Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.mft
File:                     VWmKXf0rusqgwrsY1a_tGjuY3pU.mft (raw, json)
Hash identifier:          HEz2yE4qbs63z5n8zy6a3nhLU68//DaMqsAMD+VP4PM=
Subject key identifier:   A0:C3:23:41:6B:F0:AD:35:FC:A1:06:D7:3C:1D:12:3C:31:CA:7B:35
Authority key identifier: 55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
Certificate issuer:       /CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
Certificate serial:       018C8FE662552781038C270C924FE8F597F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.mft
Manifest number:          098A
Signing time:             Fri 22 Dec 2023 05:01:29 +0000
Manifest this update:     Fri 22 Dec 2023 05:01:29 +0000
Manifest next update:     Sat 23 Dec 2023 05:01:29 +0000
Files and hashes:         1: VWmKXf0rusqgwrsY1a_tGjuY3pU.crl (hash: 4Gb27Lh8q9rTVU6ujlgs7oOL+qyLSQYq31elZtLEuYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8f:e6:62:55:27:81:03:8c:27:0c:92:4f:e8:f5:97:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
        Validity
            Not Before: Dec 22 05:01:29 2023 GMT
            Not After : Dec 23 05:01:29 2023 GMT
        Subject: CN=a0c323416bf0ad35fca106d73c1d123c31ca7b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:63:cf:f6:ee:48:e2:8a:81:dd:ba:69:00:
                    7b:63:ef:42:51:79:45:e8:a4:b9:3e:4e:99:5b:7e:
                    bd:e0:42:2d:19:43:1d:ea:63:e2:66:4a:d5:ca:28:
                    d7:09:af:a7:98:66:43:eb:93:5d:b3:d1:e9:77:cc:
                    96:4d:17:80:32:62:7e:aa:3a:85:de:4f:da:65:d3:
                    14:29:84:35:be:29:ef:7a:50:65:6d:58:f1:1e:b1:
                    fb:c8:d8:6f:0d:8c:6a:ca:53:d7:36:75:6b:70:5f:
                    91:50:ff:be:bb:8a:ae:c1:77:6a:ef:be:8c:35:48:
                    ff:a8:80:23:37:51:51:f5:c0:40:7c:ae:22:07:a8:
                    a2:aa:ea:6f:47:1c:0e:69:38:28:ce:5a:5e:05:f4:
                    3d:25:0f:45:8c:a2:ad:f1:9e:23:e9:d4:e5:98:27:
                    00:1b:6b:fb:7f:f8:41:97:34:5c:b5:53:0c:cb:86:
                    a6:5d:3a:9e:98:0f:c5:d0:96:fd:d5:53:cf:80:fa:
                    db:fe:f0:c6:14:a8:f6:3b:96:61:fd:98:a8:bb:e2:
                    f8:50:10:58:b4:cf:33:83:08:02:b8:60:6e:81:87:
                    30:2f:a6:c2:f8:42:18:ae:aa:b3:a7:f0:fc:49:47:
                    4c:1a:ae:5b:8a:7d:38:5c:3f:86:17:ad:34:56:cc:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C3:23:41:6B:F0:AD:35:FC:A1:06:D7:3C:1D:12:3C:31:CA:7B:35
            X509v3 Authority Key Identifier:
                keyid:55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c5:67:df:aa:96:01:52:2b:21:d0:bb:bd:3c:2a:65:34:c4:
         da:03:68:c5:d8:d0:42:80:1d:65:13:3f:eb:b6:fb:79:4c:24:
         0c:12:50:ee:33:5e:b7:87:61:26:4d:ec:89:16:4f:f8:92:5f:
         7a:e3:4d:c4:0a:6b:39:01:3e:0c:bf:9c:fe:5b:e2:77:3d:c8:
         ed:2c:2e:b1:2e:bc:c6:77:d2:c7:3c:a4:03:e3:e7:db:56:a9:
         8a:53:86:c0:c4:f1:07:d1:db:ac:da:a0:27:b4:72:18:9f:20:
         26:d3:0a:86:20:a1:b9:9f:57:1d:df:4f:d8:fd:e6:b7:85:ad:
         6c:cb:0d:df:ee:14:ca:f4:8d:1d:6e:6a:a6:cf:f7:f0:05:22:
         b3:4d:e8:26:f7:76:78:14:f7:6a:a0:0f:f2:5a:15:ad:b4:fe:
         67:5a:63:b4:1f:6f:49:39:55:d9:d4:83:a6:aa:03:9e:17:0c:
         76:41:64:dc:19:26:87:9f:dc:09:05:3b:89:da:9c:ca:1b:8d:
         d3:dc:9e:f6:9c:30:e2:e5:02:71:05:c5:3a:44:24:b7:98:df:
         96:82:bb:e7:30:bb:08:0a:be:9d:0c:00:7b:a0:ac:a2:f8:26:
         31:97:e5:62:77:bb:3b:85:3d:1d:f1:0a:aa:fa:c5:75:8b:a5:
         1f:f5:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----