Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.mft
File:                     jaFSmDJA6QSV92BcRCVH2QKD4eA.mft (raw, json)
Hash identifier:          HW7GBrwWGCsFSuFX8McS9HJvHKI2tPl8ILc4VV0RoNI=
Subject key identifier:   94:CB:E6:09:6C:1F:BD:C5:A2:BF:1A:6E:26:84:34:44:A2:C2:17:AB
Authority key identifier: 8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0
Certificate issuer:       /CN=8da152983240e90495f7605c442547d90283e1e0
Certificate serial:       018BD2DBCC2C556E991B501588E7DB0D7F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.mft
Manifest number:          086F
Signing time:             Wed 15 Nov 2023 12:01:41 +0000
Manifest this update:     Wed 15 Nov 2023 12:01:41 +0000
Manifest next update:     Thu 16 Nov 2023 12:01:41 +0000
Files and hashes:         1: jaFSmDJA6QSV92BcRCVH2QKD4eA.crl (hash: UNrWFBWVxLJIk9wLj7YfCFyw9JMdtsv50RcAkg4eEVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d2:db:cc:2c:55:6e:99:1b:50:15:88:e7:db:0d:7f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da152983240e90495f7605c442547d90283e1e0
        Validity
            Not Before: Nov 15 12:01:41 2023 GMT
            Not After : Nov 16 12:01:41 2023 GMT
        Subject: CN=94cbe6096c1fbdc5a2bf1a6e26843444a2c217ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:ff:9c:f4:04:72:c3:df:c0:72:f6:74:b7:
                    ae:22:4f:47:90:df:ee:6b:e1:12:10:e9:a3:3e:25:
                    f4:61:ee:f3:4d:44:56:be:39:53:65:ad:f2:ac:0b:
                    f2:a6:b8:b0:ae:7d:61:86:c8:7a:83:2c:6b:e2:7e:
                    c4:c4:50:af:61:1d:d7:bc:a4:a7:c9:dc:8d:02:e2:
                    e6:0e:95:e3:eb:31:68:46:65:67:d7:4c:f4:cc:a6:
                    3a:70:c1:89:1e:a5:ea:39:f2:e9:1e:c9:7d:b9:93:
                    8c:62:ec:55:73:80:64:da:27:d9:c3:33:d7:39:c7:
                    e1:1b:45:92:67:21:20:94:ba:84:d2:6a:13:9c:f3:
                    d8:4c:ad:4d:78:16:93:b6:6a:3b:85:3e:99:ee:d7:
                    99:53:f3:7f:7c:84:3e:5a:65:08:ad:3b:98:2b:87:
                    d7:ae:29:3c:02:44:c0:1a:83:8f:75:20:a2:7c:ef:
                    98:4b:f6:ed:9c:96:7e:4c:24:eb:32:9e:41:5f:a8:
                    77:f5:09:8c:a6:3c:08:16:1c:a4:c2:4d:a5:2c:35:
                    02:a3:f2:90:a0:c1:e1:4d:80:3f:5f:f3:15:b3:89:
                    99:d1:2b:d3:f3:55:73:b1:48:35:f2:6c:72:e3:3c:
                    ad:77:ca:e0:ef:f6:d9:92:d9:62:07:fe:da:21:d7:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CB:E6:09:6C:1F:BD:C5:A2:BF:1A:6E:26:84:34:44:A2:C2:17:AB
            X509v3 Authority Key Identifier:
                keyid:8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:1f:8a:cc:6e:5a:f2:a8:1e:22:a9:33:2c:fb:be:91:f4:
         be:53:9d:d1:db:28:f1:b3:53:9c:ea:cf:1d:e6:11:16:ef:82:
         40:3e:4d:f7:6b:58:99:09:6a:3d:0d:3e:55:b9:a2:74:5a:ce:
         19:82:44:82:02:24:bc:24:2d:22:e9:c6:d4:ae:0b:27:5d:15:
         1f:02:67:0d:f4:98:75:55:ea:3f:a7:1e:21:87:ca:05:91:39:
         5a:76:75:07:37:e1:ec:3c:eb:13:0f:a7:4a:13:ab:20:7d:c1:
         8c:38:67:e2:9e:76:27:d2:bb:98:21:97:e6:15:c4:c7:2a:8c:
         56:48:e6:a8:1e:26:fa:21:d9:da:e6:7a:06:9a:c9:e5:29:10:
         b0:68:40:a1:79:1c:e2:7e:28:a5:1b:25:1a:db:d9:e8:da:3d:
         8b:73:4e:4b:ac:f3:1f:1c:40:a3:a2:4a:03:5d:d3:1d:63:b9:
         b3:25:71:17:32:10:57:9f:6c:47:a9:de:09:e1:c0:11:64:a3:
         16:a3:f7:51:04:a7:1d:83:a7:2b:1a:81:55:4f:25:17:a1:fe:
         92:39:5f:db:ad:9f:81:10:e2:37:33:7f:e1:80:23:fd:a0:c7:
         88:e4:ad:01:a6:c6:65:be:72:5a:10:91:bf:82:65:f9:ea:58:
         79:db:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----