Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/587ba6-9de6-469d-b891-e46e0e183ca3/1/CdBBCcF9n42z1tNR1bmE-6AOEk4.mft
File:                     CdBBCcF9n42z1tNR1bmE-6AOEk4.mft (raw, json)
Hash identifier:          Jw4MOU2RiaFZWpYsuMgC6PqPmZAA3YexR1d7mCpea9U=
Subject key identifier:   78:CE:3E:D5:D2:0D:E8:1C:91:22:B6:F6:32:76:F2:51:91:35:E4:48
Authority key identifier: 09:D0:41:09:C1:7D:9F:8D:B3:D6:D3:51:D5:B9:84:FB:A0:0E:12:4E
Certificate issuer:       /CN=09d04109c17d9f8db3d6d351d5b984fba00e124e
Certificate serial:       01898759A957D4A3B1CDDEA44ECB331CFEF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CdBBCcF9n42z1tNR1bmE-6AOEk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/587ba6-9de6-469d-b891-e46e0e183ca3/1/CdBBCcF9n42z1tNR1bmE-6AOEk4.mft
Manifest number:          06AE
Signing time:             Mon 24 Jul 2023 10:02:27 +0000
Manifest this update:     Mon 24 Jul 2023 10:02:27 +0000
Manifest next update:     Tue 25 Jul 2023 10:02:27 +0000
Files and hashes:         1: CdBBCcF9n42z1tNR1bmE-6AOEk4.crl (hash: S+e2CzDQc3RSHwt3kkZ5QDtnmTjAVplqzDVzIgDXSzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:87:59:a9:57:d4:a3:b1:cd:de:a4:4e:cb:33:1c:fe:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d04109c17d9f8db3d6d351d5b984fba00e124e
        Validity
            Not Before: Jul 24 10:02:27 2023 GMT
            Not After : Jul 25 10:02:27 2023 GMT
        Subject: CN=78ce3ed5d20de81c9122b6f63276f2519135e448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:1d:13:a8:78:9e:5b:25:46:68:72:31:4f:
                    d2:54:c0:23:82:9b:5c:30:0f:ab:4a:f5:b0:ac:a8:
                    b9:59:a4:b1:15:da:1f:55:ae:b5:1b:78:e2:93:3d:
                    2b:d5:da:a2:8b:2b:90:6d:9a:c6:68:e4:4e:9f:1d:
                    6a:61:b5:61:ab:e2:86:0c:3a:68:13:4f:65:e2:a7:
                    ae:a3:c3:20:28:2a:3b:2a:6d:72:3c:b9:01:f4:2d:
                    62:22:70:45:bf:bd:a4:f8:c8:49:79:3c:2f:81:5f:
                    11:64:8a:63:13:47:7e:5f:96:d1:d4:d0:3b:95:6a:
                    0d:2d:ac:98:51:95:66:60:41:67:9f:b3:72:2b:0d:
                    8d:23:3a:2a:db:86:3f:e3:3e:ab:5b:60:72:c4:92:
                    c1:b1:b7:98:77:f9:71:b5:51:20:ed:2d:0d:f3:0e:
                    e7:3a:7a:99:86:6c:c4:b0:b4:96:e0:8d:09:dc:83:
                    a7:15:c0:77:07:cf:74:e3:a7:f7:c7:ee:75:be:19:
                    be:25:5e:09:d6:7a:79:4d:8d:87:fa:2c:18:a0:4f:
                    ad:25:68:b0:5e:84:63:28:91:e6:17:49:a5:54:63:
                    ec:09:42:9b:6b:a1:20:70:04:2b:6e:9d:5f:dd:96:
                    96:0b:42:8d:bf:12:15:00:e4:57:6d:68:82:50:28:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CE:3E:D5:D2:0D:E8:1C:91:22:B6:F6:32:76:F2:51:91:35:E4:48
            X509v3 Authority Key Identifier:
                keyid:09:D0:41:09:C1:7D:9F:8D:B3:D6:D3:51:D5:B9:84:FB:A0:0E:12:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdBBCcF9n42z1tNR1bmE-6AOEk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/587ba6-9de6-469d-b891-e46e0e183ca3/1/CdBBCcF9n42z1tNR1bmE-6AOEk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/587ba6-9de6-469d-b891-e46e0e183ca3/1/CdBBCcF9n42z1tNR1bmE-6AOEk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:72:35:2a:93:b1:61:3b:4e:29:77:3f:81:15:99:59:8a:fd:
         5a:55:d4:23:07:00:66:a9:48:a0:b2:37:9a:d9:70:df:80:56:
         87:74:57:e7:aa:00:11:59:af:a6:56:ff:91:10:ed:02:20:9a:
         a9:1f:f8:6e:91:36:8a:3a:fb:77:2f:b3:c1:f9:82:b6:0a:3a:
         ea:4a:2b:30:6a:61:c1:05:39:e6:57:97:16:35:ae:42:b1:f9:
         f2:28:9b:72:df:27:5f:aa:75:92:bb:78:10:fe:a6:13:ff:05:
         3a:3c:c9:23:93:f7:31:7f:5a:fc:7d:c3:de:26:82:59:ed:1d:
         f1:00:51:67:a6:eb:fd:a7:cb:76:cf:e5:b0:e5:ac:b9:55:e1:
         22:92:5f:91:02:00:df:93:1b:6f:ac:cd:44:35:47:e4:15:40:
         b1:5c:73:4b:7a:d6:ab:6e:66:be:b6:be:9a:55:b7:9f:f1:0f:
         3d:05:98:3a:cb:a0:df:e3:d3:47:cc:c9:87:0e:e3:6d:a0:71:
         d6:d7:6d:ea:3f:66:a5:79:63:e6:d2:0d:b2:28:37:98:00:93:
         e9:ab:de:b4:ba:3a:c7:73:1a:c7:ea:02:14:5a:f0:d3:61:41:
         8f:8d:c6:13:5f:a4:76:1b:c9:65:3b:cb:b6:08:32:db:bc:c6:
         9b:5a:ca:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----