Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e0cd1c-e5cd-4f9a-a918-56df33c0fecc/1/HLga6DRJtmvIbDhAPtn_HivS54Q.mft
File:                     HLga6DRJtmvIbDhAPtn_HivS54Q.mft (raw, json)
Hash identifier:          +FfY+I3J+YRabUARSBI84EEcFj7nJMLcjOTiYpFlrbI=
Subject key identifier:   C4:B1:B3:A9:5C:A9:E8:BB:A0:DF:C9:81:5D:72:D1:E3:C5:65:FE:14
Authority key identifier: 1C:B8:1A:E8:34:49:B6:6B:C8:6C:38:40:3E:D9:FF:1E:2B:D2:E7:84
Certificate issuer:       /CN=1cb81ae83449b66bc86c38403ed9ff1e2bd2e784
Certificate serial:       018735E4CDED4570BA30F9D2BF4A5072B531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLga6DRJtmvIbDhAPtn_HivS54Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/e0cd1c-e5cd-4f9a-a918-56df33c0fecc/1/HLga6DRJtmvIbDhAPtn_HivS54Q.mft
Manifest number:          0A9D
Signing time:             Fri 31 Mar 2023 04:19:59 +0000
Manifest this update:     Fri 31 Mar 2023 04:19:59 +0000
Manifest next update:     Sat 01 Apr 2023 04:19:59 +0000
Files and hashes:         1: HLga6DRJtmvIbDhAPtn_HivS54Q.crl (hash: gOqtan242LjlQtO9VZpiqvXthBdjf44P/zfzvGzu6LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:35:e4:cd:ed:45:70:ba:30:f9:d2:bf:4a:50:72:b5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb81ae83449b66bc86c38403ed9ff1e2bd2e784
        Validity
            Not Before: Mar 31 04:19:59 2023 GMT
            Not After : Apr  1 04:19:59 2023 GMT
        Subject: CN=c4b1b3a95ca9e8bba0dfc9815d72d1e3c565fe14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d3:2a:29:56:2a:74:91:e4:08:ac:9a:7a:d0:
                    31:3e:8c:0e:f6:91:e1:8a:52:43:82:2a:45:cf:a8:
                    53:e6:fa:84:a1:6c:dd:04:91:67:db:c0:11:49:e5:
                    86:30:83:98:30:9c:31:7e:ed:50:b0:7c:b4:a0:ff:
                    36:74:35:db:8e:08:2e:eb:ee:44:a3:1e:b8:27:29:
                    34:65:c6:8d:56:24:6a:dd:ea:d9:ac:43:a9:cb:47:
                    78:d8:3d:b9:51:72:66:9a:58:09:ef:02:0e:b7:ed:
                    0a:14:bb:f2:66:54:d2:68:f9:31:29:a5:3b:5e:38:
                    1b:bc:39:5f:29:17:63:31:0d:59:f8:a6:11:0b:6e:
                    c2:ce:cc:94:c7:a2:4f:42:e7:3d:4e:9a:e7:6e:75:
                    b9:ff:b4:90:05:96:08:64:66:8c:5a:9a:94:fa:36:
                    61:e8:b3:33:20:39:bc:7c:e2:71:2e:5c:2f:71:3a:
                    1b:02:20:00:1d:ae:c7:aa:08:74:5c:7e:82:23:51:
                    b5:6e:67:dc:0d:9f:c3:08:3f:7a:e7:f0:db:17:72:
                    a6:9d:4f:48:e6:eb:e0:24:20:bf:73:c9:87:76:37:
                    b8:89:19:80:bb:03:9f:42:7e:bc:c9:64:64:87:a4:
                    ba:07:e8:13:ed:7e:6f:20:cb:9b:f4:2a:72:9b:1d:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B1:B3:A9:5C:A9:E8:BB:A0:DF:C9:81:5D:72:D1:E3:C5:65:FE:14
            X509v3 Authority Key Identifier:
                keyid:1C:B8:1A:E8:34:49:B6:6B:C8:6C:38:40:3E:D9:FF:1E:2B:D2:E7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLga6DRJtmvIbDhAPtn_HivS54Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e0cd1c-e5cd-4f9a-a918-56df33c0fecc/1/HLga6DRJtmvIbDhAPtn_HivS54Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e0cd1c-e5cd-4f9a-a918-56df33c0fecc/1/HLga6DRJtmvIbDhAPtn_HivS54Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:16:10:04:0e:2f:08:76:22:78:3a:55:b2:d5:93:8b:4a:ce:
         7e:58:e2:20:90:78:89:26:98:70:a7:67:49:96:c5:5c:bf:6a:
         5d:39:51:b8:1a:05:a9:31:08:07:26:ee:59:9b:5d:c8:bd:86:
         f6:40:fb:71:2e:95:3c:92:7b:79:ee:f5:03:54:a3:b5:8c:f0:
         50:c3:97:2b:03:ae:77:4b:4c:58:94:c4:63:e3:ff:e7:9c:1e:
         b7:bb:b9:92:34:c6:d4:f7:7b:b4:17:35:f8:06:34:a2:7f:62:
         92:b6:fd:15:fb:82:f1:5c:78:23:84:df:44:e0:be:77:3e:bc:
         0d:92:f7:cb:d9:2d:de:03:25:f5:80:7c:c2:e3:47:dd:38:a9:
         77:8a:87:f5:fc:5f:60:10:05:8b:d2:a6:c1:ed:08:21:f0:10:
         a0:e4:63:a4:75:00:da:ff:4c:09:a1:02:c4:da:62:ad:b3:fb:
         ba:ce:fe:76:d3:83:a4:fe:b4:25:5f:b9:d6:fa:dc:8c:2e:99:
         d9:56:fa:d5:fe:ff:23:7e:a8:a2:49:35:87:ca:52:53:b7:b4:
         25:40:2c:6a:96:77:75:e6:a9:fd:2b:69:b0:d1:11:6f:35:f6:
         ff:e0:57:56:76:db:31:7b:a7:ad:3c:2e:61:fb:90:35:8d:e1:
         3f:9f:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----