Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/p-iFttutZ-pcGppV7hSJoHy_lUI.mft
File:                     p-iFttutZ-pcGppV7hSJoHy_lUI.mft (raw, json)
Hash identifier:          /xH9fzWMwMOlD9lSMB0EUNr9gkupm9wy6jzM0+bY8zo=
Subject key identifier:   8A:AC:67:04:C6:67:9D:B1:AF:C6:26:37:4E:B7:20:7F:26:94:7C:F1
Authority key identifier: A7:E8:85:B6:DB:AD:67:EA:5C:1A:9A:55:EE:14:89:A0:7C:BF:95:42
Certificate issuer:       /CN=a7e885b6dbad67ea5c1a9a55ee1489a07cbf9542
Certificate serial:       018B8F4333722E40A046223EC60A1C16F2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-iFttutZ-pcGppV7hSJoHy_lUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/p-iFttutZ-pcGppV7hSJoHy_lUI.mft
Manifest number:          0893
Signing time:             Thu 02 Nov 2023 09:00:27 +0000
Manifest this update:     Thu 02 Nov 2023 09:00:27 +0000
Manifest next update:     Fri 03 Nov 2023 09:00:27 +0000
Files and hashes:         1: p-iFttutZ-pcGppV7hSJoHy_lUI.crl (hash: mCEolGZOG3+HTgAS9SmDiZkmK0rrwN+cGm4MIfTORmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:43:33:72:2e:40:a0:46:22:3e:c6:0a:1c:16:f2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e885b6dbad67ea5c1a9a55ee1489a07cbf9542
        Validity
            Not Before: Nov  2 09:00:27 2023 GMT
            Not After : Nov  3 09:00:27 2023 GMT
        Subject: CN=8aac6704c6679db1afc626374eb7207f26947cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:ea:04:2f:d6:3b:fb:87:4f:f1:72:65:08:
                    ec:c1:c8:81:4c:8a:5f:25:97:6b:97:1b:6a:89:fe:
                    e5:07:b0:ea:1b:7f:3b:b0:cc:b4:68:4b:94:41:da:
                    1f:a2:d5:c4:00:9d:f9:c0:63:56:95:19:b4:78:44:
                    39:7f:b0:cc:e2:b2:84:8e:b2:a3:a0:45:08:9f:1c:
                    35:48:ed:b3:52:f4:6f:1c:bd:f1:f9:2d:b2:e8:9f:
                    1c:61:44:d3:c9:14:1e:cc:a7:55:ed:18:97:d0:ef:
                    bc:83:74:63:71:27:84:68:b3:7b:10:a7:ce:8a:46:
                    2b:77:d6:eb:ea:41:6b:56:95:5a:7c:24:7b:da:af:
                    42:25:1b:2f:cd:93:e2:87:96:63:33:74:05:64:49:
                    5d:9c:d4:3f:4d:81:33:1c:3c:12:90:33:10:53:8e:
                    37:cf:9d:0d:e4:ff:75:48:f8:5a:6e:62:fd:3a:33:
                    20:3f:7c:e4:01:73:db:86:82:f1:e7:fe:83:97:0f:
                    c1:27:0a:8b:15:c6:89:e9:59:38:ea:4d:b3:39:29:
                    f2:e6:5d:23:dc:e5:68:db:27:55:42:21:7c:e6:d8:
                    5d:ed:50:4b:ce:da:a8:4e:20:29:33:7d:39:1a:87:
                    08:5e:af:86:b5:a7:00:94:2b:74:b1:4b:e6:67:14:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AC:67:04:C6:67:9D:B1:AF:C6:26:37:4E:B7:20:7F:26:94:7C:F1
            X509v3 Authority Key Identifier:
                keyid:A7:E8:85:B6:DB:AD:67:EA:5C:1A:9A:55:EE:14:89:A0:7C:BF:95:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-iFttutZ-pcGppV7hSJoHy_lUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/p-iFttutZ-pcGppV7hSJoHy_lUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/p-iFttutZ-pcGppV7hSJoHy_lUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:87:64:80:19:fe:c5:0f:89:48:51:ee:31:8a:36:32:3c:fc:
         f8:c0:e9:68:f9:26:0b:fb:6c:41:40:63:f7:6e:ca:7c:a2:b9:
         e7:cb:31:06:bc:67:2c:23:d3:c4:7f:32:38:af:be:73:e9:2b:
         e0:e2:1d:08:08:0d:90:1f:fa:b3:41:4d:cc:d1:cc:77:39:7f:
         ab:0d:d6:bd:c7:3c:6b:4f:37:4f:12:06:66:ed:89:c6:82:e7:
         3d:1e:16:0d:94:d3:0f:b9:9b:be:d1:6f:99:75:80:75:0c:dc:
         80:80:ed:88:f5:ee:46:54:d3:d1:46:04:22:de:32:50:43:87:
         2c:27:be:82:52:7f:b6:90:ed:62:bb:e3:32:5a:54:e0:41:d3:
         a8:29:b5:86:10:81:9c:27:f2:b3:e9:d0:20:6b:d7:1b:4a:09:
         8e:1e:bf:c5:94:b8:aa:18:91:aa:98:9a:fa:db:ab:09:ee:e8:
         3e:6b:85:eb:1b:8b:40:b1:1f:7e:0c:aa:d0:4d:eb:a8:66:3e:
         35:99:8b:e0:97:ca:f3:73:99:3f:4e:72:6f:76:1c:8d:7c:37:
         47:f2:7c:e5:58:e3:b2:06:a3:b3:81:22:d7:c5:a7:f8:ae:ae:
         60:c3:5e:f7:1e:63:16:25:fd:10:27:0e:dc:ee:35:68:23:29:
         29:42:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----