Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2b6f04-253b-4cc9-995b-01fa01326e5b/1/6f6z3z1IlHLwIjQ0AYixRfrW4Fw.mft
File:                     6f6z3z1IlHLwIjQ0AYixRfrW4Fw.mft (raw, json)
Hash identifier:          KHS3I14aoEIs4+k55qJ8uBfCN4dB/jqAjbKNI8cls/g=
Subject key identifier:   4C:C2:EC:0D:94:AA:77:28:CC:91:F7:2E:C1:8E:0A:3D:E6:FC:5F:17
Authority key identifier: E9:FE:B3:DF:3D:48:94:72:F0:22:34:34:01:88:B1:45:FA:D6:E0:5C
Certificate issuer:       /CN=e9feb3df3d489472f02234340188b145fad6e05c
Certificate serial:       018A5E22D7DC1E6344859E35E2902776A6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f6z3z1IlHLwIjQ0AYixRfrW4Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/2b6f04-253b-4cc9-995b-01fa01326e5b/1/6f6z3z1IlHLwIjQ0AYixRfrW4Fw.mft
Manifest number:          05EF
Signing time:             Mon 04 Sep 2023 03:00:56 +0000
Manifest this update:     Mon 04 Sep 2023 03:00:56 +0000
Manifest next update:     Tue 05 Sep 2023 03:00:56 +0000
Files and hashes:         1: 6f6z3z1IlHLwIjQ0AYixRfrW4Fw.crl (hash: tVpTJg0nhlBN+Lx6fKuFcqGCOKXLdlweNIxinJe/BHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5e:22:d7:dc:1e:63:44:85:9e:35:e2:90:27:76:a6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9feb3df3d489472f02234340188b145fad6e05c
        Validity
            Not Before: Sep  4 03:00:56 2023 GMT
            Not After : Sep  5 03:00:56 2023 GMT
        Subject: CN=4cc2ec0d94aa7728cc91f72ec18e0a3de6fc5f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:26:44:3e:f0:76:bf:73:25:73:a9:b1:b5:
                    bf:ed:56:0f:71:b2:82:71:1c:1c:f1:b0:47:f2:4e:
                    7e:57:21:72:7f:73:03:53:77:b8:59:e3:ee:89:42:
                    bf:59:30:89:e7:78:2d:55:03:a2:23:54:83:73:06:
                    17:5b:bd:00:d2:ad:fd:9b:19:2d:f7:a4:57:86:ba:
                    a1:fd:1c:e0:3a:d1:b6:32:a9:d9:d7:d0:a3:76:30:
                    cc:d8:19:c0:da:3a:de:a3:42:fa:e5:8a:a9:a2:ae:
                    ef:ce:ce:8a:3e:60:85:4c:2d:b4:42:ff:ce:04:38:
                    7b:32:a5:7a:ec:64:87:2f:9d:43:c3:34:7e:fd:67:
                    ee:3b:3f:11:ac:41:d0:f4:b3:e0:33:0b:a0:d6:1e:
                    71:81:cd:3d:0d:64:5e:57:81:66:0e:fb:ad:cc:ef:
                    6a:f4:d4:84:a4:0e:cd:f2:a6:0b:6f:ef:84:1e:a3:
                    58:77:90:5a:e0:ea:1a:91:41:33:1b:dc:22:34:99:
                    64:f9:ea:5b:5b:4d:a8:c4:72:40:a8:74:49:56:bc:
                    9a:6b:19:c3:80:ca:4c:94:83:c3:cb:a1:67:9f:c5:
                    86:44:2c:b6:cb:e9:d0:5c:bd:4c:d5:f3:f5:89:19:
                    b4:7e:09:e2:ed:42:7e:cd:e9:0f:c1:e2:85:07:31:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C2:EC:0D:94:AA:77:28:CC:91:F7:2E:C1:8E:0A:3D:E6:FC:5F:17
            X509v3 Authority Key Identifier:
                keyid:E9:FE:B3:DF:3D:48:94:72:F0:22:34:34:01:88:B1:45:FA:D6:E0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f6z3z1IlHLwIjQ0AYixRfrW4Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2b6f04-253b-4cc9-995b-01fa01326e5b/1/6f6z3z1IlHLwIjQ0AYixRfrW4Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2b6f04-253b-4cc9-995b-01fa01326e5b/1/6f6z3z1IlHLwIjQ0AYixRfrW4Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:aa:d7:51:22:5d:31:63:b7:41:80:af:c0:c7:c5:cd:b8:22:
         63:08:da:0f:f5:53:d1:c3:c0:43:20:34:a9:4f:69:59:32:39:
         b0:81:cd:c5:4f:17:56:2a:7f:34:a3:a4:57:51:bd:2c:64:1a:
         28:83:1d:2e:76:e1:dd:53:d3:27:0f:c9:ca:ae:ad:09:cd:00:
         b0:7f:26:f9:c3:ac:c8:7f:a5:63:2c:03:b0:86:77:39:af:da:
         73:be:46:7c:ed:52:13:1c:ba:fc:df:b8:39:2a:49:f0:21:f1:
         35:b6:b8:2a:38:f3:3e:52:80:4c:f1:80:c9:7e:4e:41:a7:3c:
         a7:09:d2:a4:31:05:f1:03:d9:b4:a7:e6:c6:11:69:cf:0c:dd:
         79:74:f1:8a:4d:f0:48:54:d1:28:ea:5e:44:e1:31:f9:34:96:
         26:fb:8c:24:98:53:f6:9f:8a:29:a6:68:20:65:72:94:f7:ff:
         71:72:c8:46:1a:0c:ad:9c:5b:6d:6b:37:b2:ce:dc:79:c1:83:
         61:02:e9:11:8c:04:88:4e:d8:e0:b3:f2:29:02:73:b2:cd:cb:
         74:4a:7b:6b:66:83:12:d9:14:0e:d8:f8:e4:0f:c2:aa:70:19:
         0e:30:0f:03:c4:bf:8f:c3:3c:6f:9b:bf:32:39:25:b1:aa:ff:
         ed:da:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----