Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
File:                     1mHWCkcyZzg-yD8rccCO9DknpPk.mft (raw, json)
Hash identifier:          f4pJ+moQYBYl13S2WUX3/91R+9lbZicGKZ9oRCuEPQM=
Subject key identifier:   E6:66:91:AF:45:A5:28:6B:D6:91:10:D7:53:D7:D7:AA:CF:5B:3C:2B
Authority key identifier: D6:61:D6:0A:47:32:67:38:3E:C8:3F:2B:71:C0:8E:F4:39:27:A4:F9
Certificate issuer:       /CN=d661d60a473267383ec83f2b71c08ef43927a4f9
Certificate serial:       0189302B7667BAB28A00916F80E1F1924FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mHWCkcyZzg-yD8rccCO9DknpPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
Manifest number:          06F6
Signing time:             Fri 07 Jul 2023 11:45:01 +0000
Manifest this update:     Fri 07 Jul 2023 11:45:01 +0000
Manifest next update:     Sat 08 Jul 2023 11:45:01 +0000
Files and hashes:         1: 1mHWCkcyZzg-yD8rccCO9DknpPk.crl (hash: lEwVJYlc3wlJVdNpmfX4Eu1pTn5BaSyInD0M7q6TeLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:30:2b:76:67:ba:b2:8a:00:91:6f:80:e1:f1:92:4f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d661d60a473267383ec83f2b71c08ef43927a4f9
        Validity
            Not Before: Jul  7 11:45:01 2023 GMT
            Not After : Jul  8 11:45:01 2023 GMT
        Subject: CN=e66691af45a5286bd69110d753d7d7aacf5b3c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:ce:81:bf:38:5f:fd:df:12:5e:36:c9:7a:
                    8c:7c:6e:50:46:a4:88:57:81:fe:67:21:53:c0:de:
                    c9:90:70:ac:7b:2e:e1:9a:e5:9c:14:7e:6f:3f:f1:
                    5a:7f:98:19:cd:26:b0:12:a1:4d:b7:46:09:03:1c:
                    db:ec:0a:6f:1f:d5:14:21:4a:0c:a7:a0:67:72:c1:
                    54:9c:26:b2:50:bb:28:e3:b5:e1:65:42:59:b6:e2:
                    c6:ee:5f:45:61:ba:b3:9a:4d:0d:48:52:61:79:af:
                    9f:09:4e:cf:a4:de:f6:5e:6b:84:cb:89:ba:87:b6:
                    b2:06:0a:89:49:8c:1c:7f:3d:53:8f:74:73:2b:49:
                    6f:2d:f4:04:1b:f8:05:9c:e6:9c:ca:a4:d0:b5:0d:
                    42:a3:27:50:ae:2c:6b:a3:4a:6c:2d:b6:f5:2c:0a:
                    88:e9:4e:04:82:d8:29:1f:eb:57:98:9c:ce:c3:bf:
                    1f:df:31:5f:58:1d:1b:58:f1:2f:12:0d:59:c7:f7:
                    a4:b1:e5:73:74:a1:74:d3:b2:96:81:8d:71:28:29:
                    ae:68:ee:b0:7a:92:05:cd:4d:97:58:71:0d:1a:59:
                    a7:3c:66:b4:be:47:ce:65:82:48:be:9c:66:a0:92:
                    3d:6c:3e:46:a5:b0:6e:57:27:67:73:fa:c6:de:4c:
                    97:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:66:91:AF:45:A5:28:6B:D6:91:10:D7:53:D7:D7:AA:CF:5B:3C:2B
            X509v3 Authority Key Identifier:
                keyid:D6:61:D6:0A:47:32:67:38:3E:C8:3F:2B:71:C0:8E:F4:39:27:A4:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mHWCkcyZzg-yD8rccCO9DknpPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:7c:bf:8d:60:64:3b:ad:2b:69:9f:b1:1a:f6:06:2d:e7:
         38:87:94:48:29:ae:d8:06:e6:26:70:19:7d:45:b9:f7:de:48:
         8a:c6:ca:7c:0e:e0:8d:3b:81:b0:2d:6a:76:e1:2f:9d:fb:1e:
         62:17:d6:89:56:13:9e:18:77:21:47:59:ed:6a:7b:41:22:1f:
         95:f8:91:ae:6e:4d:7b:da:bf:d3:ba:87:3d:52:a5:5e:11:fd:
         0f:0b:73:2a:e4:6a:62:b1:73:58:c1:af:35:e9:24:ee:b1:7f:
         79:0d:97:49:22:8d:80:73:e8:46:8a:c3:04:7c:ba:56:d1:4d:
         71:ab:59:d8:3d:5e:13:14:2e:10:1e:2a:54:02:8c:ab:e7:3c:
         b4:c5:bf:96:af:e1:e5:47:f7:39:28:bc:88:b3:dc:5a:43:3d:
         b1:32:28:cc:20:0d:15:2f:41:ff:a9:0b:ca:e4:22:0e:83:f4:
         d9:09:76:a7:45:87:0e:a2:47:ef:3a:42:21:ea:6d:f0:9e:98:
         92:53:69:7c:7e:4e:e2:40:a8:bd:1f:86:32:7c:cd:40:c8:28:
         9f:51:36:ff:40:93:2e:26:85:86:ae:27:a5:5d:46:7b:f7:5b:
         f5:a3:7a:01:ae:af:23:68:50:55:18:00:1f:3d:d0:cd:3d:06:
         37:eb:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----