Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb0472-b667-4fd5-983b-2dce3bc21c1a/1/p6viNq_k7-4wR77Sr3iBPYIFo04.mft
File:                     p6viNq_k7-4wR77Sr3iBPYIFo04.mft (raw, json)
Hash identifier:          fQXISurjm34Awl4P0MKPNGqt9C7IVHN+YJJVHK7LWGo=
Subject key identifier:   34:FE:4B:08:61:B3:E0:74:5E:34:03:47:3E:E9:2B:E8:54:E0:62:0C
Authority key identifier: A7:AB:E2:36:AF:E4:EF:EE:30:47:BE:D2:AF:78:81:3D:82:05:A3:4E
Certificate issuer:       /CN=a7abe236afe4efee3047bed2af78813d8205a34e
Certificate serial:       018D35C3E8876B20FF9F419141A8491683FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6viNq_k7-4wR77Sr3iBPYIFo04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb0472-b667-4fd5-983b-2dce3bc21c1a/1/p6viNq_k7-4wR77Sr3iBPYIFo04.mft
Manifest number:          0CF5
Signing time:             Tue 23 Jan 2024 10:00:47 +0000
Manifest this update:     Tue 23 Jan 2024 10:00:47 +0000
Manifest next update:     Wed 24 Jan 2024 10:00:47 +0000
Files and hashes:         1: p6viNq_k7-4wR77Sr3iBPYIFo04.crl (hash: Y9u/S7vGWKwa+c1sHMZBKFKEthUT1uikVHrEdM9bK1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:35:c3:e8:87:6b:20:ff:9f:41:91:41:a8:49:16:83:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7abe236afe4efee3047bed2af78813d8205a34e
        Validity
            Not Before: Jan 23 10:00:47 2024 GMT
            Not After : Jan 24 10:00:47 2024 GMT
        Subject: CN=34fe4b0861b3e0745e3403473ee92be854e0620c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:54:a8:61:90:37:f2:94:33:83:f6:ac:9e:
                    03:2e:17:dd:d3:93:a1:0a:ef:f8:8d:4a:bb:9e:3b:
                    d8:40:db:eb:dc:be:d8:f9:a2:a4:73:f3:37:64:b7:
                    70:63:48:46:ca:97:72:3b:29:26:02:2d:ac:57:f8:
                    8c:2b:e0:8a:cf:00:fe:5a:0b:91:8b:87:32:e1:02:
                    c9:a0:06:14:e2:50:be:de:39:2a:69:13:72:f7:cb:
                    74:51:b9:83:b0:b7:7a:01:d5:77:a4:1f:eb:a8:2b:
                    0c:49:ca:6f:7b:9b:7c:85:dc:af:79:12:1d:c8:00:
                    f3:d1:d9:39:a6:59:04:22:6d:c9:46:61:55:e7:d9:
                    a0:45:20:bf:9f:4d:da:35:83:34:0f:8a:96:1f:9c:
                    49:66:96:d7:3c:63:b0:73:1b:7c:49:77:ee:4f:9d:
                    17:34:43:d9:6b:57:8d:d2:ba:0b:f4:9d:a2:ed:40:
                    da:2a:14:5c:d0:ea:5c:da:cf:8e:b3:e6:1c:fb:da:
                    2f:3f:07:74:33:9c:2a:e8:18:13:c0:37:2f:0e:f3:
                    5e:48:49:35:5c:ef:57:61:f1:94:fc:7c:d2:91:9b:
                    b1:34:90:22:63:ab:a5:59:c4:aa:a0:7d:d5:06:86:
                    dc:75:a1:e4:af:95:5d:d1:eb:d2:f6:7d:5e:3c:ad:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:4B:08:61:B3:E0:74:5E:34:03:47:3E:E9:2B:E8:54:E0:62:0C
            X509v3 Authority Key Identifier:
                keyid:A7:AB:E2:36:AF:E4:EF:EE:30:47:BE:D2:AF:78:81:3D:82:05:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6viNq_k7-4wR77Sr3iBPYIFo04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb0472-b667-4fd5-983b-2dce3bc21c1a/1/p6viNq_k7-4wR77Sr3iBPYIFo04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb0472-b667-4fd5-983b-2dce3bc21c1a/1/p6viNq_k7-4wR77Sr3iBPYIFo04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:97:1a:76:38:f2:f5:3e:c1:16:24:ba:ad:ca:f7:91:2a:fc:
         b8:7d:0f:1f:ba:dd:bd:61:0b:18:60:fd:7a:4d:36:86:82:f6:
         cd:7d:36:68:67:64:e1:55:ff:eb:eb:00:50:7b:83:81:35:e8:
         ae:8f:3c:d7:30:b6:f7:ff:61:ed:a9:e3:42:eb:9b:ae:37:39:
         24:62:44:1a:dc:54:8f:cf:da:f7:79:17:50:72:3d:50:a5:1d:
         13:62:8e:60:c4:fc:04:30:d4:ff:3d:54:c9:31:df:0d:5d:4c:
         81:96:c8:9a:ee:49:1f:ce:9d:93:84:7f:37:42:12:73:d0:a6:
         82:6c:5e:01:8c:a8:c1:2e:89:01:b8:d4:cc:95:a3:41:ce:e9:
         f8:dc:e6:e2:7d:40:3c:26:91:86:f4:f3:a0:70:4a:d3:87:2b:
         4a:27:3b:eb:0c:e5:8f:ed:8a:d2:37:f2:71:77:0f:3d:3f:9d:
         05:ba:08:cb:12:7b:36:c7:52:c6:d7:95:50:e3:1c:50:37:24:
         e2:24:86:32:66:a0:fe:c6:83:70:b7:d4:41:89:5a:10:93:9f:
         f7:d1:0a:f5:d6:ee:90:2a:25:fe:fa:8e:4e:15:a5:b3:14:c3:
         1a:72:68:4f:58:d6:e8:30:af:23:6c:43:20:c2:fb:2e:36:c4:
         e8:67:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----