Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b8e082-1afb-42c1-9be9-6632118c24d9/1/LjVrMaT4btJNJSu77dBUI53YSPI.mft
File:                     LjVrMaT4btJNJSu77dBUI53YSPI.mft (raw, json)
Hash identifier:          AGJYCyluH3gnlE388upgZwOFENe7E89jUg2JPSpkNvU=
Subject key identifier:   E9:BD:63:A5:3A:C6:1C:78:66:01:EA:F6:2C:54:E0:4B:93:3C:38:20
Authority key identifier: 2E:35:6B:31:A4:F8:6E:D2:4D:25:2B:BB:ED:D0:54:23:9D:D8:48:F2
Certificate issuer:       /CN=2e356b31a4f86ed24d252bbbedd054239dd848f2
Certificate serial:       0185ED22CEBE9941625503EF831486AE7D31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjVrMaT4btJNJSu77dBUI53YSPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/b8e082-1afb-42c1-9be9-6632118c24d9/1/LjVrMaT4btJNJSu77dBUI53YSPI.mft
Manifest number:          0758
Signing time:             Thu 26 Jan 2023 08:12:39 +0000
Manifest this update:     Thu 26 Jan 2023 08:12:39 +0000
Manifest next update:     Fri 27 Jan 2023 08:12:39 +0000
Files and hashes:         1: LjVrMaT4btJNJSu77dBUI53YSPI.crl (hash: UZ+JjDflqSv0IMphpd0cg6kIVPUWhd8rp5BSqH1nBys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ed:22:ce:be:99:41:62:55:03:ef:83:14:86:ae:7d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e356b31a4f86ed24d252bbbedd054239dd848f2
        Validity
            Not Before: Jan 26 08:12:39 2023 GMT
            Not After : Jan 27 08:12:39 2023 GMT
        Subject: CN=e9bd63a53ac61c786601eaf62c54e04b933c3820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:85:32:8c:e8:74:f1:7a:d6:5c:62:12:33:
                    b7:25:c4:9d:2d:ea:25:8c:4e:53:7f:9f:2e:61:b4:
                    08:ba:f5:44:88:9b:1b:e0:33:dd:a4:85:2e:1a:9a:
                    7d:21:45:ed:39:70:58:ef:f7:c1:9d:2f:1f:1d:af:
                    1a:b0:e4:08:8e:66:74:95:e9:7f:72:02:60:ab:9b:
                    57:28:9a:8c:06:74:42:4a:03:0e:a9:03:da:de:8c:
                    65:30:ce:37:59:39:b9:99:87:19:4c:ff:b3:de:ec:
                    32:7e:28:bc:f9:79:c0:4c:07:c6:67:5e:cc:ae:47:
                    8e:60:52:9a:e1:52:9c:06:a1:74:5b:97:ab:ba:e5:
                    d7:b4:0a:b3:34:57:ed:96:30:b6:f1:f0:ee:72:26:
                    da:e0:64:d6:6c:6c:e9:97:7a:ba:a1:e6:91:b9:dd:
                    df:13:b6:5a:0d:c0:6b:97:78:f9:b2:cb:18:f2:be:
                    00:43:df:18:ce:99:a7:ce:0d:3e:0e:c6:66:62:03:
                    d6:04:70:f5:16:89:47:ea:f6:a1:34:7b:4d:8b:cb:
                    74:8c:62:f1:2c:02:eb:68:ef:1c:8d:2e:b1:e4:b7:
                    af:df:97:ab:cc:7d:36:ac:23:fa:30:0b:69:7b:83:
                    07:79:72:69:26:2c:1f:c9:fc:b0:bc:c4:67:40:84:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:63:A5:3A:C6:1C:78:66:01:EA:F6:2C:54:E0:4B:93:3C:38:20
            X509v3 Authority Key Identifier:
                keyid:2E:35:6B:31:A4:F8:6E:D2:4D:25:2B:BB:ED:D0:54:23:9D:D8:48:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjVrMaT4btJNJSu77dBUI53YSPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b8e082-1afb-42c1-9be9-6632118c24d9/1/LjVrMaT4btJNJSu77dBUI53YSPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b8e082-1afb-42c1-9be9-6632118c24d9/1/LjVrMaT4btJNJSu77dBUI53YSPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6d:c6:ca:0e:d2:2f:b2:ce:53:2e:47:6a:46:b4:fc:d1:6e:
         7d:4c:4e:33:17:8d:09:5c:66:a0:d5:fc:bb:37:10:e5:4a:c6:
         18:6d:12:b3:d3:a9:43:ec:25:dd:d5:e8:08:0a:f3:ef:05:ff:
         53:5f:be:8d:79:67:4c:f3:63:59:8b:da:0b:c7:8c:a9:3b:6f:
         5b:80:78:75:30:e3:c0:c0:da:7a:ea:c8:95:58:77:78:c8:1f:
         2c:c2:f3:36:0a:9b:0d:f8:4d:52:b6:d5:75:85:d0:b4:23:cf:
         12:53:83:37:98:02:1b:22:59:02:18:f8:fa:5f:f4:7a:49:2b:
         8d:24:22:b3:3d:56:fc:4d:b5:69:9d:81:93:8d:7c:e1:a1:e3:
         f5:45:98:85:cb:4c:51:12:f7:d6:00:e2:ef:56:fd:4b:06:c2:
         19:54:7c:b4:e5:00:c8:0f:b3:b6:0a:06:1c:86:0d:92:88:e8:
         a7:ba:8e:ee:86:a8:bb:df:c4:0e:25:46:98:dc:2f:34:84:a1:
         8c:3c:40:bb:0c:5e:12:e9:d5:28:50:36:a1:00:e1:ee:38:0c:
         f1:41:1e:e7:49:29:ec:7d:03:15:ff:3b:3c:5d:f4:72:4d:08:
         fa:b1:78:1e:ef:1b:04:6a:6c:69:65:cf:28:44:8e:f4:89:38:
         9b:c4:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----