Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/700df3-e9a0-453b-bf8a-2fb68ac54e01/1/QTHR3bajVdk8zt4-LBo42UnRaD4.mft
File:                     QTHR3bajVdk8zt4-LBo42UnRaD4.mft (raw, json)
Hash identifier:          BCMvLqdAOKX6Y7Dp09+Ev/cT5LFixnvnWHwu+gSkIP8=
Subject key identifier:   D4:61:CC:9C:6B:53:D7:60:89:D7:3A:9D:A0:D4:D5:9D:A1:B4:88:A0
Authority key identifier: 41:31:D1:DD:B6:A3:55:D9:3C:CE:DE:3E:2C:1A:38:D9:49:D1:68:3E
Certificate issuer:       /CN=4131d1ddb6a355d93ccede3e2c1a38d949d1683e
Certificate serial:       018B3CA664D5416DAEFF4AC1E6572BAC941C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTHR3bajVdk8zt4-LBo42UnRaD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/700df3-e9a0-453b-bf8a-2fb68ac54e01/1/QTHR3bajVdk8zt4-LBo42UnRaD4.mft
Manifest number:          086F
Signing time:             Tue 17 Oct 2023 08:00:19 +0000
Manifest this update:     Tue 17 Oct 2023 08:00:19 +0000
Manifest next update:     Wed 18 Oct 2023 08:00:19 +0000
Files and hashes:         1: QTHR3bajVdk8zt4-LBo42UnRaD4.crl (hash: 52R27Ct0YFAj9kvNRTxaCe1n99Jl9W+Tr74On3wnG0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:a6:64:d5:41:6d:ae:ff:4a:c1:e6:57:2b:ac:94:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4131d1ddb6a355d93ccede3e2c1a38d949d1683e
        Validity
            Not Before: Oct 17 08:00:19 2023 GMT
            Not After : Oct 18 08:00:19 2023 GMT
        Subject: CN=d461cc9c6b53d76089d73a9da0d4d59da1b488a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:6b:4d:f7:05:58:95:10:d0:9d:b1:cb:26:
                    5a:4e:72:18:cd:76:15:ee:cd:59:f9:f7:9a:d7:c9:
                    e5:4d:3d:fc:9d:e5:44:4d:e8:c8:17:5b:0f:fa:a4:
                    2b:e3:95:54:ff:2f:2f:53:50:70:8b:c1:43:43:16:
                    d2:48:87:ad:a3:a6:15:f4:4d:4d:d5:60:24:de:eb:
                    9f:75:fa:d4:0c:da:47:4f:8b:e2:ab:74:b3:f7:fc:
                    98:ac:57:75:eb:bb:85:ca:0f:f1:98:a7:db:1c:cd:
                    d7:53:af:0c:de:69:41:f6:63:5c:89:da:1c:c9:f5:
                    09:bb:aa:15:10:89:8e:d5:23:34:d2:e5:d6:3d:e0:
                    57:8a:2a:0b:a3:73:34:fb:d9:3f:9c:dd:e1:49:41:
                    35:22:4b:50:44:eb:2b:2b:f3:42:5c:43:f5:76:f5:
                    88:67:7e:52:e6:b9:bc:ca:3a:8a:75:7f:91:13:76:
                    9c:a8:e0:b4:32:8d:66:67:5d:15:0f:d7:1e:48:93:
                    be:78:89:14:31:db:54:20:43:8d:84:17:49:9a:70:
                    37:78:3c:5f:4b:2a:4a:f7:c5:da:ec:9d:fe:c7:32:
                    b0:dd:e1:1c:bf:82:6d:b7:7c:2e:77:bb:57:ac:c3:
                    b4:78:a7:a9:15:d3:b2:7d:25:aa:f7:2a:e0:be:db:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:61:CC:9C:6B:53:D7:60:89:D7:3A:9D:A0:D4:D5:9D:A1:B4:88:A0
            X509v3 Authority Key Identifier:
                keyid:41:31:D1:DD:B6:A3:55:D9:3C:CE:DE:3E:2C:1A:38:D9:49:D1:68:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTHR3bajVdk8zt4-LBo42UnRaD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/700df3-e9a0-453b-bf8a-2fb68ac54e01/1/QTHR3bajVdk8zt4-LBo42UnRaD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/700df3-e9a0-453b-bf8a-2fb68ac54e01/1/QTHR3bajVdk8zt4-LBo42UnRaD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:0c:b9:95:d3:63:b1:e8:87:d8:ee:03:48:8c:04:33:87:4f:
         70:40:56:b7:41:83:01:ee:98:63:01:a2:7b:bb:33:3c:19:e7:
         a3:bb:1a:f6:13:9f:b6:7c:74:d2:cf:cd:b0:83:be:f4:71:9d:
         2b:89:99:7d:c5:82:42:7e:ef:89:80:1d:23:be:2f:14:5a:98:
         4e:b0:c3:5b:58:d0:9b:e8:6a:3c:60:f2:64:1a:f9:29:0a:42:
         22:3a:25:c5:f3:ad:f8:b5:d6:7e:76:56:ee:fa:57:80:d4:e1:
         07:b4:6f:58:c8:58:e8:dc:f5:0e:e9:ad:0c:1e:85:df:ae:f2:
         06:52:a9:e2:6c:a3:12:5b:d1:c0:bf:a9:14:54:22:5e:e5:32:
         1b:73:81:33:d7:8c:e5:8e:b3:88:93:68:d2:93:b8:7d:61:15:
         27:0d:d9:af:d5:2a:1f:8b:35:78:39:bd:6b:67:a9:5b:3d:f9:
         b6:63:76:da:bc:48:84:de:7e:01:68:27:b9:95:90:a6:c6:de:
         c6:49:54:47:aa:aa:25:06:bc:56:f9:02:ed:e0:57:3a:bf:69:
         8a:97:4c:c0:87:5a:ae:e1:1e:b0:6d:9c:1e:06:14:92:83:04:
         b0:c8:69:23:7e:e7:ff:eb:34:64:96:86:1c:da:59:ed:2e:7d:
         15:c7:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----