Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9d6650-1d2a-452f-99ba-ca4b6e20df1f/1/4P4QSSPp1UjzyV58-8rnnSiKHGI.mft
File:                     4P4QSSPp1UjzyV58-8rnnSiKHGI.mft (raw, json)
Hash identifier:          mdR+V1dZnHtH3UK2t6Ozm8Lst/OE0WGhalN84ZBIlCc=
Subject key identifier:   4C:F5:35:C7:AF:77:40:73:09:B3:35:A6:58:3A:43:35:85:00:3A:D4
Authority key identifier: E0:FE:10:49:23:E9:D5:48:F3:C9:5E:7C:FB:CA:E7:9D:28:8A:1C:62
Certificate issuer:       /CN=e0fe104923e9d548f3c95e7cfbcae79d288a1c62
Certificate serial:       018A92EC3C8E857C0894335F8E3DCC239D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4P4QSSPp1UjzyV58-8rnnSiKHGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/9d6650-1d2a-452f-99ba-ca4b6e20df1f/1/4P4QSSPp1UjzyV58-8rnnSiKHGI.mft
Manifest number:          E5
Signing time:             Thu 14 Sep 2023 09:01:09 +0000
Manifest this update:     Thu 14 Sep 2023 09:01:09 +0000
Manifest next update:     Fri 15 Sep 2023 09:01:09 +0000
Files and hashes:         1: 4P4QSSPp1UjzyV58-8rnnSiKHGI.crl (hash: BpxicNs78/7Wq4zlHvI0Wj/dDkAKvMr9FBVJAfHmI7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:ec:3c:8e:85:7c:08:94:33:5f:8e:3d:cc:23:9d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0fe104923e9d548f3c95e7cfbcae79d288a1c62
        Validity
            Not Before: Sep 14 09:01:09 2023 GMT
            Not After : Sep 15 09:01:09 2023 GMT
        Subject: CN=4cf535c7af77407309b335a6583a433585003ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:bf:0b:c4:45:95:bd:3b:56:43:e8:45:75:
                    14:b4:b9:5a:42:e2:f4:7a:59:00:3a:e9:fa:be:bb:
                    33:50:5f:33:6d:c3:cb:4d:94:4b:9a:b9:fa:41:b2:
                    fa:0d:a3:a7:c5:c2:5a:fd:7c:a4:e5:c4:55:ae:cb:
                    5a:fd:9a:5e:63:b2:db:bb:0c:e7:6b:8c:1d:a5:0c:
                    c9:ae:c7:38:d5:7e:8d:ca:7d:79:62:b4:f2:4f:8e:
                    01:42:95:f6:ca:fd:e9:56:db:4c:f4:07:b3:17:9b:
                    b4:8e:a8:c3:f6:14:3c:e3:96:d5:fe:4a:0a:3d:4d:
                    c7:b2:47:97:31:dc:e2:cc:09:71:54:ad:3f:1e:1a:
                    2b:b1:23:14:d8:be:07:1d:71:80:1f:25:04:a8:d5:
                    8d:40:13:a0:1a:9e:1f:df:18:ad:ca:64:38:ac:e2:
                    89:6f:90:4e:9d:4b:d1:a9:78:17:ad:09:a2:80:30:
                    aa:93:eb:1d:b5:84:88:66:3e:20:fe:ca:80:fc:3c:
                    90:01:ac:84:5a:5c:2f:11:2d:bb:b5:7d:8a:e5:e6:
                    86:08:6a:dd:45:4a:81:93:4c:fa:29:eb:3e:6f:07:
                    42:68:86:c7:1a:81:07:fb:fd:fc:ad:73:29:75:c0:
                    f8:f0:37:3d:a2:b5:20:23:97:3d:16:66:41:ea:27:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F5:35:C7:AF:77:40:73:09:B3:35:A6:58:3A:43:35:85:00:3A:D4
            X509v3 Authority Key Identifier:
                keyid:E0:FE:10:49:23:E9:D5:48:F3:C9:5E:7C:FB:CA:E7:9D:28:8A:1C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4P4QSSPp1UjzyV58-8rnnSiKHGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9d6650-1d2a-452f-99ba-ca4b6e20df1f/1/4P4QSSPp1UjzyV58-8rnnSiKHGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9d6650-1d2a-452f-99ba-ca4b6e20df1f/1/4P4QSSPp1UjzyV58-8rnnSiKHGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:56:aa:1e:08:cd:1a:2a:1b:e2:5c:77:cd:cc:d5:49:5f:de:
         84:8f:75:f0:ca:23:b9:6b:82:ec:f0:79:8b:18:b6:6d:a4:84:
         60:24:c5:c7:a6:70:7e:64:8d:d7:4c:87:bd:59:02:68:83:4c:
         d4:e9:d2:a3:74:6f:b3:77:de:de:71:de:23:da:da:ba:50:83:
         5c:4d:52:60:c3:41:fb:03:dc:b6:44:c5:9c:28:07:45:55:ac:
         79:b2:b5:0e:a6:c0:2c:9e:c0:90:e1:5f:08:18:da:3e:2f:c7:
         74:af:16:03:0f:c4:67:3d:79:22:53:65:d5:a9:04:3d:cf:9c:
         68:6c:e0:73:6d:a5:c7:15:c8:d6:5c:e6:ae:14:c2:9d:63:4d:
         c9:af:49:28:de:45:a9:84:21:85:95:c3:0a:f6:88:08:c4:b9:
         6c:fe:70:7b:93:a9:54:a3:37:06:55:24:0b:ed:43:96:aa:9e:
         26:36:6d:de:10:d4:b1:57:73:bc:09:34:17:b5:f5:11:85:de:
         ab:fd:32:02:73:d7:d5:fc:a0:f7:9a:d9:d9:d8:da:8b:16:a7:
         f8:7e:11:0e:1a:a7:64:6f:43:94:fa:70:44:5e:e7:e8:ca:48:
         fb:63:ab:e3:a6:ba:ba:38:d6:08:fa:bc:d9:9a:1d:b8:2a:93:
         e6:cd:cf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----