Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.mft
File:                     mZDnTlc3XPtiGNUtwGAUFv7h8yg.mft (raw, json)
Hash identifier:          G1c9ZAI3Hik+M2dCUfKO97V/ySR5T+4USaJdSIUmpRw=
Subject key identifier:   10:F5:00:5A:96:6C:65:E4:38:51:63:4D:C0:CB:C6:9A:FB:D4:B9:10
Authority key identifier: 99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
Certificate issuer:       /CN=9990e74e57375cfb6218d52dc0601416fee1f328
Certificate serial:       0188E488F74C54C7F8293CD78139E1674D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.mft
Manifest number:          08C2
Signing time:             Thu 22 Jun 2023 19:16:01 +0000
Manifest this update:     Thu 22 Jun 2023 19:16:01 +0000
Manifest next update:     Fri 23 Jun 2023 19:16:01 +0000
Files and hashes:         1: mZDnTlc3XPtiGNUtwGAUFv7h8yg.crl (hash: vHXcpxGtSrQ8UktY0HPG7/qSaBOCn9U1zRBU0GYswgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e4:88:f7:4c:54:c7:f8:29:3c:d7:81:39:e1:67:4d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9990e74e57375cfb6218d52dc0601416fee1f328
        Validity
            Not Before: Jun 22 19:16:01 2023 GMT
            Not After : Jun 23 19:16:01 2023 GMT
        Subject: CN=10f5005a966c65e43851634dc0cbc69afbd4b910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:df:3e:04:85:27:08:f6:5d:ce:b3:37:22:
                    a2:e9:71:b6:4d:16:91:aa:a2:47:62:37:a7:73:f1:
                    1a:95:3d:2f:5b:ba:61:90:00:01:63:fb:56:65:f9:
                    85:d4:30:62:14:f2:6a:4a:c2:2e:92:56:0a:77:95:
                    6f:b3:52:4d:4c:8d:0c:72:cb:37:3c:31:54:24:6c:
                    14:97:bd:f3:5a:6c:db:7a:45:f2:8b:e6:4a:74:84:
                    2b:af:47:57:ed:47:5e:62:67:96:5c:0a:ef:d8:68:
                    53:b6:85:88:a3:d8:d6:7b:42:27:e5:64:1b:18:f3:
                    fe:b4:b3:28:74:86:69:85:ca:35:aa:d4:0e:ea:6e:
                    3c:cd:b3:62:49:d2:7a:76:d7:29:86:d5:23:6c:33:
                    57:a0:34:41:4e:07:04:63:ff:a8:6c:cb:04:9a:18:
                    b3:3a:01:9d:4d:d2:53:d7:f2:39:05:0e:7d:66:7c:
                    57:54:af:5a:8f:74:a0:5d:5f:8d:52:a8:6c:8e:d0:
                    dd:9f:21:ff:0c:82:cf:1a:cf:a5:31:0c:f9:57:44:
                    2b:e2:ca:bf:1a:2c:ff:1a:d8:40:17:9e:72:69:17:
                    fc:10:dc:63:26:60:46:72:9a:01:a4:81:2f:ee:09:
                    2b:1b:34:fb:d6:d9:1f:3e:d5:24:db:2b:b3:8a:dd:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F5:00:5A:96:6C:65:E4:38:51:63:4D:C0:CB:C6:9A:FB:D4:B9:10
            X509v3 Authority Key Identifier:
                keyid:99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:21:f2:6b:7c:62:8f:ce:0a:71:4c:bc:c9:ed:be:d7:6a:
         e3:a9:ed:83:fb:86:39:28:3d:fd:e7:75:91:d6:0d:5e:df:e1:
         6f:23:55:29:9c:0b:fd:76:7d:00:a1:fa:0f:78:2a:69:41:df:
         67:44:c1:02:dc:31:09:d8:91:5c:fe:bb:4f:a5:36:4a:aa:9a:
         a1:ff:aa:79:e9:c6:76:a0:6c:81:fa:cb:4b:c1:1e:85:6a:9c:
         c3:18:8a:d4:45:e0:51:2f:6d:eb:12:1a:d1:00:d0:3a:f3:ba:
         e0:ec:cd:74:78:95:9a:46:ec:5d:33:93:30:57:f6:4b:95:3b:
         a8:bc:f2:6b:09:0c:49:ce:7a:ec:af:33:0c:b0:2e:0c:43:7e:
         a8:7e:a9:3f:f5:b0:cf:fd:3a:13:c2:25:e7:c9:58:2f:90:7e:
         2c:8c:fb:9d:43:5d:aa:89:c3:a7:d4:cd:a1:31:98:05:b5:a8:
         25:18:5b:9e:5a:21:31:b0:9f:65:77:c8:cb:2a:35:73:e7:bf:
         10:f9:29:25:bc:c3:99:c6:78:5e:2c:27:9a:62:f1:d0:ef:31:
         7f:ac:49:6a:b7:aa:f4:0f:23:e9:59:5c:ea:9c:b1:44:76:f8:
         32:06:d6:45:e7:a5:f4:c1:12:e1:2e:5c:b8:72:13:5f:7c:60:
         6a:02:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----