Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f7548c-f2e9-4a7b-824c-0dc96103e072/1/GPw7tSXLNyy1yspW_TjlxbnSG8E.mft
File:                     GPw7tSXLNyy1yspW_TjlxbnSG8E.mft (raw, json)
Hash identifier:          /upbIi6In9GOXESg83Wg2Jz1OPoJfl4B17NE6vUKGkU=
Subject key identifier:   64:29:2F:49:62:11:3A:E4:00:95:06:62:6A:EC:4A:EC:74:44:51:C4
Authority key identifier: 18:FC:3B:B5:25:CB:37:2C:B5:CA:CA:56:FD:38:E5:C5:B9:D2:1B:C1
Certificate issuer:       /CN=18fc3bb525cb372cb5caca56fd38e5c5b9d21bc1
Certificate serial:       01885195637527B5B7AEE4AA86335F38F9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPw7tSXLNyy1yspW_TjlxbnSG8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f7548c-f2e9-4a7b-824c-0dc96103e072/1/GPw7tSXLNyy1yspW_TjlxbnSG8E.mft
Manifest number:          01
Signing time:             Thu 25 May 2023 06:25:24 +0000
Manifest this update:     Thu 25 May 2023 06:25:24 +0000
Manifest next update:     Fri 26 May 2023 06:25:24 +0000
Files and hashes:         1: GPw7tSXLNyy1yspW_TjlxbnSG8E.crl (hash: 7dV7eqO8CsHtoOX9hhGbaAF58NHRIEcrPjCCTULrvgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:51:95:63:75:27:b5:b7:ae:e4:aa:86:33:5f:38:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18fc3bb525cb372cb5caca56fd38e5c5b9d21bc1
        Validity
            Not Before: May 25 06:25:24 2023 GMT
            Not After : May 26 06:25:24 2023 GMT
        Subject: CN=64292f4962113ae4009506626aec4aec744451c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:3c:00:e7:09:8e:b7:2a:72:48:e8:f3:0d:
                    a8:14:39:44:cb:05:71:d0:34:74:80:55:13:7a:68:
                    b4:50:aa:b2:ab:3c:df:73:fa:11:b8:89:39:16:7a:
                    9f:f2:c8:b2:6b:05:4b:f2:76:d9:5d:40:3e:eb:66:
                    ce:28:73:55:86:85:37:9c:dd:d4:97:30:ef:2c:96:
                    60:f8:de:65:b9:27:24:f8:09:c9:25:a0:f7:36:32:
                    64:d1:93:30:d9:c1:c5:ad:aa:f7:df:35:a4:df:59:
                    c6:af:ae:13:a4:31:99:85:0b:63:2d:da:63:0f:bd:
                    20:27:dc:1e:62:d3:cb:e7:73:0c:29:d0:6a:bc:55:
                    79:89:ab:7f:5c:b0:ce:d9:45:f1:b7:b6:f8:4d:4f:
                    b3:a7:20:4d:94:9e:b5:6e:32:21:b7:1b:aa:6c:76:
                    93:16:84:40:0a:e8:d3:b2:45:3d:cf:02:37:b8:b6:
                    07:c0:34:92:5e:5f:a2:0b:62:6a:40:df:7c:ed:ec:
                    28:a4:fc:f2:f4:80:a5:2c:35:e0:d5:15:2b:92:74:
                    c8:d7:ba:5a:69:81:aa:db:7d:77:96:6c:11:44:a5:
                    a7:15:8f:d1:08:c9:85:41:b0:ed:fc:04:a3:ff:7d:
                    e2:a2:74:fe:8c:3d:c0:c7:fd:f3:72:4b:3a:68:ec:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:2F:49:62:11:3A:E4:00:95:06:62:6A:EC:4A:EC:74:44:51:C4
            X509v3 Authority Key Identifier:
                keyid:18:FC:3B:B5:25:CB:37:2C:B5:CA:CA:56:FD:38:E5:C5:B9:D2:1B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPw7tSXLNyy1yspW_TjlxbnSG8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f7548c-f2e9-4a7b-824c-0dc96103e072/1/GPw7tSXLNyy1yspW_TjlxbnSG8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f7548c-f2e9-4a7b-824c-0dc96103e072/1/GPw7tSXLNyy1yspW_TjlxbnSG8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:49:c9:b5:c8:88:6e:84:5e:6b:26:80:38:89:95:ac:4e:17:
         0e:6c:81:d0:af:08:c9:cd:dd:91:8f:fb:12:de:d3:47:d8:34:
         5e:2f:70:1e:1e:0e:80:e8:02:d3:a6:91:a8:93:f5:29:d3:c0:
         5b:9e:e6:0d:e1:c6:14:89:3a:d7:1c:ce:87:c3:a3:98:e9:e1:
         61:6c:bf:40:ea:72:20:33:74:54:67:65:dd:e7:a0:50:2d:a4:
         d6:4d:01:7d:12:17:fa:44:5d:3b:14:cb:84:7d:56:da:e8:a5:
         68:42:65:f8:ed:69:d5:6c:c0:0b:ac:11:ea:ca:38:c4:e6:13:
         15:a5:19:75:29:49:3a:9c:69:b1:98:7d:9f:21:29:7f:4f:e1:
         99:dc:b6:83:c9:5a:db:27:76:7c:1f:0e:06:f0:14:fc:a1:f4:
         aa:d4:64:d3:2f:0d:6c:cd:41:f6:3d:61:a1:fa:02:5a:04:fc:
         10:98:5d:72:bc:45:21:cd:dc:d3:50:08:25:6d:66:d0:fc:54:
         7b:63:0b:59:90:70:7d:21:1f:79:a2:dd:d5:36:98:bb:34:4d:
         66:78:86:3d:32:33:24:c5:ae:8e:40:b8:e8:0a:b0:30:5f:9c:
         61:f5:ab:d6:8f:c2:2c:13:e2:05:59:d1:3d:9f:bf:64:91:28:
         93:3d:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----