Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/KZmLDi272gKOTD_Wp8tnx4owLnk.mft
File:                     KZmLDi272gKOTD_Wp8tnx4owLnk.mft (raw, json)
Hash identifier:          d0JyTy75TPZqPmplmZHpp7PQfULmIvUpVf/lQNanbDs=
Subject key identifier:   B6:26:A3:C8:8B:E9:01:42:CD:B1:9A:0D:98:04:CB:5A:8B:49:F0:AE
Authority key identifier: 29:99:8B:0E:2D:BB:DA:02:8E:4C:3F:D6:A7:CB:67:C7:8A:30:2E:79
Certificate issuer:       /CN=29998b0e2dbbda028e4c3fd6a7cb67c78a302e79
Certificate serial:       018B46F34ECFE6250D65DE932854BDCAB95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZmLDi272gKOTD_Wp8tnx4owLnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/KZmLDi272gKOTD_Wp8tnx4owLnk.mft
Manifest number:          0472
Signing time:             Thu 19 Oct 2023 08:00:32 +0000
Manifest this update:     Thu 19 Oct 2023 08:00:32 +0000
Manifest next update:     Fri 20 Oct 2023 08:00:32 +0000
Files and hashes:         1: KZmLDi272gKOTD_Wp8tnx4owLnk.crl (hash: JDn/+++SgI0lFjD9isSOokOTgYUhyQepOwFVM5M4ljw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:46:f3:4e:cf:e6:25:0d:65:de:93:28:54:bd:ca:b9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29998b0e2dbbda028e4c3fd6a7cb67c78a302e79
        Validity
            Not Before: Oct 19 08:00:32 2023 GMT
            Not After : Oct 20 08:00:32 2023 GMT
        Subject: CN=b626a3c88be90142cdb19a0d9804cb5a8b49f0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:be:46:a9:4b:dd:86:c1:da:a1:57:69:5e:
                    97:a2:6f:1b:aa:eb:f6:dd:27:0e:e1:c3:e3:af:1f:
                    c1:80:f9:45:49:ec:2e:32:cb:23:b1:19:b5:39:52:
                    0c:61:15:e3:95:99:b4:c8:49:22:58:5f:94:fc:6b:
                    47:5e:47:2b:19:3e:72:90:bb:f5:59:08:b3:23:66:
                    94:b3:4b:b1:da:17:ba:24:a0:d4:d3:73:af:fc:b5:
                    5d:7f:4f:18:40:75:6d:06:8d:8d:04:f1:87:2a:80:
                    9a:a6:52:36:fc:fe:58:9c:ba:ac:b9:3c:f2:66:ba:
                    c7:a7:4b:fe:f7:1d:fd:b8:9d:9a:86:26:36:94:28:
                    79:e6:b3:7b:ba:52:42:3d:1d:0a:8a:37:01:a4:a7:
                    10:36:e3:ba:27:0d:f2:c9:2d:f0:ac:9e:9d:98:20:
                    37:6e:4e:12:80:d9:9d:ef:10:ef:2a:fb:b7:6c:3b:
                    11:99:a3:c8:25:64:dd:bd:37:aa:dd:20:b8:f6:67:
                    3b:24:bb:ed:65:3f:23:7c:17:a0:a5:33:ff:88:3d:
                    1f:1f:35:55:2d:4c:96:39:f0:a7:c6:0c:f9:eb:0d:
                    b5:4e:81:ea:d3:6a:73:29:e5:06:be:46:6d:e3:95:
                    14:13:a1:6f:3c:b8:26:35:f0:f7:42:df:26:ae:7e:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:26:A3:C8:8B:E9:01:42:CD:B1:9A:0D:98:04:CB:5A:8B:49:F0:AE
            X509v3 Authority Key Identifier:
                keyid:29:99:8B:0E:2D:BB:DA:02:8E:4C:3F:D6:A7:CB:67:C7:8A:30:2E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZmLDi272gKOTD_Wp8tnx4owLnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/KZmLDi272gKOTD_Wp8tnx4owLnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/KZmLDi272gKOTD_Wp8tnx4owLnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d9:f9:f9:85:f2:a0:02:b9:65:96:f9:7b:f1:da:37:76:b5:
         d3:83:b1:93:6e:b0:25:cc:e2:3d:30:50:0d:84:b3:d3:52:21:
         bb:23:64:94:6b:26:a5:14:36:b3:3f:24:f5:54:8c:62:9a:49:
         4a:de:7a:8c:65:25:8b:0f:7e:5d:0a:59:71:35:50:3e:00:de:
         ad:f9:d1:60:1e:49:41:a8:0c:d8:ff:5c:32:6c:d6:41:9d:2e:
         60:b6:8b:ad:60:aa:82:41:b1:92:d0:dc:b0:c8:2a:0e:a5:63:
         ac:02:35:b1:ed:35:4c:05:97:c7:17:54:9e:63:b3:d1:19:65:
         27:3a:e6:c1:9e:35:af:ff:05:a1:cf:67:94:43:e0:2c:98:7c:
         78:cc:29:91:ae:20:1e:17:da:17:ea:85:78:e3:69:1b:ec:e7:
         6d:41:c7:bd:a9:66:16:9b:c0:7e:dc:5e:6a:42:62:47:a6:58:
         bb:d4:18:06:c1:4f:3c:94:cd:84:3d:c9:bb:af:8c:65:25:3f:
         f7:e6:75:03:80:37:1b:14:88:89:8a:a8:f5:44:7e:a2:94:a9:
         11:27:cf:55:d9:45:fe:e1:20:1c:cb:f7:c0:49:bb:f2:4e:24:
         ce:8d:d5:d8:e5:26:56:df:a4:bb:ad:a2:57:55:22:a1:ca:51:
         e3:ce:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----