Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.mft
File:                     _c1FFqJ7uDhIEQyzIIK8_KnzaJA.mft (raw, json)
Hash identifier:          jC7qGa1DLEEcBwdXa9XlsPLMKYuzCEZ54EShuSoSBjo=
Subject key identifier:   6D:EC:97:98:C2:FB:EC:4F:FF:EE:19:97:16:57:4C:3A:36:06:7B:55
Authority key identifier: FD:CD:45:16:A2:7B:B8:38:48:11:0C:B3:20:82:BC:FC:A9:F3:68:90
Certificate issuer:       /CN=fdcd4516a27bb83848110cb32082bcfca9f36890
Certificate serial:       018AF86DF97C78321A830626E035EB75FADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.mft
Manifest number:          08B1
Signing time:             Wed 04 Oct 2023 02:04:31 +0000
Manifest this update:     Wed 04 Oct 2023 02:04:31 +0000
Manifest next update:     Thu 05 Oct 2023 02:04:31 +0000
Files and hashes:         1: _c1FFqJ7uDhIEQyzIIK8_KnzaJA.crl (hash: wtFwPnQg72NlBG5PCpeasd71V2ed7SYJ9aEQgnd+JUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:6d:f9:7c:78:32:1a:83:06:26:e0:35:eb:75:fa:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcd4516a27bb83848110cb32082bcfca9f36890
        Validity
            Not Before: Oct  4 02:04:31 2023 GMT
            Not After : Oct  5 02:04:31 2023 GMT
        Subject: CN=6dec9798c2fbec4fffee199716574c3a36067b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e6:89:53:57:d3:24:3f:d1:b9:37:47:1b:ca:
                    2d:09:9d:cf:61:7d:06:53:2c:ef:1e:97:c0:a2:ff:
                    37:6a:63:b4:6b:0f:a1:52:e1:72:54:cd:29:e6:15:
                    74:c0:42:c6:67:49:1c:f1:d3:73:2c:64:aa:22:63:
                    a8:3c:e1:92:17:c5:02:5e:1d:d3:2b:22:e5:99:ec:
                    1e:78:5b:62:d2:60:30:60:95:53:43:76:7e:ae:0d:
                    4f:8a:89:a4:bc:e7:13:fd:d3:e3:21:9d:bc:2b:89:
                    4d:03:c2:41:17:4d:60:50:6f:f7:39:74:2b:01:75:
                    f5:9a:5d:42:48:62:c5:55:b3:ad:c3:bf:14:2a:46:
                    2f:11:6a:cc:b5:37:ba:d1:bd:74:ed:61:c8:d6:e1:
                    90:ee:5e:5e:a4:81:2d:b4:fe:2d:38:25:50:0c:cd:
                    f5:5c:1f:2b:a9:c8:3a:30:19:94:99:11:4b:70:02:
                    3d:c0:46:bd:52:ee:be:e3:75:5f:ef:2d:de:32:68:
                    94:4d:d0:67:cb:9c:d9:4c:1d:1a:89:25:06:ef:c2:
                    8d:97:6a:21:74:fa:33:66:94:f7:bd:72:18:42:7e:
                    b9:81:0f:df:53:15:f3:01:16:3c:d9:ea:6b:93:00:
                    9e:a7:12:b3:b1:bf:15:f0:e5:fb:f0:b2:9b:77:3a:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EC:97:98:C2:FB:EC:4F:FF:EE:19:97:16:57:4C:3A:36:06:7B:55
            X509v3 Authority Key Identifier:
                keyid:FD:CD:45:16:A2:7B:B8:38:48:11:0C:B3:20:82:BC:FC:A9:F3:68:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:1a:7d:ca:58:66:22:97:66:a6:19:4f:d4:48:b9:95:16:
         0a:31:77:6a:e0:28:3a:d2:9f:b7:e5:23:11:b5:c5:68:c8:f0:
         ee:56:6c:4e:1f:34:14:89:85:5d:ff:dd:de:80:eb:59:83:4b:
         93:40:95:70:3c:2d:dd:4e:a4:ec:f7:cd:4c:97:01:bc:d6:3f:
         a2:f4:1a:30:77:fb:e3:b3:43:55:a3:66:e2:17:d6:14:ea:63:
         bf:5f:98:59:f1:64:92:a1:45:3b:4a:20:1a:79:8f:0d:7d:d8:
         2c:58:35:e3:66:ce:e1:f4:3f:ad:05:a6:45:e2:aa:c5:1f:46:
         05:05:09:6b:4a:ce:f6:b4:88:51:c5:26:ea:7a:2e:ff:50:b2:
         11:c9:6f:82:31:4c:ab:80:6d:6c:7c:73:00:9a:bb:ad:1e:38:
         7c:6d:3b:16:2c:fe:b2:27:c3:9f:d8:29:1f:0a:d8:25:f2:73:
         74:73:cd:b2:5e:11:8b:0a:df:10:18:44:50:d3:53:f6:cc:0b:
         29:95:2c:1d:96:91:b3:5e:b8:5a:c5:b4:15:43:79:bb:84:db:
         b0:f5:4c:71:da:50:5c:f4:a5:a3:3b:40:b3:2b:e5:0e:d4:83:
         cf:91:69:8d:2d:7c:53:b3:5e:7e:7d:9a:9e:5c:aa:a3:25:6f:
         46:6e:9d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----