Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c257a6-c885-4d8d-8d58-184b6445b61d/1/wHzlgX1o9281BinbGMQ7Snl-w4I.mft
File:                     wHzlgX1o9281BinbGMQ7Snl-w4I.mft (raw, json)
Hash identifier:          GnacdEovPRjSQy0KxnfLKT/TG+b4NLtdibnCtTUcXn8=
Subject key identifier:   39:32:1E:20:73:3E:B3:70:60:36:67:A0:29:EA:10:5C:3C:63:9A:BC
Authority key identifier: C0:7C:E5:81:7D:68:F7:6F:35:06:29:DB:18:C4:3B:4A:79:7E:C3:82
Certificate issuer:       /CN=c07ce5817d68f76f350629db18c43b4a797ec382
Certificate serial:       018696A2F2F5750AC2399CF8034A6ABAE5EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHzlgX1o9281BinbGMQ7Snl-w4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c257a6-c885-4d8d-8d58-184b6445b61d/1/wHzlgX1o9281BinbGMQ7Snl-w4I.mft
Manifest number:          08C6
Signing time:             Tue 28 Feb 2023 06:08:26 +0000
Manifest this update:     Tue 28 Feb 2023 06:08:26 +0000
Manifest next update:     Wed 01 Mar 2023 06:08:26 +0000
Files and hashes:         1: wHzlgX1o9281BinbGMQ7Snl-w4I.crl (hash: wVxIlsoYmkzl88kwradYfHEZuvOKeo5/elnati8/jZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:96:a2:f2:f5:75:0a:c2:39:9c:f8:03:4a:6a:ba:e5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07ce5817d68f76f350629db18c43b4a797ec382
        Validity
            Not Before: Feb 28 06:08:26 2023 GMT
            Not After : Mar  1 06:08:26 2023 GMT
        Subject: CN=39321e20733eb370603667a029ea105c3c639abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:42:48:2e:98:e8:73:e9:3f:3d:cb:17:3c:
                    87:95:c7:a7:bf:97:f8:a0:3b:cc:b0:ba:4f:4c:32:
                    42:83:0a:b7:2d:ca:e1:6d:93:51:b5:f7:be:43:e1:
                    52:a6:5f:63:bc:25:03:a6:ad:db:41:60:e7:54:40:
                    1f:60:67:44:e2:c9:a6:e7:fb:7d:14:4c:f7:29:55:
                    88:c1:2b:c3:55:4c:ca:2c:dc:96:85:ba:a5:39:35:
                    cc:e8:93:b0:c2:85:f9:22:62:ea:17:9f:c0:f0:53:
                    5f:bc:6f:bc:2f:19:9d:af:a4:e3:31:3d:5f:8a:f9:
                    11:dd:33:4e:11:a3:be:de:88:41:6b:bd:eb:46:0a:
                    21:e1:5d:3c:fb:e4:fd:c7:c5:b5:a6:ff:91:70:9d:
                    7a:fd:eb:f1:8c:ed:5d:46:5d:8d:cc:ee:1c:da:94:
                    23:42:d2:02:57:da:10:de:b3:b7:3b:7d:39:14:1b:
                    a6:d6:98:cc:a9:f4:0e:8c:1e:2a:9e:62:99:87:ec:
                    2b:c6:b1:c5:db:64:b1:ac:47:23:56:fe:87:36:d7:
                    c1:a3:9a:30:c9:09:65:86:e2:c5:6b:9b:13:06:d3:
                    24:5b:55:24:2e:dc:ee:48:09:cd:89:e4:96:9c:cf:
                    84:bd:21:61:42:f7:f6:7b:b6:5a:6e:62:6d:94:4b:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:32:1E:20:73:3E:B3:70:60:36:67:A0:29:EA:10:5C:3C:63:9A:BC
            X509v3 Authority Key Identifier:
                keyid:C0:7C:E5:81:7D:68:F7:6F:35:06:29:DB:18:C4:3B:4A:79:7E:C3:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHzlgX1o9281BinbGMQ7Snl-w4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c257a6-c885-4d8d-8d58-184b6445b61d/1/wHzlgX1o9281BinbGMQ7Snl-w4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c257a6-c885-4d8d-8d58-184b6445b61d/1/wHzlgX1o9281BinbGMQ7Snl-w4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:af:80:42:74:95:80:36:ff:20:f2:3a:a0:17:33:f9:c9:
         cb:40:3a:50:02:72:8f:54:15:01:b4:ea:15:86:91:ac:7a:4e:
         1d:20:aa:98:ef:d8:7e:52:fa:15:30:a1:41:67:b9:ec:9a:d3:
         e8:8c:54:c4:db:03:20:e8:da:97:f1:11:0f:81:3a:95:1e:ee:
         a9:a7:4c:f6:aa:c4:16:9b:e9:4c:2c:f1:63:d5:1a:ae:a7:a9:
         49:d4:36:34:72:15:26:c4:28:bc:c9:a4:6d:3c:29:73:ae:01:
         54:10:39:fc:bf:24:dc:9d:88:55:f7:8f:b3:ff:d8:19:2c:30:
         d8:e4:e7:1d:e6:cb:48:57:2f:96:7b:72:70:e0:34:0a:39:97:
         e5:6e:04:b3:11:2b:70:82:3b:0e:11:a7:30:a8:78:41:a7:81:
         c8:22:56:d7:20:09:21:68:e9:80:82:ca:9c:f1:26:20:f2:55:
         9d:25:d6:fc:30:41:fa:f5:7c:31:13:88:bd:62:db:7e:85:dc:
         26:ea:ea:a6:97:61:c7:78:61:bb:5d:98:29:2d:ce:66:33:f6:
         81:b3:9b:7d:a9:e2:24:58:3d:1f:70:34:12:7d:b0:a9:82:2f:
         70:50:44:bf:d1:2a:51:7d:5e:a1:b6:6e:2b:18:9f:12:35:dc:
         3c:b9:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----