Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/394c43-4402-4bc0-aa08-d1a3a6b7b546/1/7pby1n8f1q4ZOvLXwXU_Rz3MIB0.mft
File:                     7pby1n8f1q4ZOvLXwXU_Rz3MIB0.mft (raw, json)
Hash identifier:          5I0KOWpl/X2RSfwlV9mRHAb4w8KoKxOgTndvpRG6zjM=
Subject key identifier:   22:0D:3F:26:8C:38:D1:3A:49:C7:B4:C1:A4:53:41:18:17:FD:7C:01
Authority key identifier: EE:96:F2:D6:7F:1F:D6:AE:19:3A:F2:D7:C1:75:3F:47:3D:CC:20:1D
Certificate issuer:       /CN=ee96f2d67f1fd6ae193af2d7c1753f473dcc201d
Certificate serial:       0186C4FDF3955447C9AE55D00458E564D482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7pby1n8f1q4ZOvLXwXU_Rz3MIB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/394c43-4402-4bc0-aa08-d1a3a6b7b546/1/7pby1n8f1q4ZOvLXwXU_Rz3MIB0.mft
Manifest number:          0C7A
Signing time:             Thu 09 Mar 2023 06:10:22 +0000
Manifest this update:     Thu 09 Mar 2023 06:10:22 +0000
Manifest next update:     Fri 10 Mar 2023 06:10:22 +0000
Files and hashes:         1: 7pby1n8f1q4ZOvLXwXU_Rz3MIB0.crl (hash: I0Gyt5clOiZypWjUkHM/tSC7XNlw2gUwHKQ+ZhCJWkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c4:fd:f3:95:54:47:c9:ae:55:d0:04:58:e5:64:d4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee96f2d67f1fd6ae193af2d7c1753f473dcc201d
        Validity
            Not Before: Mar  9 06:10:22 2023 GMT
            Not After : Mar 10 06:10:22 2023 GMT
        Subject: CN=220d3f268c38d13a49c7b4c1a453411817fd7c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f5:be:4f:aa:2d:43:87:48:af:9c:79:2f:31:
                    8c:19:d0:58:c5:d3:c8:b5:70:f7:64:19:83:e6:79:
                    83:73:86:bb:20:2c:fe:6f:e9:47:a1:d0:0b:98:34:
                    6c:05:41:d4:d7:a1:06:12:8f:f2:08:47:f9:e8:01:
                    1a:b5:79:8c:d3:46:e1:8a:ec:2b:8c:6a:55:8c:20:
                    1c:8c:e6:35:ff:a7:51:a0:cb:6b:b0:d3:88:2f:53:
                    8d:b7:20:bc:12:58:46:5c:81:e2:85:51:ad:c0:fc:
                    77:fd:b4:33:eb:57:46:91:89:d9:d2:4b:10:f7:d1:
                    c5:df:43:7b:e0:0b:52:94:16:10:ea:8e:50:69:12:
                    3f:f2:79:76:f4:f7:96:dd:7b:00:bd:42:e9:14:43:
                    c9:41:12:6a:da:90:52:2b:26:9e:96:bf:64:6b:03:
                    54:d9:d1:b0:1e:ed:36:c6:f4:23:5c:69:0b:81:50:
                    18:98:89:ba:f3:31:73:70:75:ff:23:19:8e:58:04:
                    6e:80:f7:18:ba:84:35:70:20:f9:1a:b1:16:21:f4:
                    e7:bf:01:2c:42:b0:0b:2d:b8:42:8e:0b:00:27:da:
                    79:0c:49:05:bc:bd:cb:2e:d7:e7:84:cf:33:f3:45:
                    e2:13:48:72:06:ae:c3:57:33:41:4c:04:1c:92:0a:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:3F:26:8C:38:D1:3A:49:C7:B4:C1:A4:53:41:18:17:FD:7C:01
            X509v3 Authority Key Identifier:
                keyid:EE:96:F2:D6:7F:1F:D6:AE:19:3A:F2:D7:C1:75:3F:47:3D:CC:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pby1n8f1q4ZOvLXwXU_Rz3MIB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/394c43-4402-4bc0-aa08-d1a3a6b7b546/1/7pby1n8f1q4ZOvLXwXU_Rz3MIB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/394c43-4402-4bc0-aa08-d1a3a6b7b546/1/7pby1n8f1q4ZOvLXwXU_Rz3MIB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1c:bb:93:42:96:92:6d:e1:1c:36:d3:da:82:69:71:c0:ce:
         05:66:d0:6c:29:6c:76:44:2e:70:b0:84:9d:28:45:90:c7:ad:
         55:e4:a3:86:68:dd:c4:73:07:cf:e8:57:67:09:1f:9d:df:db:
         73:16:96:67:34:b1:f8:e3:88:67:28:c9:4c:47:85:e9:63:80:
         be:28:5c:67:51:bd:ea:c5:a0:3f:a6:1e:27:0a:5f:78:56:ca:
         12:0f:36:b6:da:89:63:90:f3:26:4f:df:4e:9e:2d:cf:1e:c5:
         5d:69:bd:6d:66:54:96:9d:6e:2e:aa:68:cf:25:5a:3c:8d:65:
         ab:70:4f:ef:38:67:1e:a2:ab:4d:ed:e2:f1:08:70:73:0c:c0:
         fb:e0:73:11:2e:91:0d:2c:ad:74:48:65:5e:32:0d:39:44:d9:
         d0:b1:ae:e5:dc:14:95:15:07:d4:89:24:62:2f:cf:7f:d7:46:
         f2:36:9f:18:23:5c:f5:26:e9:11:85:2f:4a:c8:33:d1:b4:37:
         29:18:b6:14:eb:89:6b:dd:ce:c9:7e:cd:4e:cf:0d:22:26:ba:
         58:b4:d5:d5:13:01:4f:16:e5:6b:87:e4:b0:2d:83:1f:0f:97:
         7d:e0:7c:a4:f6:83:b9:02:d0:b3:0e:2d:3a:0c:61:85:d8:a1:
         ab:08:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----