Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/b2defa-f1d3-43c1-a01e-59a862d58fb2/1/3jinJjhk0s0LXx7whlncezZNC_k.mft
File:                     3jinJjhk0s0LXx7whlncezZNC_k.mft (raw, json)
Hash identifier:          Ong7wQzQwU2/EwlKgyqEBMi6l4h3toEgtaoymteFqAs=
Subject key identifier:   6E:88:7B:AE:42:24:DA:47:E6:C1:1F:DE:89:D9:23:8D:27:9D:30:E7
Authority key identifier: DE:38:A7:26:38:64:D2:CD:0B:5F:1E:F0:86:59:DC:7B:36:4D:0B:F9
Certificate issuer:       /CN=de38a7263864d2cd0b5f1ef08659dc7b364d0bf9
Certificate serial:       018AA90636AD53965221EA5FADCF31ED30B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jinJjhk0s0LXx7whlncezZNC_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/b2defa-f1d3-43c1-a01e-59a862d58fb2/1/3jinJjhk0s0LXx7whlncezZNC_k.mft
Manifest number:          0317
Signing time:             Mon 18 Sep 2023 16:01:11 +0000
Manifest this update:     Mon 18 Sep 2023 16:01:11 +0000
Manifest next update:     Tue 19 Sep 2023 16:01:11 +0000
Files and hashes:         1: 3jinJjhk0s0LXx7whlncezZNC_k.crl (hash: MrahYrZXkMFwnYYpF8oXgb6S+ielJycGIfpZVcoG7r4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a9:06:36:ad:53:96:52:21:ea:5f:ad:cf:31:ed:30:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de38a7263864d2cd0b5f1ef08659dc7b364d0bf9
        Validity
            Not Before: Sep 18 16:01:11 2023 GMT
            Not After : Sep 19 16:01:11 2023 GMT
        Subject: CN=6e887bae4224da47e6c11fde89d9238d279d30e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:40:8e:10:d6:6d:a7:a9:81:b3:0d:7a:f3:
                    a8:63:bf:e0:70:6e:c9:3f:d1:1b:bc:d0:bc:3e:6d:
                    e1:4f:5b:ea:a4:04:6b:90:48:55:45:3c:95:51:3e:
                    80:79:d7:89:e1:1d:95:4a:4b:e5:89:8f:e9:ad:f2:
                    82:3b:2a:78:aa:63:65:41:5a:64:ca:ee:22:3e:6e:
                    e4:3a:41:eb:1f:f7:86:27:e1:66:c8:d0:d1:36:4d:
                    03:92:16:13:2f:14:b7:d4:c3:6b:6a:61:9b:70:2b:
                    8c:e5:cf:79:ef:6f:95:a3:1f:b4:64:3b:54:ca:d3:
                    4a:8f:69:58:f6:81:87:36:33:50:bc:2e:fc:ca:27:
                    6d:d9:d9:42:39:c5:01:10:27:d0:9e:13:7a:52:8a:
                    77:48:59:08:56:22:00:c7:c2:04:17:c0:9f:3b:e3:
                    13:33:1c:34:8c:08:36:11:94:53:c4:c8:0e:fa:3f:
                    5c:c6:df:58:c9:5f:43:1d:90:69:e7:7b:19:06:67:
                    f7:30:56:46:27:22:ff:6d:81:5a:28:c0:da:50:60:
                    bb:52:60:25:27:00:5b:92:44:f2:59:61:01:94:da:
                    ff:bc:14:ea:cb:15:31:fa:e5:29:b3:d1:54:71:79:
                    c9:33:cb:0c:f2:64:62:33:ec:ec:73:8a:e7:30:b5:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:88:7B:AE:42:24:DA:47:E6:C1:1F:DE:89:D9:23:8D:27:9D:30:E7
            X509v3 Authority Key Identifier:
                keyid:DE:38:A7:26:38:64:D2:CD:0B:5F:1E:F0:86:59:DC:7B:36:4D:0B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jinJjhk0s0LXx7whlncezZNC_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/b2defa-f1d3-43c1-a01e-59a862d58fb2/1/3jinJjhk0s0LXx7whlncezZNC_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/b2defa-f1d3-43c1-a01e-59a862d58fb2/1/3jinJjhk0s0LXx7whlncezZNC_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:93:2d:19:f5:45:53:06:40:9b:8e:4a:cf:ca:ac:c8:30:f1:
         51:3b:6b:e8:75:e5:7a:10:67:cc:77:5d:5e:d0:31:b8:ed:e6:
         23:b9:ef:90:c5:3a:6e:c1:38:47:a0:89:29:fa:40:9c:94:20:
         95:82:26:7b:ac:2a:13:d9:53:c4:81:55:98:ef:9a:44:0b:db:
         47:7d:2f:cb:15:7b:eb:03:db:df:b5:09:f3:e9:6f:b2:57:89:
         af:22:08:06:0e:f0:22:06:5b:ea:b5:5f:fe:c5:a1:8f:8b:90:
         3f:9f:c0:57:d3:d4:2c:8d:6f:63:d7:7a:5e:34:d6:2c:c2:7b:
         33:29:c9:41:f0:e0:f1:e7:f0:65:b3:3e:b7:08:72:59:99:b4:
         74:b6:dd:5f:cf:bc:04:41:31:e2:05:1b:e1:cf:3d:16:b2:52:
         ea:c7:fb:7b:12:33:19:4b:6b:a3:5b:b1:6f:25:c1:61:68:05:
         dd:2c:66:0d:58:2a:9d:f4:f1:b7:7b:e4:29:d1:4e:0f:83:31:
         66:4d:de:93:5a:f7:06:19:3f:1d:7d:d9:cb:a0:f8:ef:e3:78:
         a2:b8:a5:86:12:df:fd:11:20:85:9e:04:aa:89:6d:fe:81:35:
         7f:99:ff:ea:91:85:a5:0a:72:b7:89:0c:e2:9a:42:87:ff:b7:
         15:96:64:7c
-----BEGIN CERTIFICATE-----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