Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/MY_Wdu0eLdWPu3WWe9npEYn4qvA.mft
File:                     MY_Wdu0eLdWPu3WWe9npEYn4qvA.mft (raw, json)
Hash identifier:          zq5b6LWIzcTRK1bZru0rU/+WBR/icH3CoEobVROidHg=
Subject key identifier:   61:F3:F2:E8:55:15:09:F4:D1:95:37:38:BA:88:99:E2:52:7D:BF:E5
Authority key identifier: 31:8F:D6:76:ED:1E:2D:D5:8F:BB:75:96:7B:D9:E9:11:89:F8:AA:F0
Certificate issuer:       /CN=318fd676ed1e2dd58fbb75967bd9e91189f8aaf0
Certificate serial:       018B36A58A1FC6AA815772E9D7D0BC59B866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MY_Wdu0eLdWPu3WWe9npEYn4qvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/MY_Wdu0eLdWPu3WWe9npEYn4qvA.mft
Manifest number:          0885
Signing time:             Mon 16 Oct 2023 04:01:40 +0000
Manifest this update:     Mon 16 Oct 2023 04:01:40 +0000
Manifest next update:     Tue 17 Oct 2023 04:01:40 +0000
Files and hashes:         1: MY_Wdu0eLdWPu3WWe9npEYn4qvA.crl (hash: R+DelIyzTIGVrrQPdSSIbtnKYENP67A3tG+oKHkn3Tw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:a5:8a:1f:c6:aa:81:57:72:e9:d7:d0:bc:59:b8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318fd676ed1e2dd58fbb75967bd9e91189f8aaf0
        Validity
            Not Before: Oct 16 04:01:40 2023 GMT
            Not After : Oct 17 04:01:40 2023 GMT
        Subject: CN=61f3f2e8551509f4d1953738ba8899e2527dbfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:b3:63:5b:df:1a:39:12:c8:35:96:2b:a4:
                    1c:06:66:48:49:d8:16:9c:9e:bb:68:ba:6a:4d:e7:
                    ae:5c:05:01:c3:dc:46:cb:94:e6:ff:cd:2b:97:b2:
                    b4:9d:91:6c:da:61:b3:ae:8a:6d:5c:b5:3b:9d:32:
                    14:24:72:b7:0a:9c:d0:2c:16:e2:83:00:5e:1f:41:
                    db:35:a4:bd:4f:4c:24:d8:9f:99:6b:c0:08:99:51:
                    a8:f8:33:9d:c2:88:80:b0:e1:02:e4:73:ab:8e:55:
                    3b:2f:5d:11:9f:37:d0:c8:1e:53:c8:2f:20:c9:83:
                    b6:58:46:8d:d3:c8:0b:73:d9:b1:6c:d7:6a:c4:93:
                    a5:cc:68:c5:6f:b7:cc:93:39:4e:92:8b:16:a1:c9:
                    25:74:38:2d:a3:a3:5d:7a:13:cf:3f:ad:cf:03:be:
                    8e:a6:ee:30:53:ee:bc:22:59:66:a7:9d:b7:49:cc:
                    00:54:e8:66:57:60:08:6d:66:dc:c4:65:7a:76:eb:
                    3c:0b:fb:26:bf:6c:b9:4a:e1:a2:c0:d8:d3:75:c6:
                    68:2f:3e:47:46:c4:12:00:14:17:7d:a8:73:e0:56:
                    78:2e:0d:b6:32:42:f5:45:14:ff:05:62:2b:3d:9e:
                    8a:b8:83:2f:40:96:d5:b8:fd:5a:42:81:e5:4b:d3:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F3:F2:E8:55:15:09:F4:D1:95:37:38:BA:88:99:E2:52:7D:BF:E5
            X509v3 Authority Key Identifier:
                keyid:31:8F:D6:76:ED:1E:2D:D5:8F:BB:75:96:7B:D9:E9:11:89:F8:AA:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY_Wdu0eLdWPu3WWe9npEYn4qvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/MY_Wdu0eLdWPu3WWe9npEYn4qvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/MY_Wdu0eLdWPu3WWe9npEYn4qvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:76:04:b2:f3:74:9a:6c:e0:0a:e4:36:2f:b4:51:a9:ec:69:
         86:fc:bf:c8:cb:0b:57:b5:17:97:37:f3:2e:27:58:70:2e:da:
         04:a6:13:6b:52:1d:e1:4b:2d:3a:5f:00:5e:c5:7c:ef:7b:c7:
         30:f8:46:5d:22:bd:2d:b5:b9:cb:2b:fe:88:2a:e0:15:d8:89:
         cc:5f:8a:0d:7e:c5:2a:4f:c3:13:18:8a:0c:8b:c3:82:46:8a:
         20:e6:d5:c0:14:6b:87:ea:2b:b4:6d:36:bb:2d:28:ff:2c:3b:
         7e:2e:aa:54:2a:11:cc:97:07:6b:ec:c1:0d:47:61:3c:c6:ae:
         09:7b:4e:0f:6f:d6:cf:72:d0:ea:fc:ef:40:a2:8c:9d:3b:b3:
         af:9c:3a:6f:1d:1f:f3:39:f4:35:6d:87:6a:c7:d4:b2:6d:f8:
         8d:35:f9:76:b1:14:bd:50:65:aa:a9:ea:1c:f0:c7:0c:b7:f6:
         10:d8:c1:c7:5c:06:19:8a:69:52:c0:23:08:8e:5f:16:f1:ed:
         02:cc:67:04:d3:82:10:d5:9b:09:9c:61:69:7a:34:66:2c:ac:
         05:c3:f7:8b:f3:bc:f4:0f:4d:07:33:88:ed:e1:77:c7:bd:ae:
         8d:8b:20:ff:e1:8a:6c:51:d2:59:0d:9c:49:40:43:8c:5b:08:
         0c:28:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----