Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/946128-0cca-4cc1-a3b9-e1f1ade65f3e/1/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.mft
File:                     gvbPv8X2ezD6xFcSw8QYs6R_-8Q.mft (raw, json)
Hash identifier:          ALEtK0x0OTchDH1ZRdvVCIjHhttzBx7dS4hiIviLSRo=
Subject key identifier:   75:3B:A5:D6:18:D6:A5:39:9D:2A:78:29:C0:9E:68:37:CE:AA:40:5B
Authority key identifier: 82:F6:CF:BF:C5:F6:7B:30:FA:C4:57:12:C3:C4:18:B3:A4:7F:FB:C4
Certificate issuer:       /CN=82f6cfbfc5f67b30fac45712c3c418b3a47ffbc4
Certificate serial:       018BE28567CE2CE3B20757FCCF8137AD70FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/946128-0cca-4cc1-a3b9-e1f1ade65f3e/1/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.mft
Manifest number:          019F
Signing time:             Sat 18 Nov 2023 13:01:15 +0000
Manifest this update:     Sat 18 Nov 2023 13:01:15 +0000
Manifest next update:     Sun 19 Nov 2023 13:01:15 +0000
Files and hashes:         1: gvbPv8X2ezD6xFcSw8QYs6R_-8Q.crl (hash: 5qFAoxzIVRZ85N94Kxa4N5LhcluPh+Oeb4DYvyKV1Ug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:e2:85:67:ce:2c:e3:b2:07:57:fc:cf:81:37:ad:70:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f6cfbfc5f67b30fac45712c3c418b3a47ffbc4
        Validity
            Not Before: Nov 18 13:01:15 2023 GMT
            Not After : Nov 19 13:01:15 2023 GMT
        Subject: CN=753ba5d618d6a5399d2a7829c09e6837ceaa405b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:d9:7f:dc:f7:a4:d7:a1:c2:c1:9a:46:54:
                    2f:3c:d3:4d:f7:6a:9d:90:c8:2f:24:ef:ec:15:e4:
                    65:c8:2d:d9:23:87:68:2e:2e:da:2e:3d:c4:dc:d1:
                    14:5e:63:4d:fd:5b:45:59:03:99:fa:dc:64:09:44:
                    30:41:71:1d:9b:57:58:0d:05:c6:b3:d6:91:fa:01:
                    94:b3:af:7f:91:b8:90:18:e8:5a:de:32:69:cd:d7:
                    e2:d0:04:c0:3b:90:b6:77:eb:90:f1:cb:dd:a6:61:
                    6a:11:f8:3e:60:45:35:a2:fe:5b:68:ae:b8:25:ae:
                    ed:7d:a4:bb:07:c6:69:89:3c:22:da:b6:07:34:a8:
                    32:cd:27:80:52:4a:fe:19:9b:ed:33:1b:d3:60:eb:
                    42:24:47:48:0f:d1:89:36:19:76:cc:08:50:2d:c3:
                    32:10:fd:70:e7:ae:56:b8:d3:72:6f:21:09:af:60:
                    c5:c3:1c:45:48:92:f2:fc:ac:3f:d4:0e:09:4c:8b:
                    eb:d9:39:2a:ec:a6:40:b1:25:a2:ec:4f:55:f9:0f:
                    7a:0b:e4:0b:08:99:c1:3b:40:9f:d9:1f:f4:77:c3:
                    7c:c5:72:f0:2a:cc:96:f6:8e:96:75:d0:31:19:44:
                    8b:42:65:7a:6b:d8:c6:60:f2:f4:67:19:77:9f:13:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3B:A5:D6:18:D6:A5:39:9D:2A:78:29:C0:9E:68:37:CE:AA:40:5B
            X509v3 Authority Key Identifier:
                keyid:82:F6:CF:BF:C5:F6:7B:30:FA:C4:57:12:C3:C4:18:B3:A4:7F:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/946128-0cca-4cc1-a3b9-e1f1ade65f3e/1/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/946128-0cca-4cc1-a3b9-e1f1ade65f3e/1/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5b:6e:1f:46:b6:0c:ed:79:95:8c:96:9d:75:93:71:bc:a2:
         36:74:e2:ed:a4:b4:8c:fa:89:e3:36:1d:85:24:dc:85:cf:b6:
         55:bb:fc:71:0c:66:61:2e:20:23:43:3b:d3:65:83:a4:9d:b1:
         0f:97:b1:62:52:4b:95:f2:89:5b:71:1c:b0:3e:b2:23:4f:ba:
         1f:1b:cd:08:ba:6d:f1:06:8e:eb:5b:40:91:35:05:55:42:63:
         96:8d:1f:4b:ff:19:66:eb:55:df:40:1d:0c:44:c3:cb:fa:7d:
         1f:f2:8c:b7:8b:79:00:8f:a0:d1:6f:7c:ea:cc:d4:d6:24:fb:
         06:23:e2:69:0b:a9:1f:ce:b8:64:a0:f6:6c:15:f0:03:40:77:
         de:58:fb:f9:4d:e4:c2:a9:dd:5d:bc:a0:2b:45:73:b5:47:c9:
         7f:c2:d7:52:35:db:45:6d:43:81:43:1b:b1:2a:4b:8f:a0:93:
         67:bf:35:51:23:6a:5a:cc:b6:78:e3:7c:f2:05:4c:a8:c2:8e:
         85:6e:05:62:e5:7f:30:24:b5:46:ff:c3:45:e5:3c:19:67:33:
         80:7f:e8:75:22:5a:f6:90:a1:8d:27:a2:7a:3d:c6:26:c6:5d:
         a7:08:90:43:f1:dd:9b:f5:fb:a3:d8:3a:f1:f8:04:4e:c6:46:
         48:b0:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----