Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/1267hBIQBsq6mCasY77U5mJmC_U.mft
File:                     1267hBIQBsq6mCasY77U5mJmC_U.mft (raw, json)
Hash identifier:          1GcgVEANhcMry9Sy1X4P+Aw2pCmQiqk5hbziElStnTE=
Subject key identifier:   7E:35:1F:D3:C7:C2:A8:A1:A4:3D:B4:5F:02:53:DF:69:E3:D6:5E:20
Authority key identifier: D7:6E:BB:84:12:10:06:CA:BA:98:26:AC:63:BE:D4:E6:62:66:0B:F5
Certificate issuer:       /CN=d76ebb84121006caba9826ac63bed4e662660bf5
Certificate serial:       018AB91DF290C8DDE8BB788DDF57785C5934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1267hBIQBsq6mCasY77U5mJmC_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/1267hBIQBsq6mCasY77U5mJmC_U.mft
Manifest number:          04CB
Signing time:             Thu 21 Sep 2023 19:01:02 +0000
Manifest this update:     Thu 21 Sep 2023 19:01:02 +0000
Manifest next update:     Fri 22 Sep 2023 19:01:02 +0000
Files and hashes:         1: 1267hBIQBsq6mCasY77U5mJmC_U.crl (hash: Q0YFDNN4q1y9sCDIQPiUQNbPPJKJj8/2sTjHaLRF4AA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b9:1d:f2:90:c8:dd:e8:bb:78:8d:df:57:78:5c:59:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76ebb84121006caba9826ac63bed4e662660bf5
        Validity
            Not Before: Sep 21 19:01:02 2023 GMT
            Not After : Sep 22 19:01:02 2023 GMT
        Subject: CN=7e351fd3c7c2a8a1a43db45f0253df69e3d65e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:cc:88:ff:11:ac:c3:23:ea:cc:2a:b3:57:
                    8d:90:f8:f7:d8:39:e6:a9:cc:e9:d3:b6:40:57:47:
                    16:12:45:85:69:1e:b3:55:c7:33:1b:9d:73:af:74:
                    60:a1:fb:ca:ad:b3:c6:16:53:c4:af:18:a4:cd:7f:
                    da:a5:82:a5:06:0c:27:5a:ed:4e:a5:97:59:f2:3c:
                    d5:ec:f0:c9:cc:bf:61:b8:cb:c6:6e:2c:0f:f9:8b:
                    a5:5b:a3:04:f9:ea:0c:12:9a:0a:70:46:d3:6c:c5:
                    00:b5:df:45:55:9c:22:07:18:1a:18:85:b7:cc:bc:
                    bc:33:a8:42:74:42:8d:91:91:be:aa:5d:7e:b0:65:
                    ac:e6:ba:04:7d:b6:7e:34:6a:87:aa:da:c1:4f:cf:
                    ef:c8:a2:ef:34:db:eb:c5:3d:65:ab:bd:02:b9:51:
                    c1:a0:34:6b:5c:c6:cf:e3:ef:6f:eb:54:de:53:60:
                    96:7a:36:6c:43:09:40:5c:7c:58:75:be:f2:e9:4f:
                    db:30:2d:dd:57:a4:6a:1f:af:06:b1:5e:ed:78:17:
                    7a:12:c1:1d:b6:80:ab:4a:66:90:71:97:62:e9:d6:
                    fa:ef:90:77:5e:14:56:8b:d3:5e:e7:29:42:ff:df:
                    20:9f:9d:70:1d:9a:13:bc:56:3c:d7:6c:69:88:aa:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:35:1F:D3:C7:C2:A8:A1:A4:3D:B4:5F:02:53:DF:69:E3:D6:5E:20
            X509v3 Authority Key Identifier:
                keyid:D7:6E:BB:84:12:10:06:CA:BA:98:26:AC:63:BE:D4:E6:62:66:0B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1267hBIQBsq6mCasY77U5mJmC_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/1267hBIQBsq6mCasY77U5mJmC_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/1267hBIQBsq6mCasY77U5mJmC_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:ee:62:aa:f2:70:fb:5e:04:af:7d:88:d0:73:b3:03:16:
         68:6f:24:c3:b3:36:39:71:3f:df:8a:cc:5c:b5:84:f8:c6:29:
         89:7a:c1:9d:c2:40:1c:3a:4a:37:67:8d:36:db:00:26:e1:4f:
         82:6c:6e:89:80:ae:8f:91:26:6f:ea:40:e9:58:cf:c8:3b:9a:
         e3:76:78:f5:4b:f2:dd:dd:fa:bd:9c:8e:7d:3a:06:22:38:ab:
         f8:cb:a6:ef:6b:63:87:79:e6:ef:b2:d7:33:4d:a9:0e:81:fd:
         c2:f5:fe:dc:f0:28:ab:ae:4c:f4:68:5b:4c:af:cf:7d:79:84:
         e5:58:0c:c6:c4:d0:0d:23:f4:d3:f1:7b:58:af:72:0a:07:c0:
         5e:e9:5a:84:74:3c:14:6c:70:cd:e5:40:70:14:3c:13:3d:46:
         00:77:ab:02:69:be:01:17:c8:0a:61:1f:67:a8:04:b9:38:08:
         9e:e2:ca:05:cc:fd:91:47:69:2e:f1:04:f4:8c:0c:2a:94:ea:
         b8:b4:b9:8b:f5:6c:8f:f3:1d:e3:fc:18:a0:8c:c2:a1:21:27:
         e3:99:9f:38:ad:00:2a:ad:3e:9f:39:73:19:f5:c7:62:54:a4:
         00:03:18:83:04:8d:4c:73:e9:b3:08:63:d9:db:ec:a2:db:91:
         32:e7:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----