Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/DsC73hPDZYK3lIHNsYgv8CYLD-0.mft
File:                     DsC73hPDZYK3lIHNsYgv8CYLD-0.mft (raw, json)
Hash identifier:          KvLK4GEp4Oim6lWQcTcbkjE3ma9mnNhhTlrA1q1xU3Q=
Subject key identifier:   E7:3F:1A:04:F6:98:42:72:41:14:03:42:2A:B7:04:6D:60:CC:3D:94
Authority key identifier: 0E:C0:BB:DE:13:C3:65:82:B7:94:81:CD:B1:88:2F:F0:26:0B:0F:ED
Certificate issuer:       /CN=0ec0bbde13c36582b79481cdb1882ff0260b0fed
Certificate serial:       018CB0844CF5609FEF21411CC4A368CD89C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsC73hPDZYK3lIHNsYgv8CYLD-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/DsC73hPDZYK3lIHNsYgv8CYLD-0.mft
Manifest number:          0FFF
Signing time:             Thu 28 Dec 2023 13:01:49 +0000
Manifest this update:     Thu 28 Dec 2023 13:01:49 +0000
Manifest next update:     Fri 29 Dec 2023 13:01:49 +0000
Files and hashes:         1: DsC73hPDZYK3lIHNsYgv8CYLD-0.crl (hash: 50c1iah5FiH3E7asYm9h/1E+htDyF8TJj2KNAFkmpcg=)
                          2: KtZo1Hvx3Hlt2GiCFvtaE2mmF9U.roa (hash: hqwtOa3gnZEydH9Ze4ThYsm0muYQKWi+YSLKs7316nk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b0:84:4c:f5:60:9f:ef:21:41:1c:c4:a3:68:cd:89:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec0bbde13c36582b79481cdb1882ff0260b0fed
        Validity
            Not Before: Dec 28 13:01:49 2023 GMT
            Not After : Dec 29 13:01:49 2023 GMT
        Subject: CN=e73f1a04f6984272411403422ab7046d60cc3d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:9d:57:95:31:44:8c:e1:28:25:0e:54:60:
                    ee:50:68:e4:5f:33:63:70:cb:ac:7b:ad:dc:1a:96:
                    a5:63:c2:c0:67:18:b8:f0:e3:10:ab:95:dc:e9:ee:
                    1b:90:07:67:a3:de:7c:25:0d:ae:f6:cd:7a:31:91:
                    e3:cc:54:8a:58:94:71:03:ba:0a:36:9e:2e:e8:45:
                    42:d8:4e:8a:46:41:da:b5:e5:30:73:e7:33:73:5a:
                    55:54:36:04:08:9a:9c:4a:d2:41:47:04:31:d3:1d:
                    bd:b3:1d:14:5a:c0:93:2c:7c:8b:6d:45:61:58:9c:
                    2e:cf:85:f7:16:eb:7f:3c:a9:f7:96:18:40:9e:01:
                    33:f0:b6:d8:9f:04:4f:e3:4f:13:7b:ed:56:7e:2a:
                    60:da:64:5d:b0:c9:e2:20:fb:3c:c0:4f:85:f6:44:
                    92:38:c6:91:8c:ba:65:b2:f5:c0:1d:30:30:41:2e:
                    3f:2b:46:62:90:09:9a:74:43:b5:de:aa:72:5c:67:
                    8f:c0:25:6e:97:f1:b7:ab:10:83:1a:f3:62:e4:ad:
                    25:25:a3:c6:03:36:40:14:1e:bc:d5:5e:86:54:37:
                    b3:fe:da:8c:42:b7:f9:ca:6f:36:95:29:02:56:3e:
                    40:7d:57:44:f3:bc:34:7c:15:d7:b8:0e:4d:25:a0:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:1A:04:F6:98:42:72:41:14:03:42:2A:B7:04:6D:60:CC:3D:94
            X509v3 Authority Key Identifier:
                keyid:0E:C0:BB:DE:13:C3:65:82:B7:94:81:CD:B1:88:2F:F0:26:0B:0F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsC73hPDZYK3lIHNsYgv8CYLD-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/DsC73hPDZYK3lIHNsYgv8CYLD-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/DsC73hPDZYK3lIHNsYgv8CYLD-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:54:14:16:58:05:7c:19:cf:bb:aa:d9:71:10:90:98:b2:1a:
         69:a1:75:4e:b5:6a:62:5f:6f:a3:e3:7a:95:7e:42:9a:c0:42:
         b0:28:4d:59:7c:05:06:47:03:d4:de:2a:c0:4c:a5:30:47:9d:
         7d:25:2c:59:36:06:12:31:da:7e:39:d5:b9:26:5d:ce:d1:74:
         b5:bf:19:45:94:d7:57:ec:2f:b9:13:90:17:c3:79:1f:a3:fd:
         3e:50:d7:cb:9c:0d:21:de:5a:d3:f1:75:84:2d:a1:fe:a6:95:
         c3:c9:8a:38:4c:78:f1:dd:3f:9f:a6:a7:5e:07:1d:7f:08:a3:
         dc:07:43:58:05:70:c3:c1:d9:82:b0:4b:a2:7b:de:c8:ea:c0:
         e5:55:de:01:37:c9:81:a4:8d:dc:7f:59:d8:1c:34:43:35:24:
         f4:06:3d:56:97:f3:c4:bd:05:94:3d:6f:99:5a:d7:20:fa:b6:
         1a:28:31:ed:03:f7:c4:32:ed:a0:a9:f0:3e:89:5d:52:62:98:
         31:d7:4a:f8:94:81:26:c8:9e:86:45:51:f2:d6:7a:97:6a:42:
         ab:23:b8:c3:4b:34:2d:ee:bd:32:b8:38:bf:61:34:1d:43:00:
         26:19:60:00:ba:9a:ab:e6:66:83:d9:7b:5f:e0:22:56:c1:c8:
         34:97:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----