Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/69e80a-4af7-45bd-ac7f-03fc59f16b10/1/1-kUofnTiFZrEBsFkw5qD94n4HU0.mft
File:                     1-kUofnTiFZrEBsFkw5qD94n4HU0.mft (raw, json)
Hash identifier:          5RF4uKx0J1aLBgpxbBFJUnGB4HUQRRvX8ovGDDA1/nQ=
Subject key identifier:   E6:26:88:F5:E5:BC:93:68:F1:57:63:C7:62:33:6D:25:12:32:F1:E0
Authority key identifier: FA:45:28:7E:74:E2:15:9A:C4:06:C1:64:C3:9A:83:F7:89:F8:1D:4D
Certificate issuer:       /CN=fa45287e74e2159ac406c164c39a83f789f81d4d
Certificate serial:       018B133D98674C655DCCB6CBB4390FDDD1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kUofnTiFZrEBsFkw5qD94n4HU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/69e80a-4af7-45bd-ac7f-03fc59f16b10/1/1-kUofnTiFZrEBsFkw5qD94n4HU0.mft
Manifest number:          0862
Signing time:             Mon 09 Oct 2023 07:01:25 +0000
Manifest this update:     Mon 09 Oct 2023 07:01:25 +0000
Manifest next update:     Tue 10 Oct 2023 07:01:25 +0000
Files and hashes:         1: 1-kUofnTiFZrEBsFkw5qD94n4HU0.crl (hash: FF1EMph9YU94A7ZjNCuMabbM4eO7q4JP096YyqYpXQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:13:3d:98:67:4c:65:5d:cc:b6:cb:b4:39:0f:dd:d1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa45287e74e2159ac406c164c39a83f789f81d4d
        Validity
            Not Before: Oct  9 07:01:25 2023 GMT
            Not After : Oct 10 07:01:25 2023 GMT
        Subject: CN=e62688f5e5bc9368f15763c762336d251232f1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:f0:c7:55:cf:8a:44:61:14:f6:66:0b:a4:
                    93:54:6b:cb:9d:9d:be:45:e8:53:8a:ca:5b:22:bb:
                    24:06:7e:16:7b:5d:84:ce:24:cf:cb:0a:95:f4:04:
                    43:a1:e3:b7:bd:a9:30:cc:34:b8:56:09:6f:3f:a9:
                    fb:01:b9:a2:b7:c8:8f:49:59:8d:d0:ae:ff:ef:60:
                    fd:90:be:c7:83:a1:ba:18:77:ad:82:69:c6:41:83:
                    fa:20:70:9a:e2:a9:8a:2a:1e:87:be:4c:fe:25:9f:
                    20:4f:56:00:db:74:20:79:1f:28:37:42:27:a0:ea:
                    9f:b2:f0:56:94:9d:16:c0:12:a2:e3:ff:77:b7:b2:
                    55:e1:54:73:3c:df:61:d0:2c:b9:03:eb:24:63:58:
                    de:be:d7:61:6e:dd:2f:7e:93:61:4e:4b:9c:e6:30:
                    89:87:a2:84:33:7e:65:47:d9:a2:3d:f0:04:20:ad:
                    26:6d:17:e9:e8:77:92:c0:e9:b0:3e:f8:66:68:bb:
                    1a:4b:3c:cf:94:f2:ac:17:d6:fb:2b:3b:1f:37:14:
                    99:6b:4e:67:29:09:99:9a:95:82:c4:56:31:b2:f5:
                    de:e6:59:4b:e3:48:67:36:a2:3e:0a:14:6d:df:70:
                    0e:6a:86:f3:ec:02:9b:30:e9:4a:b5:01:c8:38:cf:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:26:88:F5:E5:BC:93:68:F1:57:63:C7:62:33:6D:25:12:32:F1:E0
            X509v3 Authority Key Identifier:
                keyid:FA:45:28:7E:74:E2:15:9A:C4:06:C1:64:C3:9A:83:F7:89:F8:1D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kUofnTiFZrEBsFkw5qD94n4HU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/69e80a-4af7-45bd-ac7f-03fc59f16b10/1/1-kUofnTiFZrEBsFkw5qD94n4HU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/69e80a-4af7-45bd-ac7f-03fc59f16b10/1/1-kUofnTiFZrEBsFkw5qD94n4HU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ab:26:e7:dc:06:1b:af:5b:a9:50:7a:a0:0b:f1:91:f4:ad:
         da:09:b8:c6:aa:18:67:5b:56:f9:16:8b:f8:b6:2e:95:ce:ce:
         b9:c5:58:3e:bb:36:8e:d9:4a:90:6d:1f:8c:c2:cf:42:0c:72:
         c0:d4:21:13:cb:db:b3:21:4b:0c:52:9c:7f:51:85:e1:9a:c3:
         7d:53:be:3d:b0:a2:92:b6:90:40:7d:91:e0:70:f5:63:d1:ce:
         90:71:b9:63:77:09:e3:8f:1d:20:58:c1:45:79:15:b3:b2:a3:
         8b:6c:3b:e0:c9:23:05:52:c1:4a:60:be:b7:4f:38:96:31:b5:
         a5:2c:66:6b:a9:00:34:e2:f1:33:cb:9c:21:bb:86:35:df:9e:
         4e:6d:cb:fd:02:6c:e2:73:f9:4c:22:35:8e:43:2a:fd:bb:79:
         64:05:35:e1:e5:f2:fa:9a:a1:e3:14:40:dc:24:ef:3c:e3:fe:
         a7:10:f8:8e:41:68:47:cb:5a:fd:7d:b7:2e:8b:08:25:c6:be:
         cd:6b:ab:9a:69:41:6f:60:0f:57:3d:e8:81:4d:f6:c8:b2:ce:
         19:6a:21:f9:8e:0e:6d:0e:de:35:63:40:bf:b9:75:1f:7e:9c:
         fa:cc:c6:6f:1b:7c:f3:af:c7:b9:6e:1a:2a:83:f7:f8:dc:a1:
         e2:61:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----