Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ead29f-cb08-44b2-a76f-5aaa18345730/1/5UCtS92DBkuE4U1JF5PXldXJYJM.mft
File:                     5UCtS92DBkuE4U1JF5PXldXJYJM.mft (raw, json)
Hash identifier:          oW6q3VXdF/DSi+GwNT/OOYAlMwPJCt0kMooT/pqMJ30=
Subject key identifier:   CB:9D:A5:B2:5B:91:65:9A:F2:AD:2A:1F:40:B2:CD:A5:07:A9:1A:FE
Authority key identifier: E5:40:AD:4B:DD:83:06:4B:84:E1:4D:49:17:93:D7:95:D5:C9:60:93
Certificate issuer:       /CN=e540ad4bdd83064b84e14d491793d795d5c96093
Certificate serial:       018BD2DB89AA819F21F0B99F5D12CEDE31F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UCtS92DBkuE4U1JF5PXldXJYJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ead29f-cb08-44b2-a76f-5aaa18345730/1/5UCtS92DBkuE4U1JF5PXldXJYJM.mft
Manifest number:          02A4
Signing time:             Wed 15 Nov 2023 12:01:24 +0000
Manifest this update:     Wed 15 Nov 2023 12:01:24 +0000
Manifest next update:     Thu 16 Nov 2023 12:01:24 +0000
Files and hashes:         1: 5UCtS92DBkuE4U1JF5PXldXJYJM.crl (hash: vVVgdqgeigjkFf4qk5ML68VTV/l7vTJ16wjh+yxQpXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d2:db:89:aa:81:9f:21:f0:b9:9f:5d:12:ce:de:31:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e540ad4bdd83064b84e14d491793d795d5c96093
        Validity
            Not Before: Nov 15 12:01:24 2023 GMT
            Not After : Nov 16 12:01:24 2023 GMT
        Subject: CN=cb9da5b25b91659af2ad2a1f40b2cda507a91afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:e2:2e:d4:93:1b:29:63:b1:e8:34:e0:ea:
                    39:c3:03:6d:91:21:b8:18:c3:4f:e2:c8:ee:96:fd:
                    f5:76:41:25:63:0a:fa:99:d9:f9:74:f9:28:5c:09:
                    fd:30:ba:3d:f7:02:53:dc:dc:11:c6:53:ce:34:b7:
                    93:42:5f:80:90:00:76:bf:05:79:d2:2c:60:1d:15:
                    30:79:f7:42:c5:f3:81:9d:9c:c2:92:68:73:e7:c2:
                    15:2d:40:12:c4:af:d0:3c:ac:b1:d9:cd:25:ad:3a:
                    01:9e:e8:91:a4:c9:db:1c:f6:f9:7c:e7:d4:06:5d:
                    49:77:b0:aa:d4:04:11:03:cb:78:60:db:1b:27:d9:
                    c0:0f:80:04:c4:3f:9e:e5:b0:37:f8:5e:02:7e:c8:
                    87:df:35:5b:a8:fd:be:65:65:eb:90:8e:54:71:ad:
                    e1:c1:ee:d1:80:6e:32:8b:64:02:60:fe:5a:1f:0e:
                    64:92:c0:ad:bc:e8:5c:95:99:68:a6:14:21:b0:6b:
                    d0:31:0c:33:d0:cc:e2:9a:f6:d3:59:b0:0b:22:05:
                    fc:35:b8:7b:ad:93:1c:fb:a6:ac:94:d5:5e:f6:3b:
                    de:c6:20:df:58:81:3c:62:6d:70:b2:f2:73:15:32:
                    d3:19:f7:e4:f5:89:52:7c:4e:98:0c:ee:7f:06:d3:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9D:A5:B2:5B:91:65:9A:F2:AD:2A:1F:40:B2:CD:A5:07:A9:1A:FE
            X509v3 Authority Key Identifier:
                keyid:E5:40:AD:4B:DD:83:06:4B:84:E1:4D:49:17:93:D7:95:D5:C9:60:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UCtS92DBkuE4U1JF5PXldXJYJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ead29f-cb08-44b2-a76f-5aaa18345730/1/5UCtS92DBkuE4U1JF5PXldXJYJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ead29f-cb08-44b2-a76f-5aaa18345730/1/5UCtS92DBkuE4U1JF5PXldXJYJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:45:10:c7:da:60:da:19:86:5f:fc:13:d4:80:d1:aa:39:
         66:34:fe:b0:d2:04:b2:c3:ec:fe:ce:a0:c8:a4:29:d6:c8:1d:
         aa:43:af:c2:cb:5c:e0:46:b0:a7:32:e1:8b:f9:64:65:e2:8c:
         40:e7:fc:82:ca:5b:cf:10:d6:17:5f:bc:c4:64:0e:68:69:97:
         43:f0:00:52:5b:9f:71:46:32:5b:17:94:92:09:ca:b2:51:2e:
         1c:67:ea:d5:a6:c6:57:eb:64:5c:c9:98:76:85:70:6f:2f:c9:
         8d:c1:21:e7:f9:c6:9d:d1:18:24:a5:6d:8a:aa:56:66:25:0c:
         91:68:0c:da:49:3a:d7:2e:4a:ff:5d:c3:f6:44:04:96:81:96:
         09:06:db:39:1e:a4:51:e6:af:05:44:4a:a9:a2:92:ce:9d:98:
         b7:f0:de:44:b5:ef:0b:03:6d:0c:f4:ec:c2:77:f1:1b:51:06:
         e9:ca:5e:db:2f:3f:d0:de:ec:bb:cb:9f:95:03:24:6f:3f:cc:
         f6:a8:f9:07:a9:f7:c1:b4:17:b2:63:b6:bc:8c:54:df:a3:4e:
         55:e0:49:d7:99:ce:75:aa:b2:4a:36:b3:92:78:8c:7f:87:a5:
         86:15:04:72:eb:71:7c:0c:29:fd:93:81:fd:7f:5c:46:2c:73:
         db:6a:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----