Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bbbafb-a396-4b91-b4be-3a9bc40edd4c/1/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.mft
File:                     EhpWo-e1t6z-6Iuhhg-rnwIJDH0.mft (raw, json)
Hash identifier:          8uxdvzZ0SLMcmaPg+GZfF81I6Gq/2CkmcpHYki+OlzU=
Subject key identifier:   A1:86:48:FE:18:0D:48:12:59:57:18:35:9A:62:7E:3F:3F:59:1B:91
Authority key identifier: 12:1A:56:A3:E7:B5:B7:AC:FE:E8:8B:A1:86:0F:AB:9F:02:09:0C:7D
Certificate issuer:       /CN=121a56a3e7b5b7acfee88ba1860fab9f02090c7d
Certificate serial:       018B40F16AF3E935BF35A6221B5FF9DE5A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bbbafb-a396-4b91-b4be-3a9bc40edd4c/1/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.mft
Manifest number:          0879
Signing time:             Wed 18 Oct 2023 04:00:45 +0000
Manifest this update:     Wed 18 Oct 2023 04:00:45 +0000
Manifest next update:     Thu 19 Oct 2023 04:00:45 +0000
Files and hashes:         1: EhpWo-e1t6z-6Iuhhg-rnwIJDH0.crl (hash: +aG72lK2wNTglFMNbYgwIGAcUTZqotWJTV+bDJajWeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:40:f1:6a:f3:e9:35:bf:35:a6:22:1b:5f:f9:de:5a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a56a3e7b5b7acfee88ba1860fab9f02090c7d
        Validity
            Not Before: Oct 18 04:00:45 2023 GMT
            Not After : Oct 19 04:00:45 2023 GMT
        Subject: CN=a18648fe180d4812595718359a627e3f3f591b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:72:46:c0:b8:02:40:06:74:01:1c:08:e4:
                    0d:4e:2f:7a:eb:88:12:86:d3:d4:4d:3c:ae:fc:ac:
                    36:cf:48:5a:91:21:22:1b:95:e8:1f:03:02:43:a8:
                    6f:0e:a4:38:83:f1:d3:bb:e4:1f:9b:28:5a:0e:df:
                    3a:2c:11:ac:e2:83:7d:6b:3a:e5:da:33:8d:4c:67:
                    d7:4c:4e:9f:01:82:39:b6:10:58:da:01:ff:3d:07:
                    5d:4c:e2:eb:fe:07:58:a2:ea:6d:9e:01:2d:54:9c:
                    97:e2:d2:89:b5:08:74:7f:46:c0:29:f8:4d:eb:9b:
                    2a:be:02:de:a1:78:90:63:29:94:b8:43:69:35:51:
                    68:cf:40:af:67:86:3f:71:d0:38:d8:86:12:dd:b3:
                    2f:81:35:a5:e1:9f:c8:1b:b7:42:5b:d8:91:2d:47:
                    07:5f:f4:6c:df:c1:31:42:2b:73:b5:1c:25:b3:5a:
                    25:a7:8c:88:a7:98:7e:78:c4:fd:fe:0a:68:2a:10:
                    3e:fe:1b:56:6f:c5:5a:24:39:1a:e7:2a:fa:34:2d:
                    d0:dd:24:72:af:6c:80:8f:84:7f:ca:ba:e8:69:9f:
                    50:29:30:d9:da:d1:ca:be:43:3a:e0:e7:eb:a1:e6:
                    89:5a:9c:8f:d5:c4:8c:0c:b4:81:2c:f6:8a:21:7c:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:86:48:FE:18:0D:48:12:59:57:18:35:9A:62:7E:3F:3F:59:1B:91
            X509v3 Authority Key Identifier:
                keyid:12:1A:56:A3:E7:B5:B7:AC:FE:E8:8B:A1:86:0F:AB:9F:02:09:0C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbbafb-a396-4b91-b4be-3a9bc40edd4c/1/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbbafb-a396-4b91-b4be-3a9bc40edd4c/1/EhpWo-e1t6z-6Iuhhg-rnwIJDH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:65:9a:5a:b1:86:58:7e:58:8e:f6:b0:0c:ab:fe:8f:2b:fa:
         1e:3a:51:ca:dc:02:bd:05:47:46:8d:6e:ee:29:77:8d:82:78:
         a2:42:17:e2:51:1b:7f:42:95:e5:91:fe:30:a2:51:6b:69:40:
         54:9b:80:4f:f7:88:90:35:92:e3:da:fc:f4:e3:f8:7f:26:49:
         f3:58:06:b7:fd:19:74:88:8c:a1:f0:c1:f4:9d:c0:48:fd:42:
         57:04:1a:07:d0:e8:72:b6:05:5a:45:44:e6:14:15:27:2d:a5:
         25:cc:8d:f4:ec:aa:05:6c:1c:f9:05:48:9c:34:e0:61:98:30:
         73:16:f8:63:5f:e1:87:28:94:10:26:d0:3c:35:e2:1a:74:ff:
         ec:0a:51:c4:90:0d:04:69:c4:a4:ed:21:4b:76:01:d3:ac:5a:
         11:b5:26:60:07:c2:c5:e6:ea:c6:9b:2c:84:f3:fd:3c:bc:ba:
         90:bf:96:82:32:d4:89:16:e5:61:0d:20:94:2e:4b:47:5b:fc:
         1a:b1:ae:b2:1b:78:14:6f:dc:66:1e:c9:3c:83:bc:67:c1:55:
         6b:76:2c:2b:7d:61:0a:24:cc:b1:9d:e9:ed:10:81:64:0d:00:
         09:05:a3:24:a2:8d:04:1c:93:2b:db:28:ce:21:b9:c4:b7:14:
         90:d7:6e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----