Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0007f4-4cfc-4b25-a008-08dd13becadf/1/qX2e7wahjBXemfPW0iRNUwHlP4M.mft
File:                     qX2e7wahjBXemfPW0iRNUwHlP4M.mft (raw, json)
Hash identifier:          7z9DOEB63XykrIik2jEwELj9Dk3s0n/J4RC+JBkblyA=
Subject key identifier:   13:C5:8C:02:EC:93:9C:2F:CB:62:CE:82:7C:0C:59:10:3F:8A:13:F3
Authority key identifier: A9:7D:9E:EF:06:A1:8C:15:DE:99:F3:D6:D2:24:4D:53:01:E5:3F:83
Certificate issuer:       /CN=a97d9eef06a18c15de99f3d6d2244d5301e53f83
Certificate serial:       0188E488EC7FEBAAD458632DCEC89284E8AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qX2e7wahjBXemfPW0iRNUwHlP4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/0007f4-4cfc-4b25-a008-08dd13becadf/1/qX2e7wahjBXemfPW0iRNUwHlP4M.mft
Manifest number:          01F3
Signing time:             Thu 22 Jun 2023 19:15:58 +0000
Manifest this update:     Thu 22 Jun 2023 19:15:58 +0000
Manifest next update:     Fri 23 Jun 2023 19:15:58 +0000
Files and hashes:         1: qX2e7wahjBXemfPW0iRNUwHlP4M.crl (hash: EsvDEun8EWx9Jqx5QOaYayk77ZSyoO/ZzPuw3DW6oZ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e4:88:ec:7f:eb:aa:d4:58:63:2d:ce:c8:92:84:e8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97d9eef06a18c15de99f3d6d2244d5301e53f83
        Validity
            Not Before: Jun 22 19:15:58 2023 GMT
            Not After : Jun 23 19:15:58 2023 GMT
        Subject: CN=13c58c02ec939c2fcb62ce827c0c59103f8a13f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:fc:d3:36:04:8b:bf:78:ed:7c:49:02:0c:
                    a9:8e:c9:38:06:14:e3:68:8c:60:e0:e7:c3:69:a0:
                    38:90:1e:d9:13:81:0d:e2:13:55:7d:4e:ab:56:42:
                    57:b1:e2:4a:c6:f2:30:48:43:b4:c9:4c:3d:21:e3:
                    a5:33:3f:f3:bd:24:1b:cb:db:8b:f0:45:30:5d:df:
                    27:1a:47:77:b4:e4:58:6c:8c:73:d8:b8:1b:ac:dc:
                    bc:04:12:75:c7:18:0f:b0:09:8a:93:d8:4d:2c:50:
                    37:63:a7:5a:e4:74:5e:6c:71:bc:da:a3:a7:3a:82:
                    a2:2b:2a:a0:b0:0f:22:8e:e1:8a:ae:7c:05:a2:b8:
                    25:2a:91:64:ef:2f:6c:bd:f7:0f:8c:3d:ea:db:7a:
                    80:f7:a1:61:00:50:f7:c5:b8:e5:f4:ae:9c:b1:57:
                    cf:8a:fa:c2:36:81:d2:aa:16:b5:2d:81:1f:fe:61:
                    48:5e:38:fc:d8:b8:02:9a:c5:28:26:44:be:87:b2:
                    1d:e8:fb:e7:d2:14:a1:ee:7b:0a:75:36:15:c7:ed:
                    60:df:c6:8f:02:8f:cb:ba:52:0e:62:98:f4:63:62:
                    19:c0:f5:37:bf:cc:6c:ad:d7:18:27:af:20:0b:b0:
                    50:28:cb:98:91:09:3a:51:87:a1:06:43:07:15:1b:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C5:8C:02:EC:93:9C:2F:CB:62:CE:82:7C:0C:59:10:3F:8A:13:F3
            X509v3 Authority Key Identifier:
                keyid:A9:7D:9E:EF:06:A1:8C:15:DE:99:F3:D6:D2:24:4D:53:01:E5:3F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX2e7wahjBXemfPW0iRNUwHlP4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0007f4-4cfc-4b25-a008-08dd13becadf/1/qX2e7wahjBXemfPW0iRNUwHlP4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0007f4-4cfc-4b25-a008-08dd13becadf/1/qX2e7wahjBXemfPW0iRNUwHlP4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:44:8e:f9:90:97:c2:65:cb:42:8a:6c:bb:ef:56:44:a6:b9:
         20:be:1e:14:8f:30:1f:c7:cd:78:e9:39:27:a6:e0:ad:36:e7:
         b3:b1:2f:5e:f2:91:21:15:d9:ef:ce:02:98:47:45:b8:55:23:
         52:70:37:36:2f:ce:3a:08:ba:26:38:de:e6:63:b3:30:14:b2:
         a8:94:cb:99:f7:7e:28:f1:ae:66:7b:1a:68:ae:27:35:12:90:
         e4:06:b5:92:7f:ec:76:75:4e:63:6d:57:0e:a3:84:91:77:ec:
         b7:57:ea:f6:ae:9f:cb:4f:7d:9a:40:58:30:6d:d5:fa:b5:dd:
         2a:53:c0:64:14:30:ed:5f:e2:f7:57:24:1e:4d:14:a8:9b:dc:
         f6:24:0d:dd:92:33:25:86:90:3d:a4:5a:8b:8f:2f:58:8c:bb:
         de:ca:a1:60:85:c8:c7:bd:91:c5:23:8d:a0:fe:6f:af:7b:91:
         93:f2:9d:95:82:97:51:4f:6d:c2:d8:a7:27:6a:ec:fc:46:8e:
         73:07:10:d3:39:9a:03:ee:e0:43:e8:5d:e2:39:7c:c1:2a:6a:
         ff:15:67:a3:9c:7f:1e:dc:61:8f:e8:c6:8f:f6:04:12:94:7b:
         4b:4f:18:6b:d6:88:60:24:e9:3c:3a:a3:0b:d5:23:22:49:96:
         d9:54:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----