d7:fe:38:ad:92:55:79:7d:f8:52:6b:df:7d:92:
         e5:bc:7d:4b:40:1c:71:1e:25:1a:b6:28:47:ce:38:08:6c:34:
         0d:2e:8d:0f:30:49:0c:bb:f1:f6:77:cd:c2:98:7c:a3:fb:bf:
         fd:58:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----