Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/463606-e52b-4e89-8591-a48a640179e3/1/00PC7U5K5iY-HzdaZ9X2O30hDPU.mft
File:                     00PC7U5K5iY-HzdaZ9X2O30hDPU.mft (raw, json)
Hash identifier:          zE66p3c4wMEAaRN0I5f34Vr8CPpVtswlEAfb+H27i7Q=
Subject key identifier:   E2:84:64:9A:6B:43:C8:7F:CE:11:D9:4A:66:F1:C1:42:30:46:15:C3
Authority key identifier: D3:43:C2:ED:4E:4A:E6:26:3E:1F:37:5A:67:D5:F6:3B:7D:21:0C:F5
Certificate issuer:       /CN=d343c2ed4e4ae6263e1f375a67d5f63b7d210cf5
Certificate serial:       018B493F6C1F8665C1094D46804934CA6114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00PC7U5K5iY-HzdaZ9X2O30hDPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/463606-e52b-4e89-8591-a48a640179e3/1/00PC7U5K5iY-HzdaZ9X2O30hDPU.mft
Manifest number:          01
Signing time:             Thu 19 Oct 2023 18:42:55 +0000
Manifest this update:     Thu 19 Oct 2023 18:42:55 +0000
Manifest next update:     Fri 20 Oct 2023 18:42:55 +0000
Files and hashes:         1: 00PC7U5K5iY-HzdaZ9X2O30hDPU.crl (hash: NyCUFMddSL4y/fzfdx69S7edIiSEQJWlb6a6LGJpbgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:49:3f:6c:1f:86:65:c1:09:4d:46:80:49:34:ca:61:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d343c2ed4e4ae6263e1f375a67d5f63b7d210cf5
        Validity
            Not Before: Oct 19 18:42:55 2023 GMT
            Not After : Oct 20 18:42:55 2023 GMT
        Subject: CN=e284649a6b43c87fce11d94a66f1c142304615c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:2c:29:81:2b:78:d6:b0:f2:72:6e:a4:ba:
                    e2:96:a8:f2:fd:a4:28:a9:51:da:15:49:42:a8:ea:
                    2f:e3:7a:df:7b:9f:da:9f:b0:67:57:a3:14:4f:b5:
                    85:67:d9:8e:06:72:e8:32:08:80:24:91:c0:98:f5:
                    b7:3e:c7:0e:06:95:5a:94:bb:2e:05:f3:65:74:8c:
                    ea:31:b4:76:ed:2e:c3:61:eb:fa:fe:28:d4:c3:af:
                    05:7e:80:b8:d5:8c:d7:c5:50:95:69:7f:29:6f:0f:
                    13:fb:c7:82:82:97:0b:d0:cc:d5:c8:f6:d5:73:be:
                    20:1d:a2:18:2b:c5:25:bd:07:d0:f2:5e:6c:21:ba:
                    ce:48:40:2d:64:40:63:4f:3c:33:84:da:56:ff:6b:
                    d7:7d:7c:c2:ed:ec:e8:92:15:e9:dd:ec:2d:f1:9a:
                    25:39:17:10:a6:99:03:af:46:92:0c:b0:b7:7f:5b:
                    56:e1:30:e0:1b:5b:8f:55:e2:06:85:dc:1b:f9:18:
                    1f:65:2b:31:2f:7a:bf:cd:76:a1:02:ef:0d:f3:26:
                    0b:28:05:d8:47:83:05:13:f8:c0:7e:04:1e:de:18:
                    80:f6:70:34:b6:d8:e9:d4:13:3c:e8:d7:d3:31:15:
                    cd:37:26:e1:ac:76:9d:36:08:b9:5f:7a:42:cf:2a:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:84:64:9A:6B:43:C8:7F:CE:11:D9:4A:66:F1:C1:42:30:46:15:C3
            X509v3 Authority Key Identifier:
                keyid:D3:43:C2:ED:4E:4A:E6:26:3E:1F:37:5A:67:D5:F6:3B:7D:21:0C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00PC7U5K5iY-HzdaZ9X2O30hDPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/463606-e52b-4e89-8591-a48a640179e3/1/00PC7U5K5iY-HzdaZ9X2O30hDPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/463606-e52b-4e89-8591-a48a640179e3/1/00PC7U5K5iY-HzdaZ9X2O30hDPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:49:af:75:79:5f:52:d5:a4:68:10:40:3c:0f:44:9d:0a:e4:
         b8:b6:0e:79:af:56:78:23:32:a1:f5:dc:b8:9b:07:70:e8:e3:
         fe:5a:e0:c1:f8:dd:f4:b9:67:2e:9c:41:8f:ce:d3:22:07:d0:
         fb:a3:2c:f8:60:38:d0:aa:e4:bb:12:46:bd:52:e6:0a:70:cf:
         59:81:a4:d8:d3:e0:8d:c3:37:00:69:db:5e:2c:14:19:38:b2:
         d1:95:e9:9b:35:5e:52:bc:21:34:5a:13:31:3c:c5:62:81:ca:
         ae:56:57:02:76:8c:05:c1:ee:8b:d7:65:31:e9:17:2f:2b:a1:
         00:9f:38:b2:33:ea:9c:eb:28:51:44:62:df:56:62:a9:aa:e9:
         e3:1c:18:86:8e:fc:6d:a8:09:82:fc:4b:9c:81:4a:4d:b2:8e:
         99:6f:1f:04:9f:0f:fe:f6:34:71:23:85:13:36:91:32:da:25:
         c3:84:99:0c:12:e9:bf:b4:e2:ad:b2:63:e6:83:bf:32:b3:88:
         e5:70:fa:c9:6f:42:af:db:51:f5:4b:b3:02:a5:b5:b3:d5:c8:
         e4:c5:89:1e:4c:9b:a8:54:59:42:9c:c7:e7:11:eb:31:51:3e:
         cf:49:70:48:71:fc:3e:1c:cf:5c:42:20:bd:c1:88:e7:6c:e8:
         5f:3f:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----