Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/InGn1hiw5P8tQLqqWspmsWDUMQM.mft
File:                     InGn1hiw5P8tQLqqWspmsWDUMQM.mft (raw, json)
Hash identifier:          s2Sfrcaddei1oueYX0ejr0idwXVatbcoK8bulOW1TL8=
Subject key identifier:   4E:A2:4F:F4:6B:F3:50:FF:44:9A:A4:75:4B:1C:4C:0A:DF:95:9C:0B
Authority key identifier: 22:71:A7:D6:18:B0:E4:FF:2D:40:BA:AA:5A:CA:66:B1:60:D4:31:03
Certificate issuer:       /CN=2271a7d618b0e4ff2d40baaa5aca66b160d43103
Certificate serial:       0189F2A6DA4ABE93447DA9CDD9AAF569113A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/InGn1hiw5P8tQLqqWspmsWDUMQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/InGn1hiw5P8tQLqqWspmsWDUMQM.mft
Manifest number:          027F
Signing time:             Mon 14 Aug 2023 06:06:08 +0000
Manifest this update:     Mon 14 Aug 2023 06:06:08 +0000
Manifest next update:     Tue 15 Aug 2023 06:06:08 +0000
Files and hashes:         1: InGn1hiw5P8tQLqqWspmsWDUMQM.crl (hash: 7CBcfr//GrcVpTUIoQvJdiwOkISsZjgjFkmDGb1V0JI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f2:a6:da:4a:be:93:44:7d:a9:cd:d9:aa:f5:69:11:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2271a7d618b0e4ff2d40baaa5aca66b160d43103
        Validity
            Not Before: Aug 14 06:06:08 2023 GMT
            Not After : Aug 15 06:06:08 2023 GMT
        Subject: CN=4ea24ff46bf350ff449aa4754b1c4c0adf959c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:68:10:cf:42:fb:49:4f:9a:93:e4:bd:42:
                    7d:8b:5d:54:00:01:30:df:12:54:58:ae:06:06:4b:
                    04:30:64:65:a9:b5:b5:83:ef:a6:f7:94:e9:39:eb:
                    63:e2:12:af:13:4a:5a:76:6b:80:49:c6:c9:13:2b:
                    96:8c:9c:33:a4:61:0f:a0:67:2f:4d:6e:06:e2:ea:
                    2c:b3:f7:96:bf:3d:12:ae:2d:54:47:4b:55:9d:ec:
                    b1:49:a4:4c:54:f2:81:e0:4a:2e:fa:f9:c3:7c:a5:
                    1b:85:71:8e:99:8f:c2:db:eb:b6:e6:f5:22:e6:ca:
                    1b:e4:77:61:53:48:92:ed:0d:a8:54:c4:1c:3e:8a:
                    4e:c0:99:47:d7:e3:38:2d:30:7b:fb:c1:f7:7a:f0:
                    a9:2b:9b:15:e5:5f:32:7a:7c:72:c1:53:e9:53:77:
                    2c:c6:5b:55:10:c5:cc:e1:94:71:d0:e9:d8:5a:06:
                    2f:bc:05:a9:de:cf:13:6b:d8:39:b1:54:9d:80:55:
                    10:3f:16:ed:d6:64:90:97:70:39:83:1f:61:9d:5b:
                    02:27:f9:4e:5b:7b:38:bb:54:20:30:36:45:9f:a1:
                    5a:33:3f:43:b9:e2:13:31:85:51:db:5c:85:50:15:
                    bd:dc:03:0a:4c:50:17:72:a7:d0:22:b3:8f:03:09:
                    bc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:4F:F4:6B:F3:50:FF:44:9A:A4:75:4B:1C:4C:0A:DF:95:9C:0B
            X509v3 Authority Key Identifier:
                keyid:22:71:A7:D6:18:B0:E4:FF:2D:40:BA:AA:5A:CA:66:B1:60:D4:31:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InGn1hiw5P8tQLqqWspmsWDUMQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/InGn1hiw5P8tQLqqWspmsWDUMQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/InGn1hiw5P8tQLqqWspmsWDUMQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:f0:14:14:af:f2:e8:1f:bc:e0:a4:d8:9f:d2:fe:7a:6c:
         e3:c8:a3:01:d1:59:d9:5d:32:08:c3:35:4f:86:86:d0:8b:f0:
         0b:55:7a:7b:cb:fd:42:79:5a:ea:8e:29:7d:a7:45:47:b8:3e:
         e8:59:b0:e8:d8:cd:ea:2c:fe:b9:d8:aa:6d:aa:03:47:11:27:
         50:d5:17:cd:3f:8f:00:94:82:90:12:06:c2:8c:cb:00:df:c1:
         96:6b:35:de:4f:66:06:4b:a5:0e:cf:ae:eb:8d:1a:a8:a9:d8:
         b4:9a:ff:08:0b:50:80:7e:37:cc:af:56:bb:70:62:13:b0:a1:
         eb:ba:4f:e2:3e:63:26:19:ac:85:c4:a4:28:59:75:0c:e1:1c:
         bc:cc:9b:2c:e9:34:4b:22:0b:a6:66:06:37:97:5d:c1:e6:1c:
         00:44:d8:4c:58:ae:aa:d8:7d:b5:02:6b:88:5c:7a:f1:fe:98:
         5c:3f:50:ad:09:86:ae:db:99:b9:c2:96:99:25:a5:d4:7b:00:
         29:17:2e:b3:e8:6f:c4:cd:42:d7:30:a6:b4:8f:42:f2:02:d9:
         47:65:62:e3:4a:bf:20:b9:eb:bb:8c:2b:b6:c1:f5:6c:34:00:
         cb:6d:f8:a9:7e:97:a8:e0:04:7b:f9:21:80:92:27:71:ef:1b:
         93:be:b4:33
-----BEGIN CERTIFICATE-----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