Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/1-ifG0KBsLBwskZX9mprbzk-GW4c.mft
File:                     1-ifG0KBsLBwskZX9mprbzk-GW4c.mft (raw, json)
Hash identifier:          ImgRlMwMi8A5WrTCdUHbnyxcLZjBM4Zu7bw2NIrHcmU=
Subject key identifier:   DD:F0:20:2A:1F:B9:95:47:93:AA:E4:21:84:08:E0:15:5C:D8:96:73
Authority key identifier: FA:27:C6:D0:A0:6C:2C:1C:2C:91:95:FD:9A:9A:DB:CE:4F:86:5B:87
Certificate issuer:       /CN=fa27c6d0a06c2c1c2c9195fd9a9adbce4f865b87
Certificate serial:       018C5E542998FDB030363BC02FFB2DFA2878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ifG0KBsLBwskZX9mprbzk-GW4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/1-ifG0KBsLBwskZX9mprbzk-GW4c.mft
Manifest number:          0DCB
Signing time:             Tue 12 Dec 2023 14:00:22 +0000
Manifest this update:     Tue 12 Dec 2023 14:00:22 +0000
Manifest next update:     Wed 13 Dec 2023 14:00:22 +0000
Files and hashes:         1: 1-ifG0KBsLBwskZX9mprbzk-GW4c.crl (hash: 0daqb3fEbL7JNtZyjfSnPeY0tstv0VS49kjrE8cnmKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5e:54:29:98:fd:b0:30:36:3b:c0:2f:fb:2d:fa:28:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa27c6d0a06c2c1c2c9195fd9a9adbce4f865b87
        Validity
            Not Before: Dec 12 14:00:22 2023 GMT
            Not After : Dec 13 14:00:22 2023 GMT
        Subject: CN=ddf0202a1fb9954793aae4218408e0155cd89673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:19:87:1f:a4:12:45:2d:3f:ed:32:b7:05:
                    c9:9b:a9:48:c8:99:77:e8:48:e0:57:6e:75:a4:e2:
                    d3:2c:a1:be:57:16:31:d3:9f:98:c6:e0:cc:f4:eb:
                    c3:f6:5f:36:4a:25:c9:a6:ba:1c:f1:8b:e1:c5:c9:
                    e1:cf:ce:8f:0c:75:f0:a0:47:d9:59:75:16:92:de:
                    83:56:63:4b:d3:fe:61:52:63:e8:f4:24:10:50:98:
                    07:79:7d:38:d4:19:2c:45:66:9b:f9:2e:09:16:ea:
                    3e:a6:34:97:9d:41:75:ea:d4:60:19:81:1a:bc:a2:
                    19:65:95:e6:d8:f8:31:1c:74:c6:44:55:1d:17:fc:
                    bc:f2:7a:e0:c7:ff:ed:78:d8:50:04:1d:d2:b2:0d:
                    11:b2:61:d1:1d:88:5f:85:43:6e:39:94:e8:62:78:
                    2a:48:5e:6d:07:fa:ef:2e:ee:0f:ad:23:f8:e4:ed:
                    0e:9d:af:0e:a0:b9:b4:b4:48:d2:7e:52:97:21:86:
                    1c:ce:88:d2:6f:63:f7:26:53:30:aa:b7:d0:2c:d1:
                    c2:16:11:c2:0d:97:06:8b:54:31:9d:68:de:61:61:
                    52:29:16:bc:82:f6:a9:1a:85:60:09:de:42:15:e0:
                    23:c9:4c:ee:07:1d:6a:90:62:c0:6b:c7:91:3d:e5:
                    7a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F0:20:2A:1F:B9:95:47:93:AA:E4:21:84:08:E0:15:5C:D8:96:73
            X509v3 Authority Key Identifier:
                keyid:FA:27:C6:D0:A0:6C:2C:1C:2C:91:95:FD:9A:9A:DB:CE:4F:86:5B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ifG0KBsLBwskZX9mprbzk-GW4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/1-ifG0KBsLBwskZX9mprbzk-GW4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/1-ifG0KBsLBwskZX9mprbzk-GW4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:87:7f:78:e5:74:4f:01:42:ee:dc:e9:09:c1:29:23:4c:ad:
         5f:12:14:4d:6a:13:36:30:1e:c3:b7:4c:1f:ec:82:7f:3e:f8:
         3a:e1:a6:9f:50:e5:f3:cc:df:f4:ca:59:ad:bd:6e:3e:e3:3a:
         b2:bb:f5:66:7e:35:b9:35:3b:83:d3:53:ae:20:d5:77:79:36:
         a6:ec:26:93:b2:da:a5:f2:36:d4:8a:cd:26:a1:54:20:81:50:
         03:e7:05:a2:ee:4e:03:a7:72:00:75:c0:0a:6d:24:9a:6c:2a:
         4e:ed:95:20:ed:d7:39:8f:7b:59:00:04:17:42:34:17:22:8e:
         d2:1c:d2:2b:2b:27:ca:2c:dc:a5:4e:f5:2d:0b:f5:06:54:72:
         a3:84:ea:c7:b3:14:d7:23:db:ce:db:5d:8c:ad:cb:6f:97:e7:
         c9:44:ff:35:30:10:f3:fb:cf:40:c1:d7:62:bb:3e:60:af:e6:
         d0:d0:9b:3c:95:0d:83:8d:3f:d4:a0:e2:77:ef:f1:64:9d:c6:
         3a:0b:35:a8:12:dc:c6:33:15:71:59:78:dd:50:92:cc:37:57:
         b8:15:da:a9:5f:84:7d:58:c9:f6:77:a2:07:80:ad:81:03:c3:
         a8:89:5a:c8:58:33:08:69:d2:b3:2b:be:4b:71:4b:7e:72:30:
         8e:9d:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----