Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bcc421-024e-47f5-9ebb-26d59297e416/1/7ym3KyUWMH3CkNjkSgYiGbLaAfw.mft
File:                     7ym3KyUWMH3CkNjkSgYiGbLaAfw.mft (raw, json)
Hash identifier:          LNY8BVJbkb7eJgyqGGwEG4xSCzn+z/sE1ffhOOBPdKw=
Subject key identifier:   50:15:62:E4:30:DE:1F:F2:A9:91:24:9F:8A:B8:8B:A3:BD:CE:E8:3E
Authority key identifier: EF:29:B7:2B:25:16:30:7D:C2:90:D8:E4:4A:06:22:19:B2:DA:01:FC
Certificate issuer:       /CN=ef29b72b2516307dc290d8e44a062219b2da01fc
Certificate serial:       018C85987473C4356F9302B3479F4F06D0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ym3KyUWMH3CkNjkSgYiGbLaAfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/bcc421-024e-47f5-9ebb-26d59297e416/1/7ym3KyUWMH3CkNjkSgYiGbLaAfw.mft
Manifest number:          071B
Signing time:             Wed 20 Dec 2023 05:00:09 +0000
Manifest this update:     Wed 20 Dec 2023 05:00:09 +0000
Manifest next update:     Thu 21 Dec 2023 05:00:09 +0000
Files and hashes:         1: 7ym3KyUWMH3CkNjkSgYiGbLaAfw.crl (hash: 5OJP9zUFaBTD7+32M495Zk8LmCz9e7iMWFuuUwghWUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:85:98:74:73:c4:35:6f:93:02:b3:47:9f:4f:06:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef29b72b2516307dc290d8e44a062219b2da01fc
        Validity
            Not Before: Dec 20 05:00:09 2023 GMT
            Not After : Dec 21 05:00:09 2023 GMT
        Subject: CN=501562e430de1ff2a991249f8ab88ba3bdcee83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:e8:d1:f8:aa:91:3c:a0:38:67:cf:5e:3e:
                    5b:1d:07:67:be:4e:c7:63:3c:00:76:70:84:1f:9b:
                    eb:46:1c:ac:e2:e9:03:d0:f9:29:3e:fc:88:00:f9:
                    63:7b:3e:e7:30:65:ef:b5:60:19:20:74:4d:cf:bb:
                    56:cd:86:85:c5:2b:bc:04:f8:71:f9:d9:e8:11:2e:
                    66:65:36:00:32:fb:8d:a3:fc:01:4f:25:fa:fb:c6:
                    cb:b3:70:d9:b2:9e:a5:99:48:57:df:e9:7e:ab:a1:
                    cd:cb:a5:f4:a7:17:a4:48:de:6f:71:73:4c:b6:82:
                    70:e7:6f:dc:8b:ac:8d:cc:a5:47:43:e8:7b:53:f8:
                    e7:a8:81:9c:b8:2e:5f:44:2b:57:bc:94:89:a7:5a:
                    d6:c5:df:24:dc:c4:4b:e4:6b:4c:74:3b:4d:4a:77:
                    e1:af:46:84:c0:fd:ff:69:37:78:1e:35:4a:bc:33:
                    ac:11:0f:68:96:aa:54:85:57:25:fd:85:e8:5c:2e:
                    9b:a4:c6:b7:85:30:43:60:9a:c9:56:a3:99:ab:89:
                    f1:32:0c:0f:8d:9d:7f:07:22:b4:7c:6c:ae:18:55:
                    fe:4f:17:1e:c1:91:bd:1f:d4:1c:2b:d8:e2:20:de:
                    51:8b:3e:2d:71:1d:56:4c:52:46:a8:9a:e5:53:e3:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:15:62:E4:30:DE:1F:F2:A9:91:24:9F:8A:B8:8B:A3:BD:CE:E8:3E
            X509v3 Authority Key Identifier:
                keyid:EF:29:B7:2B:25:16:30:7D:C2:90:D8:E4:4A:06:22:19:B2:DA:01:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ym3KyUWMH3CkNjkSgYiGbLaAfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bcc421-024e-47f5-9ebb-26d59297e416/1/7ym3KyUWMH3CkNjkSgYiGbLaAfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bcc421-024e-47f5-9ebb-26d59297e416/1/7ym3KyUWMH3CkNjkSgYiGbLaAfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ac:8b:0f:53:01:66:5b:e9:cd:36:8b:3d:77:22:07:7f:8d:
         c7:c8:11:5f:4a:45:35:d6:5e:aa:de:c6:0f:e2:b7:f4:d3:ed:
         b2:5f:fc:45:ab:61:b8:af:21:9b:6d:dc:ef:4c:28:1b:d1:60:
         85:d7:79:59:61:06:72:13:c8:ec:46:46:7f:5d:c0:e9:ae:c7:
         0a:aa:4b:03:ba:d2:f4:71:d8:4b:94:cd:58:b1:e7:62:01:f7:
         0a:e1:e3:da:a5:4c:1c:0a:9e:74:a5:f6:4b:77:44:9c:34:7a:
         e5:95:a8:d1:4e:6e:f2:2a:11:0e:80:3e:0b:48:9e:b2:75:eb:
         83:78:40:34:34:eb:a6:83:17:07:5d:01:53:e2:8e:88:89:17:
         fd:3d:1e:f8:1b:2b:ad:3c:3d:ae:65:3a:66:92:f4:0e:01:be:
         17:75:8a:6e:a7:eb:e2:7b:91:b6:60:45:d2:0a:cb:81:7b:21:
         4a:1a:28:29:96:1c:c1:0e:29:93:fa:50:3a:f4:a2:ee:4f:b7:
         b4:41:30:8c:7e:d0:6d:3b:bb:0e:a2:85:aa:ad:1d:6b:85:45:
         41:fb:06:7b:a2:4f:53:64:30:af:ff:94:35:c1:86:4c:3b:25:
         a4:da:4a:cf:b8:48:e8:ab:1f:43:f0:aa:6a:f4:ad:e7:e4:08:
         16:de:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----