Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/rGnTqW407P-2hYBCDNjsn36gkoE.mft
File:                     rGnTqW407P-2hYBCDNjsn36gkoE.mft (raw, json)
Hash identifier:          bAwFG0CksTZr1YST9asTeiisJsld1PhsWyGLVQgvm1g=
Subject key identifier:   CA:12:55:9F:31:85:B9:7E:8D:D1:F6:3E:F0:CF:4E:09:2F:56:F5:8A
Authority key identifier: AC:69:D3:A9:6E:34:EC:FF:B6:85:80:42:0C:D8:EC:9F:7E:A0:92:81
Certificate issuer:       /CN=ac69d3a96e34ecffb68580420cd8ec9f7ea09281
Certificate serial:       018C1FE3D5A6B7B914AC674F23A25C036E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rGnTqW407P-2hYBCDNjsn36gkoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/rGnTqW407P-2hYBCDNjsn36gkoE.mft
Manifest number:          089B
Signing time:             Thu 30 Nov 2023 11:01:14 +0000
Manifest this update:     Thu 30 Nov 2023 11:01:14 +0000
Manifest next update:     Fri 01 Dec 2023 11:01:14 +0000
Files and hashes:         1: rGnTqW407P-2hYBCDNjsn36gkoE.crl (hash: bj4aFOTa/NXAY75tIfIKmfUQASUZgoE2C+hTempZAmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1f:e3:d5:a6:b7:b9:14:ac:67:4f:23:a2:5c:03:6e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac69d3a96e34ecffb68580420cd8ec9f7ea09281
        Validity
            Not Before: Nov 30 11:01:14 2023 GMT
            Not After : Dec  1 11:01:14 2023 GMT
        Subject: CN=ca12559f3185b97e8dd1f63ef0cf4e092f56f58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:02:43:ea:a9:80:e2:4e:a6:a5:12:ba:0d:
                    44:76:3d:08:d9:c4:9e:e8:c5:5f:25:0b:84:24:4e:
                    08:27:3d:4d:81:62:fd:38:7f:d0:6d:f8:ee:4a:21:
                    e5:e9:bb:fc:26:b1:3f:58:83:a7:de:8f:70:02:73:
                    78:c5:ba:bb:fa:28:1b:14:8d:66:ca:a4:56:0d:e8:
                    cb:42:c2:9c:22:99:c0:db:56:4b:a7:ea:23:9b:7e:
                    48:c4:e1:4a:c9:20:82:9a:93:2b:4c:fd:91:fd:04:
                    e6:1b:a8:1f:b4:6f:8d:f0:48:c3:45:bd:50:fe:3c:
                    ab:3f:85:bb:e7:ae:fa:84:39:25:20:f2:3e:d9:1b:
                    da:bd:76:8c:7d:d7:b1:c9:11:27:97:14:98:27:fa:
                    8d:8a:c1:d7:42:4a:28:0f:d5:1a:34:f7:ea:5e:c1:
                    9d:9a:27:b1:b2:df:ab:df:45:f2:59:4b:95:09:8a:
                    e0:2e:9c:d0:aa:84:8d:0e:30:01:17:06:09:72:ee:
                    f2:ea:70:18:66:12:0b:93:84:b3:de:4f:81:57:08:
                    e3:bb:1e:8b:78:d0:64:93:9f:f2:54:94:f0:c2:1e:
                    55:66:9d:ec:34:ed:ab:00:ed:3c:fa:8c:8a:7d:f7:
                    c4:34:29:62:db:86:a8:3b:25:b4:c6:91:ae:79:3a:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:12:55:9F:31:85:B9:7E:8D:D1:F6:3E:F0:CF:4E:09:2F:56:F5:8A
            X509v3 Authority Key Identifier:
                keyid:AC:69:D3:A9:6E:34:EC:FF:B6:85:80:42:0C:D8:EC:9F:7E:A0:92:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGnTqW407P-2hYBCDNjsn36gkoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/rGnTqW407P-2hYBCDNjsn36gkoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/rGnTqW407P-2hYBCDNjsn36gkoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:24:c1:80:a6:5a:1d:b2:ea:c5:51:5e:21:5e:3a:10:5c:e8:
         91:d4:09:04:97:0f:b8:04:8f:fd:af:5a:6d:d5:49:4a:7d:a6:
         c3:34:35:a5:32:ba:68:94:83:bc:6a:b3:07:25:59:52:50:32:
         9d:c3:71:d4:38:59:e0:0e:7e:1c:b3:bc:97:cb:40:39:09:f8:
         11:8f:ab:dd:9c:9f:27:19:59:c8:cb:b9:6a:d7:cf:f6:f5:d3:
         59:10:95:28:92:5b:3b:a5:4b:02:a9:96:ae:f6:30:0d:f7:43:
         d6:ee:f8:fe:24:88:41:a5:b1:db:f7:e3:87:5b:4f:a1:18:91:
         83:f9:63:4d:91:a1:7a:63:d5:aa:73:4c:c1:cb:4f:f2:a6:38:
         c0:52:ae:a2:57:ce:ff:17:8d:a3:d3:99:3f:ab:62:86:ba:69:
         12:cc:ef:db:b2:30:37:c3:85:0c:67:0a:64:de:2a:88:34:b4:
         fb:5e:c9:1d:4f:48:f7:87:c0:a4:ad:b5:02:7b:34:a4:fc:e7:
         18:a0:5a:3d:b2:f9:76:3b:4b:96:fb:8d:45:5c:83:08:a5:bd:
         b7:db:eb:0c:11:4c:a4:9d:74:1a:b3:9e:f0:31:1f:eb:da:29:
         72:6e:ee:0e:4a:55:40:20:90:39:46:f2:dc:b1:73:29:eb:7f:
         82:57:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----