Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/27d264-0448-4538-b908-ede8e2103918/1/FMMPotF8uy-sMTJI2Mqct2QF1RU.mft
File:                     FMMPotF8uy-sMTJI2Mqct2QF1RU.mft (raw, json)
Hash identifier:          GzalY2iASx5bhb1rgewCyD/4Qs5qMdGfieGsxlX5hWo=
Subject key identifier:   42:4C:3B:CC:3D:CE:D5:8A:36:9C:36:3A:B8:E0:F4:D8:10:FC:CE:00
Authority key identifier: 14:C3:0F:A2:D1:7C:BB:2F:AC:31:32:48:D8:CA:9C:B7:64:05:D5:15
Certificate issuer:       /CN=14c30fa2d17cbb2fac313248d8ca9cb76405d515
Certificate serial:       0189AB387A8C758ACB1AB8E35548D61B0875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMMPotF8uy-sMTJI2Mqct2QF1RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/27d264-0448-4538-b908-ede8e2103918/1/FMMPotF8uy-sMTJI2Mqct2QF1RU.mft
Manifest number:          5F
Signing time:             Mon 31 Jul 2023 09:12:32 +0000
Manifest this update:     Mon 31 Jul 2023 09:12:32 +0000
Manifest next update:     Tue 01 Aug 2023 09:12:32 +0000
Files and hashes:         1: FMMPotF8uy-sMTJI2Mqct2QF1RU.crl (hash: L2x7Zu6ZvcSRdP2vE+Yx/JQ5khYQFC9MP3vF/bw7/RU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ab:38:7a:8c:75:8a:cb:1a:b8:e3:55:48:d6:1b:08:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c30fa2d17cbb2fac313248d8ca9cb76405d515
        Validity
            Not Before: Jul 31 09:12:32 2023 GMT
            Not After : Aug  1 09:12:32 2023 GMT
        Subject: CN=424c3bcc3dced58a369c363ab8e0f4d810fcce00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:5e:75:b0:6c:03:7e:32:c1:7b:c2:f1:e0:
                    b1:23:39:2c:48:c7:27:da:0f:45:49:2e:82:2e:d2:
                    79:da:90:86:ac:19:ad:43:71:c1:b1:b6:a8:7a:62:
                    00:44:49:29:e6:60:d6:01:f4:ef:90:68:21:8a:08:
                    4e:58:d6:6f:74:cd:a7:37:42:b8:bc:b0:6d:43:28:
                    53:99:da:ca:9a:83:16:9d:10:46:04:10:ea:36:df:
                    04:93:65:b0:c5:a8:c2:14:c8:74:e7:5c:a0:d4:6e:
                    9b:f2:30:30:40:ad:84:50:7b:48:06:4d:1c:3c:a9:
                    81:8e:d7:df:88:97:6e:18:5a:3d:b9:e7:5d:08:d5:
                    92:05:7c:ef:a7:a0:35:a6:5c:41:dc:4d:99:34:0e:
                    1f:af:21:52:10:1d:e2:6a:37:a1:7b:20:99:2e:2d:
                    8c:87:ed:2f:75:f7:9e:e6:e2:6a:a8:77:aa:4d:52:
                    a4:6b:d2:2a:22:58:98:6c:2a:ae:a6:5d:c3:82:22:
                    15:f9:d6:8c:0e:2b:20:1c:cc:0b:41:a1:5f:24:69:
                    04:63:b5:8c:2c:46:d7:fe:6b:19:db:a3:a8:41:15:
                    74:e6:5b:dd:72:9a:4e:6b:5a:fd:0a:00:5f:6a:32:
                    85:3b:5a:6b:f6:98:5e:4d:30:7f:ed:fc:17:35:b8:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:3B:CC:3D:CE:D5:8A:36:9C:36:3A:B8:E0:F4:D8:10:FC:CE:00
            X509v3 Authority Key Identifier:
                keyid:14:C3:0F:A2:D1:7C:BB:2F:AC:31:32:48:D8:CA:9C:B7:64:05:D5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMMPotF8uy-sMTJI2Mqct2QF1RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/27d264-0448-4538-b908-ede8e2103918/1/FMMPotF8uy-sMTJI2Mqct2QF1RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/27d264-0448-4538-b908-ede8e2103918/1/FMMPotF8uy-sMTJI2Mqct2QF1RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:f8:a2:6f:9d:0f:bb:b0:b1:df:c8:d2:35:c9:6f:19:cc:73:
         79:e7:e4:33:9a:08:6f:8e:b0:e1:f3:50:2b:b5:d7:fc:a7:fe:
         8d:48:73:d2:b5:b3:ee:cb:b1:e4:31:d3:97:cd:2e:cf:23:bc:
         01:10:8e:a0:1a:00:cc:60:a8:90:7d:8d:b9:a5:9f:b5:58:b1:
         4c:8e:cb:79:aa:da:8e:3c:5a:44:25:78:05:85:12:29:83:e2:
         68:2f:b8:8b:01:61:3b:d4:45:c6:28:88:c0:f4:50:25:51:19:
         4b:a4:1b:72:b8:32:04:ed:18:fe:8f:61:99:f1:67:5e:1b:ce:
         51:86:ba:cc:e4:95:42:23:f0:4c:ec:4e:f5:30:06:6b:e4:09:
         82:94:36:b5:20:cc:60:9a:cf:7f:ad:0f:4a:bc:cf:e5:3c:ac:
         6d:b6:10:41:e7:54:1e:76:53:11:af:34:de:a5:a9:5b:31:9f:
         94:49:86:ee:14:2f:58:c9:cc:1a:96:0e:1e:5d:7a:e1:11:ea:
         4b:81:58:73:12:09:97:cf:b8:a6:26:51:f9:57:7a:9b:6e:38:
         a7:ac:f4:cc:c4:bc:3a:53:6f:b4:41:48:ef:1b:10:21:f6:38:
         95:37:2a:de:5b:99:35:4e:a5:31:d1:f6:1d:3f:00:8f:1c:59:
         3f:fc:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----