Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f82613-0344-4bca-b846-b52cab088423/1/IO3JmxaoBn9DxgzmfRoIUvTdTgk.mft
File:                     IO3JmxaoBn9DxgzmfRoIUvTdTgk.mft (raw, json)
Hash identifier:          BRsNAmWRqJWDUXJ6JXlfhrmHdUBLn0+/UAMkZXyZSIs=
Subject key identifier:   C0:C8:18:42:E0:F8:2F:2D:DF:CC:9B:4C:95:37:8F:F4:0E:DD:CF:E0
Authority key identifier: 20:ED:C9:9B:16:A8:06:7F:43:C6:0C:E6:7D:1A:08:52:F4:DD:4E:09
Certificate issuer:       /CN=20edc99b16a8067f43c60ce67d1a0852f4dd4e09
Certificate serial:       018C0A6EAE7A237D0B64B18B5AA35D0DC6CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IO3JmxaoBn9DxgzmfRoIUvTdTgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/f82613-0344-4bca-b846-b52cab088423/1/IO3JmxaoBn9DxgzmfRoIUvTdTgk.mft
Manifest number:          F0
Signing time:             Sun 26 Nov 2023 07:01:14 +0000
Manifest this update:     Sun 26 Nov 2023 07:01:14 +0000
Manifest next update:     Mon 27 Nov 2023 07:01:14 +0000
Files and hashes:         1: IO3JmxaoBn9DxgzmfRoIUvTdTgk.crl (hash: mozFPWM6gu793S1Px/vIEWHtEtWrskh7ZRH0ncoTK4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0a:6e:ae:7a:23:7d:0b:64:b1:8b:5a:a3:5d:0d:c6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20edc99b16a8067f43c60ce67d1a0852f4dd4e09
        Validity
            Not Before: Nov 26 07:01:14 2023 GMT
            Not After : Nov 27 07:01:14 2023 GMT
        Subject: CN=c0c81842e0f82f2ddfcc9b4c95378ff40eddcfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:0f:9e:f2:33:8b:39:1a:69:96:90:2b:f0:
                    c3:5a:53:4f:6a:6f:b5:03:89:70:04:99:41:0b:a7:
                    92:1f:2a:f6:5b:95:62:89:44:ff:ba:3d:8e:4d:24:
                    60:db:c1:ee:8f:4f:4b:dc:8d:66:60:d9:9c:d7:8d:
                    0d:ae:af:48:47:74:1e:27:b0:a5:1b:6e:3a:17:92:
                    e5:df:2a:fb:d1:f6:e0:d1:a3:4a:80:62:25:f4:3a:
                    3a:ce:da:7e:09:0d:18:23:a4:60:7d:20:23:f7:53:
                    06:27:c5:cd:51:92:72:30:b7:95:24:29:6f:23:51:
                    9e:ff:05:bd:43:93:16:a8:68:6a:1b:51:fc:55:5b:
                    1d:ca:a5:b0:8f:43:f0:2f:fe:0a:87:a9:4d:2b:ec:
                    16:59:7e:32:72:7f:96:89:d4:ea:b7:01:ef:62:64:
                    81:f3:69:8e:f7:57:01:26:f1:2a:08:b6:31:22:04:
                    c4:da:36:27:9b:41:07:9d:13:17:fd:25:18:16:dd:
                    c6:c8:8a:13:cc:5c:30:44:9a:db:81:14:dd:a7:9c:
                    9e:d6:1f:c0:d6:24:0c:4b:48:23:27:70:4c:2d:7f:
                    79:cb:0d:45:ec:12:d0:80:f1:a3:33:4a:ed:32:72:
                    37:18:b4:ea:44:4b:81:03:0d:f0:28:c6:c4:36:23:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:18:42:E0:F8:2F:2D:DF:CC:9B:4C:95:37:8F:F4:0E:DD:CF:E0
            X509v3 Authority Key Identifier:
                keyid:20:ED:C9:9B:16:A8:06:7F:43:C6:0C:E6:7D:1A:08:52:F4:DD:4E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO3JmxaoBn9DxgzmfRoIUvTdTgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f82613-0344-4bca-b846-b52cab088423/1/IO3JmxaoBn9DxgzmfRoIUvTdTgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f82613-0344-4bca-b846-b52cab088423/1/IO3JmxaoBn9DxgzmfRoIUvTdTgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:26:37:84:6b:f2:25:d7:bb:46:84:99:61:2b:75:94:f1:
         1c:e8:5c:5f:8e:24:16:5f:36:b2:76:8f:c6:e8:05:a0:73:8f:
         b0:5e:ed:bc:f0:fb:99:fc:d3:de:5f:70:ea:62:b0:0a:6e:ee:
         84:eb:06:39:12:3a:0d:91:dd:cf:c1:63:d9:31:ff:d8:5c:1d:
         05:f9:fe:9b:b1:1e:3e:cd:f9:89:7c:eb:c3:d0:e8:37:80:c0:
         98:cf:5b:39:ce:be:94:cc:e1:f1:aa:9d:12:b5:96:b7:31:25:
         db:23:78:82:2b:6c:41:cd:2b:67:b0:bb:85:39:28:00:bc:44:
         8a:65:60:78:b6:35:b4:a9:98:dd:b1:b0:7f:be:75:26:d2:f6:
         d4:c0:ee:aa:d4:41:dc:ce:bb:37:dd:e5:44:1c:5f:56:71:7e:
         f5:47:9e:c6:9c:4d:70:4b:3b:6f:5f:27:9c:12:75:6c:93:0c:
         36:17:27:44:34:96:99:52:08:0b:97:8f:01:7c:e0:de:34:22:
         10:eb:9e:6f:f2:55:35:eb:14:d4:c6:2f:36:1e:b4:7a:8f:c4:
         ab:72:5a:68:ac:fa:fd:c6:6a:e9:f4:e0:12:9d:8c:0d:66:c2:
         ab:7c:fc:30:64:31:01:bd:16:de:9d:47:42:57:70:40:9b:ab:
         50:d9:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----