Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a82ed1-bc4b-4f94-bcf3-320475882439/1/ckYN1MPzP4OpvRdGpVzRmqZdtDU.mft
File:                     ckYN1MPzP4OpvRdGpVzRmqZdtDU.mft (raw, json)
Hash identifier:          p3ZK/svfFUICU4suonn6su4ZBd1N+UQQFV1deLfTeQo=
Subject key identifier:   DD:A5:FA:41:48:E6:2F:2B:E2:0F:49:74:23:A4:37:E1:48:E6:7F:9B
Authority key identifier: 72:46:0D:D4:C3:F3:3F:83:A9:BD:17:46:A5:5C:D1:9A:A6:5D:B4:35
Certificate issuer:       /CN=72460dd4c3f33f83a9bd1746a55cd19aa65db435
Certificate serial:       0187B4EDFF8767C57DD2830EC8D5A315D33C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckYN1MPzP4OpvRdGpVzRmqZdtDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a82ed1-bc4b-4f94-bcf3-320475882439/1/ckYN1MPzP4OpvRdGpVzRmqZdtDU.mft
Manifest number:          020D
Signing time:             Mon 24 Apr 2023 20:21:48 +0000
Manifest this update:     Mon 24 Apr 2023 20:21:48 +0000
Manifest next update:     Tue 25 Apr 2023 20:21:48 +0000
Files and hashes:         1: ckYN1MPzP4OpvRdGpVzRmqZdtDU.crl (hash: JvPWeN3Rmw2l09h2rz8Xr/PraGGpjDi1DefSb6PwSkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b4:ed:ff:87:67:c5:7d:d2:83:0e:c8:d5:a3:15:d3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72460dd4c3f33f83a9bd1746a55cd19aa65db435
        Validity
            Not Before: Apr 24 20:21:48 2023 GMT
            Not After : Apr 25 20:21:48 2023 GMT
        Subject: CN=dda5fa4148e62f2be20f497423a437e148e67f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:cd:c9:2b:54:78:5a:c2:38:98:4a:0a:26:
                    45:10:38:46:77:56:b1:a5:81:26:d2:54:9b:d4:9a:
                    0e:db:4f:ac:89:f1:8b:1a:d4:d3:01:b7:a5:9d:16:
                    ef:32:9b:bf:15:0b:da:0f:83:02:ce:6a:ee:86:5c:
                    9c:be:f0:b7:5e:13:db:b9:b2:3c:dc:b8:83:91:6b:
                    e7:7c:68:31:51:73:bc:0e:c2:a1:8f:93:b0:96:c3:
                    01:47:05:81:df:79:c7:9d:ed:be:fb:55:e1:13:98:
                    27:de:5c:95:e8:21:50:d6:5c:8d:30:ea:18:70:ba:
                    10:53:d4:4a:76:05:50:d3:96:bb:81:7c:95:a2:71:
                    35:3e:b7:df:42:89:50:65:68:34:1a:2a:f6:62:3c:
                    5b:6f:39:c3:68:62:6e:63:43:38:9f:48:33:1a:a3:
                    ed:64:0c:eb:08:f4:1d:86:f7:ea:24:68:67:13:71:
                    7c:df:48:4c:8a:7f:64:85:af:96:26:58:7c:97:6f:
                    c5:2c:7b:03:93:58:fc:cd:bc:13:57:9f:1f:7b:33:
                    18:63:99:a7:e2:b7:72:3b:bd:06:82:31:a9:4a:36:
                    aa:fa:b7:ee:9f:0f:00:f2:d5:35:d1:60:11:e1:6b:
                    01:04:22:12:45:05:bb:a5:b5:f5:44:72:47:0c:9e:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A5:FA:41:48:E6:2F:2B:E2:0F:49:74:23:A4:37:E1:48:E6:7F:9B
            X509v3 Authority Key Identifier:
                keyid:72:46:0D:D4:C3:F3:3F:83:A9:BD:17:46:A5:5C:D1:9A:A6:5D:B4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckYN1MPzP4OpvRdGpVzRmqZdtDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a82ed1-bc4b-4f94-bcf3-320475882439/1/ckYN1MPzP4OpvRdGpVzRmqZdtDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a82ed1-bc4b-4f94-bcf3-320475882439/1/ckYN1MPzP4OpvRdGpVzRmqZdtDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f1:5b:a3:ab:aa:19:66:8a:19:b3:2d:ad:08:a2:c6:9c:c5:
         3d:6e:17:1d:a4:9b:1e:eb:31:80:43:3c:d2:05:ee:b7:ff:27:
         ee:87:c5:25:b5:3e:b6:1d:07:75:35:11:50:72:55:c7:b4:e1:
         98:20:69:15:df:38:83:2e:79:8f:04:05:84:4f:ac:b1:2b:3e:
         9f:74:61:b4:e5:54:65:fd:3a:01:b7:6f:af:53:a5:c0:66:7c:
         3f:90:16:91:cb:41:85:bf:8e:ee:ad:4e:c4:b7:df:db:15:3b:
         23:64:ff:47:dc:96:9e:77:9a:8d:35:cb:c5:eb:2b:20:ed:70:
         1e:0c:ab:e4:7d:82:40:05:23:5c:f5:f4:a1:b0:93:07:5f:f0:
         d5:e6:dd:cb:87:9b:7c:7e:ae:b0:f1:95:04:74:84:57:4e:13:
         78:ab:b2:4c:a0:95:14:22:92:5b:e2:ea:76:20:60:04:3e:2f:
         ff:ea:a9:83:bf:2c:98:16:ad:d5:23:b0:31:e4:be:5e:e7:1a:
         b1:c5:21:2d:fc:94:30:ff:74:d3:33:72:9e:bd:bc:49:1d:02:
         f7:fa:6e:1a:b5:e0:3b:a1:0f:27:4b:bc:b6:f1:ca:8c:54:75:
         eb:e4:73:bb:59:29:1a:66:20:79:c6:6a:e8:76:98:cc:da:4f:
         7e:98:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----