Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/08bd6e-3c61-4a16-8c71-4470e5fae6a6/1/74U5aq5Q5l6PvVDfiPW739mBXPE.mft
File:                     74U5aq5Q5l6PvVDfiPW739mBXPE.mft (raw, json)
Hash identifier:          JWVWhCdR61iaLq47BtacSSOMEgrlySSq1Pm9aqtR4lU=
Subject key identifier:   B9:28:FA:20:96:D3:59:EF:4E:65:4A:72:A3:58:D5:6D:59:3C:3E:0D
Authority key identifier: EF:85:39:6A:AE:50:E6:5E:8F:BD:50:DF:88:F5:BB:DF:D9:81:5C:F1
Certificate issuer:       /CN=ef85396aae50e65e8fbd50df88f5bbdfd9815cf1
Certificate serial:       0189F27CC2EA7D3B8A50BE5AD40DADDF1978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74U5aq5Q5l6PvVDfiPW739mBXPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/08bd6e-3c61-4a16-8c71-4470e5fae6a6/1/74U5aq5Q5l6PvVDfiPW739mBXPE.mft
Manifest number:          0E8D
Signing time:             Mon 14 Aug 2023 05:20:09 +0000
Manifest this update:     Mon 14 Aug 2023 05:20:09 +0000
Manifest next update:     Tue 15 Aug 2023 05:20:09 +0000
Files and hashes:         1: 74U5aq5Q5l6PvVDfiPW739mBXPE.crl (hash: inkkYAInCAeS28euXOWsvT6V5Jv4d5HrPg+XIC7YPWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f2:7c:c2:ea:7d:3b:8a:50:be:5a:d4:0d:ad:df:19:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef85396aae50e65e8fbd50df88f5bbdfd9815cf1
        Validity
            Not Before: Aug 14 05:20:09 2023 GMT
            Not After : Aug 15 05:20:09 2023 GMT
        Subject: CN=b928fa2096d359ef4e654a72a358d56d593c3e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:be:75:60:a5:5f:8e:0d:39:9f:44:0b:60:
                    93:39:ca:c2:7c:63:c0:89:25:46:98:1f:27:1c:37:
                    61:75:3c:f8:65:aa:75:6b:da:d5:af:cb:8c:74:de:
                    8c:50:22:4d:8a:99:cb:6f:77:e4:78:46:69:80:f4:
                    8e:a3:5f:54:ea:c7:72:26:9f:3e:74:1e:74:ae:c4:
                    1a:0e:28:51:e3:f2:0a:9b:ff:f2:f0:f0:37:6f:ef:
                    84:2b:ec:9d:b4:bc:18:c2:6b:eb:41:b6:cb:5f:79:
                    68:08:0e:b3:bd:bc:dc:6e:02:8e:58:0e:54:5f:6e:
                    d6:65:e9:c6:63:dd:65:0e:33:03:11:d5:c3:e0:37:
                    b0:50:68:b7:94:9a:d4:0a:70:1b:13:5f:37:74:d0:
                    24:95:a8:82:e1:fa:ec:90:53:18:20:b7:7f:f5:e8:
                    e4:9b:ad:7b:bf:f9:88:9b:48:d0:2c:ac:a3:03:42:
                    cf:de:39:c9:40:71:71:9b:3a:61:87:45:a8:8e:53:
                    fb:25:44:92:7e:97:02:59:3a:35:fd:5b:0c:8c:eb:
                    dd:09:8a:be:e6:ca:01:09:3e:4c:a0:98:67:88:4a:
                    41:ff:de:1f:3f:1c:2a:a5:a6:81:85:6a:6f:58:80:
                    93:aa:40:00:fe:4a:99:e6:e2:d8:85:54:d9:09:36:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:28:FA:20:96:D3:59:EF:4E:65:4A:72:A3:58:D5:6D:59:3C:3E:0D
            X509v3 Authority Key Identifier:
                keyid:EF:85:39:6A:AE:50:E6:5E:8F:BD:50:DF:88:F5:BB:DF:D9:81:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74U5aq5Q5l6PvVDfiPW739mBXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/08bd6e-3c61-4a16-8c71-4470e5fae6a6/1/74U5aq5Q5l6PvVDfiPW739mBXPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/08bd6e-3c61-4a16-8c71-4470e5fae6a6/1/74U5aq5Q5l6PvVDfiPW739mBXPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:5c:78:bc:e1:16:62:13:31:65:af:29:1f:18:5c:1a:d4:
         41:89:ad:48:ae:29:00:27:8e:e4:8d:ac:40:dc:a8:16:bd:2d:
         04:c3:37:12:88:9e:28:f7:59:e9:9f:a4:8e:93:f1:45:ba:27:
         91:4e:bd:e2:32:3f:d3:88:23:a0:80:5f:0d:b0:70:ca:63:45:
         b2:a8:02:e7:db:9a:e9:84:20:0b:cd:e4:a6:19:0b:f2:f8:0f:
         5a:33:ea:62:59:a1:92:05:76:ed:43:10:c9:a9:f0:4f:a3:2e:
         b9:fa:47:38:e0:b4:84:1d:b2:7f:aa:bd:2a:cd:a0:82:12:c8:
         2d:a5:f3:e8:7b:20:97:e6:52:d6:77:49:0c:04:23:66:27:3b:
         2a:17:61:04:13:c2:44:4e:07:0c:30:b1:0b:51:ab:a3:9c:c8:
         02:6d:ed:f9:24:04:fc:8e:6d:1f:94:d2:3f:71:1c:42:27:aa:
         40:8b:97:6a:d4:74:da:f1:ae:0f:31:e1:9f:29:40:be:58:b3:
         4d:23:82:0a:0b:67:c6:40:ef:35:8b:bc:0d:a8:bd:92:ab:f7:
         31:63:e8:ef:5d:d9:94:a4:11:af:4d:39:e1:1c:4f:06:fb:c8:
         43:0a:d6:dc:27:04:fe:8a:59:f7:e2:f8:8f:84:61:0b:41:4a:
         5a:f3:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----