Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/84e943-0277-45c4-aeb2-26b67f02cad7/1/cdbuhZUC-KEHiblHgAcEIbzNpqM.mft
File:                     cdbuhZUC-KEHiblHgAcEIbzNpqM.mft (raw, json)
Hash identifier:          qL5BUDH2J16iiYcPO/QPWY8icvQ8OUAyGAXvqWNtrLE=
Subject key identifier:   FE:9D:2B:2D:80:5A:00:E7:94:55:7C:3D:9B:8F:DA:AE:2B:4A:52:D7
Authority key identifier: 71:D6:EE:85:95:02:F8:A1:07:89:B9:47:80:07:04:21:BC:CD:A6:A3
Certificate issuer:       /CN=71d6ee859502f8a10789b94780070421bccda6a3
Certificate serial:       018A878CB9AE5492B03E73ED6FF148B934D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdbuhZUC-KEHiblHgAcEIbzNpqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/84e943-0277-45c4-aeb2-26b67f02cad7/1/cdbuhZUC-KEHiblHgAcEIbzNpqM.mft
Manifest number:          054B
Signing time:             Tue 12 Sep 2023 04:01:01 +0000
Manifest this update:     Tue 12 Sep 2023 04:01:01 +0000
Manifest next update:     Wed 13 Sep 2023 04:01:01 +0000
Files and hashes:         1: cdbuhZUC-KEHiblHgAcEIbzNpqM.crl (hash: jroglfL3HfIhDgDGzfMl7o9Y0K6FS6wF6xSC+zQ1A7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:87:8c:b9:ae:54:92:b0:3e:73:ed:6f:f1:48:b9:34:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d6ee859502f8a10789b94780070421bccda6a3
        Validity
            Not Before: Sep 12 04:01:01 2023 GMT
            Not After : Sep 13 04:01:01 2023 GMT
        Subject: CN=fe9d2b2d805a00e794557c3d9b8fdaae2b4a52d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:21:77:b4:a8:99:b0:67:ea:5b:d5:6e:15:
                    d4:1c:c2:f4:86:9e:46:b5:d3:92:8a:4c:41:c5:e6:
                    a5:5f:82:16:62:c9:c5:4b:40:ca:91:b9:65:3d:cf:
                    bc:64:8e:54:d0:23:7f:1b:74:76:1c:c0:26:8f:77:
                    28:6b:43:81:cb:5e:08:6c:e5:01:d9:fe:4d:11:96:
                    42:7d:95:ca:a5:17:b0:55:24:58:2f:f6:18:d6:30:
                    47:6e:de:0b:3a:fd:9b:57:bb:3f:02:1b:f5:66:c4:
                    ad:6d:fa:02:d4:5b:a0:f4:a7:3b:f9:65:f6:00:73:
                    32:28:1f:a1:e2:c8:e9:87:16:ed:a4:b9:73:e7:87:
                    e7:04:91:31:19:63:46:c5:92:07:25:d0:a6:f0:60:
                    6c:89:9b:b7:41:71:8b:71:d6:74:b3:14:a8:66:c4:
                    49:4c:55:32:a1:ab:4f:79:df:94:37:f1:fa:47:4b:
                    ff:52:cc:9a:a1:3d:b5:68:d5:04:a7:c8:8f:9f:3e:
                    95:c1:73:d8:fe:e4:a8:04:14:ca:bd:4b:8e:54:bb:
                    cb:e6:3c:50:f3:97:3c:53:4d:5a:d0:56:56:f0:4c:
                    0b:67:0b:88:a3:4d:de:11:36:3d:78:ce:63:ae:63:
                    fe:b9:5b:7d:d8:e5:d0:00:96:02:d7:5e:36:a7:37:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9D:2B:2D:80:5A:00:E7:94:55:7C:3D:9B:8F:DA:AE:2B:4A:52:D7
            X509v3 Authority Key Identifier:
                keyid:71:D6:EE:85:95:02:F8:A1:07:89:B9:47:80:07:04:21:BC:CD:A6:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdbuhZUC-KEHiblHgAcEIbzNpqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/84e943-0277-45c4-aeb2-26b67f02cad7/1/cdbuhZUC-KEHiblHgAcEIbzNpqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/84e943-0277-45c4-aeb2-26b67f02cad7/1/cdbuhZUC-KEHiblHgAcEIbzNpqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:ac:b1:12:4b:c3:8e:7e:d3:31:71:22:82:34:2c:68:e2:
         af:4e:e0:1e:ea:3c:55:41:dd:2a:60:6f:33:88:f0:35:21:e5:
         89:ef:d8:8f:32:82:de:50:44:eb:43:2c:df:f1:f2:83:f8:a9:
         f9:f8:6a:31:4c:19:82:fe:2e:56:ba:22:bc:1d:52:0d:80:ff:
         aa:4d:f6:20:58:7b:d0:01:5c:22:4a:cd:21:87:d2:d2:af:2c:
         39:ab:52:86:e3:9e:2b:2b:48:80:a2:e2:1d:38:98:aa:57:ad:
         1b:e3:c5:45:a7:7c:ae:92:a5:bc:10:17:5e:19:0f:88:86:19:
         20:f2:0c:26:8f:73:97:e4:85:6a:a7:79:1f:70:41:9b:68:50:
         e5:9b:28:10:c5:45:4c:ba:f3:90:07:a4:e0:99:54:10:6d:15:
         ad:86:f8:a1:51:90:73:9c:5b:ac:e0:99:7a:e8:48:4d:e3:95:
         f9:f2:13:d3:eb:1c:4a:c9:47:da:4d:68:22:1c:26:64:ab:1e:
         6b:fc:e6:03:09:6f:de:ad:56:01:bd:a0:98:0e:08:8f:0e:4c:
         1d:ab:83:d6:cb:70:2e:ca:12:b4:8d:4e:b5:f5:03:03:0c:05:
         4b:2c:01:32:bd:ad:d7:51:cf:df:70:b1:04:94:1a:fe:8b:01:
         9c:0d:5b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----