Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/089e89-7a30-45ad-b6dc-236f611e1f30/1/f1IMxz0juMK6aJbJE4s1lIJiHkk.mft
File:                     f1IMxz0juMK6aJbJE4s1lIJiHkk.mft (raw, json)
Hash identifier:          VEvIR2EfBdCl5VnkR1Z1Ko2CGmSDrWKe7b+FMHOoZzE=
Subject key identifier:   02:9D:20:D1:22:F5:80:B3:2F:61:D8:9C:43:A3:71:6C:50:B2:6C:AF
Authority key identifier: 7F:52:0C:C7:3D:23:B8:C2:BA:68:96:C9:13:8B:35:94:82:62:1E:49
Certificate issuer:       /CN=7f520cc73d23b8c2ba6896c9138b359482621e49
Certificate serial:       0189FE119D8CF868C7DC4F0C589B173303BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1IMxz0juMK6aJbJE4s1lIJiHkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/089e89-7a30-45ad-b6dc-236f611e1f30/1/f1IMxz0juMK6aJbJE4s1lIJiHkk.mft
Manifest number:          0B52
Signing time:             Wed 16 Aug 2023 11:18:34 +0000
Manifest this update:     Wed 16 Aug 2023 11:18:34 +0000
Manifest next update:     Thu 17 Aug 2023 11:18:34 +0000
Files and hashes:         1: f1IMxz0juMK6aJbJE4s1lIJiHkk.crl (hash: i2JH7fHFGXK0JhYuY/74ZHq+wd3755X2nVuv2dOfJII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fe:11:9d:8c:f8:68:c7:dc:4f:0c:58:9b:17:33:03:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f520cc73d23b8c2ba6896c9138b359482621e49
        Validity
            Not Before: Aug 16 11:18:34 2023 GMT
            Not After : Aug 17 11:18:34 2023 GMT
        Subject: CN=029d20d122f580b32f61d89c43a3716c50b26caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:4a:43:10:0b:e0:1f:8a:20:94:4b:3f:89:
                    76:52:ac:54:94:de:12:53:37:7b:38:d5:0c:c4:76:
                    21:18:d2:15:06:99:d1:42:87:7c:a2:85:30:3e:1b:
                    7e:0b:65:3b:68:33:06:0c:15:86:eb:2c:7f:47:cd:
                    75:2d:de:fe:aa:44:55:3b:64:61:53:ea:1b:ff:a8:
                    a3:73:d8:c1:4c:7c:79:19:e4:01:fb:a9:2b:72:eb:
                    fd:e1:60:26:8c:7a:b9:4a:1e:21:f2:b4:65:19:3e:
                    cb:21:da:e1:91:3f:dd:f4:a3:cb:39:9d:6d:01:f7:
                    bf:18:6c:dc:5f:6f:38:7d:f7:53:8d:cb:1f:d9:78:
                    36:bc:72:49:e5:a5:5c:76:2d:e5:ef:bf:d6:90:07:
                    d3:2e:45:b4:65:18:86:0b:2d:ac:96:16:a7:9b:d6:
                    c6:14:88:76:47:3c:35:c8:15:4c:66:64:3a:7e:dc:
                    38:7e:c4:ac:66:11:cf:66:97:83:77:98:fd:ec:c1:
                    16:dd:55:81:ad:a3:e6:b0:67:53:5c:32:5e:4b:c5:
                    61:ce:73:cb:e3:7e:17:51:c3:26:a4:51:27:69:b3:
                    fd:85:9a:08:fe:28:a2:2b:f5:4f:32:ef:8d:9b:06:
                    1d:be:51:f7:99:57:d2:7b:a9:86:24:58:7e:9f:70:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:20:D1:22:F5:80:B3:2F:61:D8:9C:43:A3:71:6C:50:B2:6C:AF
            X509v3 Authority Key Identifier:
                keyid:7F:52:0C:C7:3D:23:B8:C2:BA:68:96:C9:13:8B:35:94:82:62:1E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1IMxz0juMK6aJbJE4s1lIJiHkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/089e89-7a30-45ad-b6dc-236f611e1f30/1/f1IMxz0juMK6aJbJE4s1lIJiHkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/089e89-7a30-45ad-b6dc-236f611e1f30/1/f1IMxz0juMK6aJbJE4s1lIJiHkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:10:ab:83:47:b4:3a:69:dc:f3:a6:8d:54:fb:87:80:15:61:
         7b:7f:0c:5b:ed:ed:11:dd:8e:53:1b:d2:61:41:83:10:b2:60:
         e0:e5:69:26:0c:49:a4:40:3b:07:11:81:fa:4c:d3:19:e6:57:
         46:d9:4f:9d:6e:02:44:b7:db:77:4c:5d:e8:d1:79:88:39:2d:
         e4:50:d9:0b:88:9f:eb:e1:ee:7c:0b:6a:8a:12:2d:53:15:7c:
         b9:ba:be:54:01:22:bf:a7:50:57:23:5c:f4:b8:fa:30:00:19:
         96:b8:a3:2b:e5:a7:93:66:9a:aa:ae:3d:28:26:44:31:63:77:
         11:8b:98:cc:94:b1:c4:0d:9e:27:00:59:fa:ac:3b:fb:60:5a:
         e3:38:3e:1d:38:e3:7a:f6:60:2b:3e:c1:bd:5e:e1:10:1c:21:
         a0:0b:9d:84:0e:c1:16:9c:80:05:aa:37:71:66:bd:b5:d4:39:
         dc:9d:22:e2:7c:e0:08:36:3f:b1:11:78:8b:ed:ac:da:5e:c6:
         13:9f:eb:87:7c:b9:e4:81:67:b4:15:e1:f9:0c:60:0d:47:f2:
         d2:91:98:92:c5:2e:7f:89:91:02:fb:5a:21:e9:5d:f3:1c:cd:
         c0:2d:af:c3:6c:8e:c6:56:8d:93:41:b5:4b:f6:35:2d:12:8f:
         d8:dc:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----