Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/dd1c98-86e8-41e8-bd22-c79169a55d86/1/jBd8yr8gYBM9h4rAbm6g_D42SGk.mft
File:                     jBd8yr8gYBM9h4rAbm6g_D42SGk.mft (raw, json)
Hash identifier:          qYVtVJF+/00KVuvRylTgZ932McJHgi+sGTLZWPGAzng=
Subject key identifier:   1E:59:40:49:BF:B9:BB:A0:D6:0B:29:C1:5D:FF:EC:99:81:58:91:BA
Authority key identifier: 8C:17:7C:CA:BF:20:60:13:3D:87:8A:C0:6E:6E:A0:FC:3E:36:48:69
Certificate issuer:       /CN=8c177ccabf2060133d878ac06e6ea0fc3e364869
Certificate serial:       0189F599A3DE26638B82B926DD109AF285A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBd8yr8gYBM9h4rAbm6g_D42SGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/dd1c98-86e8-41e8-bd22-c79169a55d86/1/jBd8yr8gYBM9h4rAbm6g_D42SGk.mft
Manifest number:          03DF
Signing time:             Mon 14 Aug 2023 19:50:33 +0000
Manifest this update:     Mon 14 Aug 2023 19:50:33 +0000
Manifest next update:     Tue 15 Aug 2023 19:50:33 +0000
Files and hashes:         1: jBd8yr8gYBM9h4rAbm6g_D42SGk.crl (hash: aQzqhbzc+Ab1xaiEUXUU2TGBaAC/2hU4ar2YaTkl2DE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f5:99:a3:de:26:63:8b:82:b9:26:dd:10:9a:f2:85:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c177ccabf2060133d878ac06e6ea0fc3e364869
        Validity
            Not Before: Aug 14 19:50:33 2023 GMT
            Not After : Aug 15 19:50:33 2023 GMT
        Subject: CN=1e594049bfb9bba0d60b29c15dffec99815891ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:54:ab:56:d8:f8:0f:db:90:1e:d8:9c:bf:
                    89:25:b6:63:7d:e1:87:4c:88:e8:64:33:2b:aa:71:
                    9a:2f:f4:05:ce:6f:cf:a6:b1:6f:28:03:4f:75:22:
                    ac:22:58:c5:dc:e1:03:45:f5:6f:6a:e3:cf:e7:44:
                    3c:89:c1:b6:9e:e7:ff:bf:42:30:80:f1:c4:cd:ce:
                    3a:74:9f:4d:19:b6:36:64:48:3c:18:25:6b:1e:7d:
                    48:91:a4:84:2e:11:9e:d8:0a:98:ff:20:2f:07:64:
                    6d:dc:60:ca:d7:d2:55:07:5c:85:7f:99:eb:c5:69:
                    b7:f8:84:b6:4e:e8:82:69:74:aa:49:75:a9:b4:5f:
                    25:73:1f:d4:3a:f0:4b:09:51:0c:ad:e3:07:a1:d9:
                    cf:96:4b:21:cd:2a:e2:72:7b:82:df:54:3a:57:76:
                    80:e5:3c:d0:fe:80:0c:bd:7d:69:33:d7:b5:35:be:
                    4a:74:b6:39:06:57:65:18:5e:48:34:11:fe:b7:08:
                    d4:94:0e:c0:3f:9e:04:84:9d:a6:8a:56:c2:04:5a:
                    f8:8b:66:6c:0e:6a:fa:9c:4d:60:aa:f4:c9:1c:b5:
                    a3:39:f2:48:b1:7a:48:7c:30:df:bd:25:a0:8d:fa:
                    6e:ee:76:54:aa:8a:2f:60:a6:99:1e:31:d3:69:da:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:59:40:49:BF:B9:BB:A0:D6:0B:29:C1:5D:FF:EC:99:81:58:91:BA
            X509v3 Authority Key Identifier:
                keyid:8C:17:7C:CA:BF:20:60:13:3D:87:8A:C0:6E:6E:A0:FC:3E:36:48:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBd8yr8gYBM9h4rAbm6g_D42SGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dd1c98-86e8-41e8-bd22-c79169a55d86/1/jBd8yr8gYBM9h4rAbm6g_D42SGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dd1c98-86e8-41e8-bd22-c79169a55d86/1/jBd8yr8gYBM9h4rAbm6g_D42SGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:23:73:f4:c0:72:a3:60:aa:39:a1:07:00:14:17:86:e1:94:
         a7:f1:9b:97:03:7d:18:5a:bc:c2:0c:2b:e5:af:04:ad:d3:64:
         d2:67:e1:43:de:4d:41:5b:05:74:4f:9b:40:76:a1:f4:7f:83:
         9f:29:6c:f9:2a:e1:d1:70:fd:41:16:a7:c7:25:e1:f4:5c:21:
         97:ac:ff:90:74:e5:ce:48:0b:fa:21:38:3a:a4:a2:82:11:31:
         6d:e0:f6:6c:80:92:42:de:de:46:3f:f9:30:2a:06:14:a1:5a:
         f3:e2:42:5e:06:d7:2b:e0:9e:a6:13:08:b1:dc:97:c8:6c:5d:
         7e:c5:35:5f:a8:ac:76:22:af:a6:ed:18:83:9a:55:e5:41:35:
         05:35:5d:02:05:43:f4:b1:c0:77:0d:60:91:c8:d2:f7:5e:9a:
         d0:48:64:ac:dd:33:22:e8:31:4a:15:6e:91:e2:18:99:4f:21:
         d9:bf:36:cd:b2:ad:12:ac:c2:0a:f8:4f:20:06:f0:20:15:2a:
         b2:f2:09:0c:88:8c:9c:b8:68:a5:47:da:c4:ba:5e:60:99:30:
         fc:5a:5a:97:0e:03:80:37:1a:f1:68:91:b4:6b:71:02:a7:fb:
         03:6d:79:05:0a:12:61:97:d6:47:2c:bb:a4:a5:24:9f:2d:1b:
         f9:ee:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----