Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bc99ac-5444-4554-8acb-8acbad2eb8af/1/_7GXuV4YU5H9OLu4BXL82jgsx6o.mft
File:                     _7GXuV4YU5H9OLu4BXL82jgsx6o.mft (raw, json)
Hash identifier:          kjrVIsruSWe77GqfvLSDeF6Uvt1Y9aHMwwQj6O122BU=
Subject key identifier:   DA:1E:75:D8:19:D3:60:91:D4:47:C9:76:EB:15:82:A5:18:92:B1:B8
Authority key identifier: FF:B1:97:B9:5E:18:53:91:FD:38:BB:B8:05:72:FC:DA:38:2C:C7:AA
Certificate issuer:       /CN=ffb197b95e185391fd38bbb80572fcda382cc7aa
Certificate serial:       01863A908E197D442CAC0D70F2145320D0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7GXuV4YU5H9OLu4BXL82jgsx6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/bc99ac-5444-4554-8acb-8acbad2eb8af/1/_7GXuV4YU5H9OLu4BXL82jgsx6o.mft
Manifest number:          0BFE
Signing time:             Fri 10 Feb 2023 09:03:17 +0000
Manifest this update:     Fri 10 Feb 2023 09:03:17 +0000
Manifest next update:     Sat 11 Feb 2023 09:03:17 +0000
Files and hashes:         1: _7GXuV4YU5H9OLu4BXL82jgsx6o.crl (hash: n+IjoZA1HoJG40WErl+00yTo+keFeard/3Cg6tFRKHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3a:90:8e:19:7d:44:2c:ac:0d:70:f2:14:53:20:d0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb197b95e185391fd38bbb80572fcda382cc7aa
        Validity
            Not Before: Feb 10 09:03:17 2023 GMT
            Not After : Feb 11 09:03:17 2023 GMT
        Subject: CN=da1e75d819d36091d447c976eb1582a51892b1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:33:1c:9f:a3:3e:a2:d0:88:39:9d:45:5f:
                    10:da:7d:b2:95:b0:f5:92:18:5c:64:eb:50:7a:48:
                    6a:05:5f:a9:7e:b5:b1:fd:63:71:d4:55:c9:77:2f:
                    65:e6:f4:83:33:9e:0c:ed:5b:9f:a9:c5:5a:52:d1:
                    77:5c:f9:05:80:33:f3:79:0c:c1:2d:39:a1:9f:8a:
                    31:e8:dc:31:ca:72:2a:88:fc:e0:07:3b:9e:6e:4a:
                    97:5c:a3:ff:9b:90:14:c8:4c:96:47:bd:47:8a:ec:
                    4d:82:a2:43:74:ed:4d:43:f5:ea:84:3d:1b:95:1c:
                    10:4e:48:5e:1a:15:41:74:e2:82:f5:03:f4:3c:5c:
                    b7:2d:3f:ba:5a:36:e6:f9:96:46:a1:16:01:e2:be:
                    4e:f3:1b:a6:33:3b:b3:ff:d5:ae:39:f8:79:68:0b:
                    c4:d9:84:35:6c:99:d9:1a:5b:00:3a:ec:a5:60:3a:
                    14:1c:a3:9b:52:0a:82:08:a4:2a:95:1a:5e:fe:0f:
                    09:21:3a:d9:eb:2b:53:23:25:f8:5c:44:18:c5:b2:
                    31:a6:c9:f5:49:78:b3:63:bf:c7:c3:b4:58:75:94:
                    cd:0f:ad:a3:43:c4:dc:a0:a3:63:a7:34:47:17:59:
                    8e:00:1b:d5:9a:bb:2b:aa:54:59:1b:2f:e7:bc:85:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:75:D8:19:D3:60:91:D4:47:C9:76:EB:15:82:A5:18:92:B1:B8
            X509v3 Authority Key Identifier:
                keyid:FF:B1:97:B9:5E:18:53:91:FD:38:BB:B8:05:72:FC:DA:38:2C:C7:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7GXuV4YU5H9OLu4BXL82jgsx6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bc99ac-5444-4554-8acb-8acbad2eb8af/1/_7GXuV4YU5H9OLu4BXL82jgsx6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bc99ac-5444-4554-8acb-8acbad2eb8af/1/_7GXuV4YU5H9OLu4BXL82jgsx6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:eb:57:a3:11:fa:75:54:60:63:49:c3:2f:de:c2:de:0a:
         31:7e:db:ed:18:90:8d:1e:49:18:91:c6:d5:6d:21:3d:27:3d:
         e9:16:fe:bb:17:c1:84:e7:92:bc:d7:a6:e3:60:00:d6:cc:24:
         58:d0:eb:f1:7a:e3:c4:17:77:8d:a7:04:98:07:e9:34:a9:dc:
         41:8f:19:ee:37:31:75:7d:3a:37:17:e3:25:38:5a:b0:2c:b8:
         e3:e9:ce:d1:63:da:97:4d:51:69:79:41:13:99:1e:98:5e:95:
         f5:bc:8c:58:a8:5f:ab:a1:1b:c5:a5:9d:2b:12:ae:32:4f:c4:
         40:65:08:67:97:98:e9:62:16:cd:81:d5:e9:e4:ed:ed:84:c1:
         7c:ef:dc:e3:0b:45:5d:e9:1d:c6:c3:58:77:2b:b4:e1:4e:d4:
         cc:37:4a:5b:5f:e9:aa:ff:34:f0:c8:07:3d:22:18:14:db:43:
         91:ed:17:c2:92:47:27:4f:b8:5c:63:66:cd:a7:98:8e:a8:60:
         45:f4:e0:2d:fb:01:37:b0:43:81:e5:1b:13:af:b0:9c:f9:17:
         e9:9b:17:3d:5d:3c:41:78:f1:6f:36:e6:a5:e6:0f:dd:d9:d5:
         d0:ca:90:60:2d:6a:6f:8a:40:c7:a5:50:ea:88:ab:bd:a4:63:
         0e:96:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----