Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f18e4a-0cc2-4bef-a894-e2448923cd5d/1/Slym4X74n-OkTEJ281auWuyZXag.mft
File:                     Slym4X74n-OkTEJ281auWuyZXag.mft (raw, json)
Hash identifier:          r6ENKuRVZ5fE09z3LwILSuo8UmojldaquDfXVBChXwk=
Subject key identifier:   F7:B7:9F:6E:C4:87:DC:91:C8:3C:FD:BF:9D:4F:11:66:54:28:82:E0
Authority key identifier: 4A:5C:A6:E1:7E:F8:9F:E3:A4:4C:42:76:F3:56:AE:5A:EC:99:5D:A8
Certificate issuer:       /CN=4a5ca6e17ef89fe3a44c4276f356ae5aec995da8
Certificate serial:       018A065D8C2AFE25EEF4ACEBD6566C5183DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Slym4X74n-OkTEJ281auWuyZXag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/f18e4a-0cc2-4bef-a894-e2448923cd5d/1/Slym4X74n-OkTEJ281auWuyZXag.mft
Manifest number:          025E
Signing time:             Fri 18 Aug 2023 01:58:28 +0000
Manifest this update:     Fri 18 Aug 2023 01:58:28 +0000
Manifest next update:     Sat 19 Aug 2023 01:58:28 +0000
Files and hashes:         1: Slym4X74n-OkTEJ281auWuyZXag.crl (hash: T4OUrpW7uEAKZRGTx6wMTuLmTbQ2ZMVqjLeJAr0vUeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:06:5d:8c:2a:fe:25:ee:f4:ac:eb:d6:56:6c:51:83:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a5ca6e17ef89fe3a44c4276f356ae5aec995da8
        Validity
            Not Before: Aug 18 01:58:28 2023 GMT
            Not After : Aug 19 01:58:28 2023 GMT
        Subject: CN=f7b79f6ec487dc91c83cfdbf9d4f1166542882e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:08:12:47:13:08:4a:d2:f8:be:e3:a1:d1:09:
                    37:7b:e6:f6:8d:55:7f:8f:b1:b4:59:c4:d8:03:a2:
                    9a:32:cf:ed:ce:fc:e1:59:88:42:27:3c:e8:62:90:
                    2f:1d:e3:61:8c:4f:6b:ce:6e:03:a6:31:3d:03:9c:
                    cb:b8:ad:39:1c:f7:5b:16:54:cf:f1:11:5a:da:09:
                    6a:1d:e7:79:20:78:53:ee:2d:df:57:ee:db:60:40:
                    c5:8b:ab:d9:5b:2f:d7:27:67:67:30:97:20:7e:6b:
                    08:77:3b:d1:1b:e7:52:bb:eb:65:08:6d:62:0d:75:
                    90:86:d9:68:26:af:af:3b:b2:9d:0a:1c:e3:05:89:
                    00:7a:05:6f:f0:54:4b:7c:a2:cf:81:0d:6f:2a:db:
                    a3:18:40:ee:c6:15:79:91:0f:de:d5:f7:91:26:74:
                    49:d2:0b:ca:4e:66:ab:2f:05:a7:44:c6:a0:b5:2c:
                    86:ab:08:e5:86:a6:8b:03:e4:3c:33:63:58:10:90:
                    57:ee:d3:b2:8c:8d:48:f3:f8:35:12:bb:bc:12:eb:
                    41:a9:6c:f0:45:c2:94:7d:66:c7:63:b0:cf:6d:32:
                    72:bc:97:4e:00:1e:f0:d0:af:fd:45:85:f2:a5:60:
                    56:05:30:84:50:ef:4b:63:10:61:1c:3d:db:48:79:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B7:9F:6E:C4:87:DC:91:C8:3C:FD:BF:9D:4F:11:66:54:28:82:E0
            X509v3 Authority Key Identifier:
                keyid:4A:5C:A6:E1:7E:F8:9F:E3:A4:4C:42:76:F3:56:AE:5A:EC:99:5D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Slym4X74n-OkTEJ281auWuyZXag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f18e4a-0cc2-4bef-a894-e2448923cd5d/1/Slym4X74n-OkTEJ281auWuyZXag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f18e4a-0cc2-4bef-a894-e2448923cd5d/1/Slym4X74n-OkTEJ281auWuyZXag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4f:44:8b:47:0e:d7:45:c0:ba:10:dd:ec:0f:13:7a:63:37:
         fa:52:62:4c:e9:7e:ff:2c:bf:7f:82:41:8a:02:c0:c7:be:6a:
         22:84:a6:0f:be:4e:d6:cf:25:5d:c8:11:dd:51:e8:3d:11:75:
         6b:cc:a9:fa:c9:b5:34:5d:46:d8:b7:0e:5b:52:16:3f:b8:7f:
         02:e8:1f:62:fb:f8:61:02:fa:ea:9b:05:01:8d:a5:6f:7e:95:
         03:63:e8:55:8a:95:2f:fd:19:49:fb:22:7c:e6:cf:aa:78:9a:
         e2:07:4a:f5:73:5f:b3:9e:ea:b3:f8:56:10:59:02:bb:cc:20:
         e0:1e:34:e8:11:4d:05:df:df:9c:18:f4:d8:67:34:e6:3e:30:
         9e:dd:9f:d2:c0:76:78:de:b8:27:86:b3:db:2d:62:0a:13:bf:
         b6:cf:aa:e3:b1:8c:94:1d:69:bd:86:da:cd:23:59:5d:97:fd:
         75:25:05:ac:94:3a:27:fb:25:5d:70:31:99:90:8d:c8:12:16:
         92:5d:e0:e1:1a:17:cb:cb:91:cd:63:e3:b4:14:7b:00:0e:28:
         07:c0:12:ee:87:9e:d4:db:51:69:a1:50:12:48:07:f3:ed:ac:
         c7:a1:35:de:5c:47:65:58:6a:ed:8d:dd:19:46:91:e4:a6:62:
         52:58:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----