Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/526249-aec9-4c98-8184-96366bd0f5fb/1/cAL1n9A7tqbwzDifqJc6SNR9ymE.mft
File:                     cAL1n9A7tqbwzDifqJc6SNR9ymE.mft (raw, json)
Hash identifier:          wKMVukBgtvU3a10oL6x8I+GalcJ/6s6yEH5MYZ7f+Go=
Subject key identifier:   C8:48:7D:E1:92:C4:A1:74:74:0E:A2:58:32:B7:F7:4F:52:67:8B:37
Authority key identifier: 70:02:F5:9F:D0:3B:B6:A6:F0:CC:38:9F:A8:97:3A:48:D4:7D:CA:61
Certificate issuer:       /CN=7002f59fd03bb6a6f0cc389fa8973a48d47dca61
Certificate serial:       018A21C04C9E68BD9CE26014615A1043672F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAL1n9A7tqbwzDifqJc6SNR9ymE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/526249-aec9-4c98-8184-96366bd0f5fb/1/cAL1n9A7tqbwzDifqJc6SNR9ymE.mft
Manifest number:          058B
Signing time:             Wed 23 Aug 2023 09:36:05 +0000
Manifest this update:     Wed 23 Aug 2023 09:36:05 +0000
Manifest next update:     Thu 24 Aug 2023 09:36:05 +0000
Files and hashes:         1: cAL1n9A7tqbwzDifqJc6SNR9ymE.crl (hash: udKiiZgoFio4n5KV+L4q7MRWHGz+SSHsVfagKLU6cx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:21:c0:4c:9e:68:bd:9c:e2:60:14:61:5a:10:43:67:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7002f59fd03bb6a6f0cc389fa8973a48d47dca61
        Validity
            Not Before: Aug 23 09:36:05 2023 GMT
            Not After : Aug 24 09:36:05 2023 GMT
        Subject: CN=c8487de192c4a174740ea25832b7f74f52678b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:ad:26:ae:1f:ed:22:c9:42:47:51:56:d7:
                    70:dd:d9:83:81:99:b6:cd:b3:8d:b1:79:c6:c4:46:
                    1a:11:af:e8:fc:01:6e:6c:3f:02:e9:38:9d:02:e5:
                    4e:ee:f0:da:52:25:7e:93:9b:21:85:ad:68:72:3e:
                    87:70:53:15:bb:c0:6b:0c:fc:43:74:34:b7:ad:b5:
                    67:14:46:d1:e7:cd:0a:7d:ca:88:c2:09:d4:40:bc:
                    ac:61:b7:38:75:2f:fd:f3:89:04:52:3d:8d:cf:83:
                    1f:1c:c7:90:d7:38:e5:ac:13:37:ba:bc:cf:2b:9b:
                    21:7b:e6:80:e1:03:eb:10:70:be:ad:d1:56:86:02:
                    49:4a:ee:23:1b:43:61:8e:45:13:d7:94:52:7e:81:
                    86:b8:9f:77:3a:87:d0:f4:67:f5:2a:a4:75:fb:47:
                    62:b4:ef:e1:8a:83:48:23:de:ce:cd:f9:7f:b1:2c:
                    42:a5:0f:19:05:c7:63:3b:94:0a:65:36:6f:0a:81:
                    fc:0c:9e:09:3e:68:51:f4:80:95:84:9b:7d:e0:50:
                    00:6f:e5:8e:f4:44:f9:ba:3d:fe:f9:05:91:0a:22:
                    7f:69:e0:d6:31:e8:0f:44:89:2f:f2:e4:66:7b:17:
                    b0:31:44:54:c2:15:d4:08:f7:65:70:cc:2e:68:b0:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:48:7D:E1:92:C4:A1:74:74:0E:A2:58:32:B7:F7:4F:52:67:8B:37
            X509v3 Authority Key Identifier:
                keyid:70:02:F5:9F:D0:3B:B6:A6:F0:CC:38:9F:A8:97:3A:48:D4:7D:CA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAL1n9A7tqbwzDifqJc6SNR9ymE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/526249-aec9-4c98-8184-96366bd0f5fb/1/cAL1n9A7tqbwzDifqJc6SNR9ymE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/526249-aec9-4c98-8184-96366bd0f5fb/1/cAL1n9A7tqbwzDifqJc6SNR9ymE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d9:71:99:e0:b5:31:df:41:71:21:50:c9:66:09:9a:f9:f8:
         2c:68:dc:3c:ae:5c:33:53:ff:f6:50:0f:2c:85:9a:10:b1:fd:
         36:44:fb:45:9d:68:36:26:5c:15:55:26:91:e0:f3:c4:04:50:
         88:5a:a2:7e:18:a7:6f:91:db:e8:4c:71:5d:d5:3f:ca:3b:10:
         ac:80:ae:04:03:7a:af:45:7c:62:5d:be:a6:90:4a:34:e6:f2:
         54:d5:ab:26:26:55:19:2c:ad:a4:18:5c:91:d2:63:78:b1:a2:
         6f:09:02:fe:31:65:b6:85:e5:88:0f:92:24:79:97:6c:8c:5b:
         d2:a0:7f:59:3a:36:0b:53:15:b1:cb:14:51:b7:34:56:79:0d:
         e2:d2:54:bb:b1:8a:d9:8c:44:cf:84:c5:de:eb:20:6c:5a:37:
         b5:3d:a7:91:9b:35:96:57:c0:f4:67:5f:a9:cf:5f:6c:f6:8b:
         b6:91:60:36:aa:6b:87:89:ed:8a:94:d7:6d:5b:8d:61:dd:e9:
         76:eb:f4:f6:b0:0e:3d:a9:f4:c9:3d:4c:fe:fa:2d:5d:f1:50:
         d3:47:cf:22:19:d6:ba:05:4a:09:72:7e:78:55:3d:eb:89:ea:
         2d:ca:c0:81:ec:76:a5:cc:72:31:1b:9e:7f:80:f8:b0:f1:ef:
         42:86:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----