Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7777f8-b97d-4bea-8fba-ce0bc2dec169/1/XDJn1tzaqd33--SLOI4lR7G9LVY.mft
File:                     XDJn1tzaqd33--SLOI4lR7G9LVY.mft (raw, json)
Hash identifier:          XKnPzd/vFCQUnPf+KkgWUmuHRLfXstDOOcXehlnxVHU=
Subject key identifier:   54:FE:BE:9F:E8:DF:BC:04:EB:F3:FC:B0:C1:78:79:99:12:BF:AB:2D
Authority key identifier: 5C:32:67:D6:DC:DA:A9:DD:F7:FB:E4:8B:38:8E:25:47:B1:BD:2D:56
Certificate issuer:       /CN=5c3267d6dcdaa9ddf7fbe48b388e2547b1bd2d56
Certificate serial:       01864943729647A69460C28CC9C6F864A3EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDJn1tzaqd33--SLOI4lR7G9LVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7777f8-b97d-4bea-8fba-ce0bc2dec169/1/XDJn1tzaqd33--SLOI4lR7G9LVY.mft
Manifest number:          0A83
Signing time:             Mon 13 Feb 2023 05:33:22 +0000
Manifest this update:     Mon 13 Feb 2023 05:33:22 +0000
Manifest next update:     Tue 14 Feb 2023 05:33:22 +0000
Files and hashes:         1: XDJn1tzaqd33--SLOI4lR7G9LVY.crl (hash: 9/KZjq9w3Cr7rdGZpaXDFaTAxIoAz1QuHld3JrtSUkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:49:43:72:96:47:a6:94:60:c2:8c:c9:c6:f8:64:a3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c3267d6dcdaa9ddf7fbe48b388e2547b1bd2d56
        Validity
            Not Before: Feb 13 05:33:22 2023 GMT
            Not After : Feb 14 05:33:22 2023 GMT
        Subject: CN=54febe9fe8dfbc04ebf3fcb0c178799912bfab2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:89:2e:91:33:66:dc:2c:47:57:ff:fc:2d:4b:
                    ce:fd:86:ca:8e:98:2e:e3:53:0e:22:71:3f:e6:c7:
                    2e:16:83:e0:18:ec:c2:53:3c:05:78:82:34:93:d9:
                    6b:16:da:d0:db:eb:50:5a:c3:25:4f:37:d9:4d:88:
                    14:0a:dd:79:ac:1d:c8:e9:be:88:16:a6:97:fd:44:
                    ad:d8:b5:56:5d:ac:fb:f3:fb:d2:69:b7:42:e8:a2:
                    a9:9c:6a:34:4b:b0:0e:ed:b3:45:d4:b4:bb:0b:8b:
                    11:c8:7f:d5:2c:25:36:ba:c1:39:1f:b2:ba:0f:c9:
                    19:b0:3f:6e:84:7c:7a:80:b6:3b:11:1f:66:33:75:
                    de:a6:7c:94:c2:3f:cf:72:a6:d9:fa:b0:33:fb:cd:
                    0c:e8:f0:6a:5f:29:5d:73:eb:e5:03:af:50:8b:d3:
                    29:a4:ee:52:97:82:57:13:89:d1:36:27:f0:e9:d1:
                    6b:d2:30:05:d8:00:37:41:f4:6f:f7:cd:c5:cc:a8:
                    70:1b:89:73:1f:d8:77:4a:b8:aa:40:5d:e7:75:82:
                    3f:56:74:02:80:c7:11:da:32:1e:d8:44:b7:a8:23:
                    f0:4d:bf:32:cf:76:ae:bd:be:f4:55:09:c1:92:2b:
                    ad:47:a1:cb:8a:2d:4b:c9:00:4d:e0:b5:7f:a0:c0:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FE:BE:9F:E8:DF:BC:04:EB:F3:FC:B0:C1:78:79:99:12:BF:AB:2D
            X509v3 Authority Key Identifier:
                keyid:5C:32:67:D6:DC:DA:A9:DD:F7:FB:E4:8B:38:8E:25:47:B1:BD:2D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDJn1tzaqd33--SLOI4lR7G9LVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7777f8-b97d-4bea-8fba-ce0bc2dec169/1/XDJn1tzaqd33--SLOI4lR7G9LVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7777f8-b97d-4bea-8fba-ce0bc2dec169/1/XDJn1tzaqd33--SLOI4lR7G9LVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f0:dc:ac:dc:3b:94:c9:81:e4:3e:9c:a5:0e:3c:4c:37:8a:
         2e:41:7f:34:7d:69:b8:b4:37:73:0c:17:e4:21:0e:13:fa:eb:
         bf:5d:81:3e:db:49:ba:4b:8b:ed:83:23:d9:24:e7:f0:da:f9:
         95:df:bf:46:1c:10:0a:aa:b6:8c:a7:81:c8:d7:34:31:7b:e6:
         a5:93:83:a5:3d:ec:29:af:e8:6d:f0:7d:48:9e:e7:79:f4:96:
         f1:e2:ac:70:c5:d8:d4:90:18:92:f3:41:78:92:cf:62:10:a1:
         e6:5b:18:1e:14:af:54:43:61:24:0e:fe:da:dd:5d:4a:6c:ec:
         c1:e2:c0:a1:a2:9d:2f:59:65:97:1d:9e:3d:99:1f:4e:97:e6:
         05:4b:02:c1:32:9f:7c:c5:8d:0a:1f:cc:9a:f3:94:ab:0a:84:
         00:2c:37:de:94:6d:38:66:1e:4b:a6:9f:b7:44:32:a3:e7:8c:
         ce:cb:58:62:7a:a5:eb:6e:47:95:7c:0d:9a:35:b7:37:bf:1f:
         78:ed:d8:4f:c4:dc:bf:c6:cc:d7:ca:8b:05:2c:4e:34:22:db:
         aa:4f:f0:d8:f9:50:13:f8:97:1b:0c:28:e4:25:ec:c9:2a:eb:
         b9:a3:b1:02:b7:26:5c:b1:14:d0:3b:6b:2d:32:fc:16:eb:1b:
         e4:d9:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----