Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a8f09f-9d1d-41dc-869a-ffbdc156eaf4/1/DE1Yp-njkUnyPzX_ZuIdpCRgij0.mft
File:                     DE1Yp-njkUnyPzX_ZuIdpCRgij0.mft (raw, json)
Hash identifier:          7y0HSNB3GLclJa3cctYb2P4JoqMxpISN0vLEUGvUfp4=
Subject key identifier:   A6:37:40:CD:8A:96:E9:58:B5:A8:3D:55:6F:C1:BA:99:F9:54:7E:47
Authority key identifier: 0C:4D:58:A7:E9:E3:91:49:F2:3F:35:FF:66:E2:1D:A4:24:60:8A:3D
Certificate issuer:       /CN=0c4d58a7e9e39149f23f35ff66e21da424608a3d
Certificate serial:       018B938E0EA6BCE87C7798E27F01D38037CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DE1Yp-njkUnyPzX_ZuIdpCRgij0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a8f09f-9d1d-41dc-869a-ffbdc156eaf4/1/DE1Yp-njkUnyPzX_ZuIdpCRgij0.mft
Manifest number:          0F68
Signing time:             Fri 03 Nov 2023 05:00:42 +0000
Manifest this update:     Fri 03 Nov 2023 05:00:42 +0000
Manifest next update:     Sat 04 Nov 2023 05:00:42 +0000
Files and hashes:         1: DE1Yp-njkUnyPzX_ZuIdpCRgij0.crl (hash: IGIxKg0gvTvJMZwQBMkYUOovjC7mEnEWJLUKRXB1DJs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:8e:0e:a6:bc:e8:7c:77:98:e2:7f:01:d3:80:37:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4d58a7e9e39149f23f35ff66e21da424608a3d
        Validity
            Not Before: Nov  3 05:00:42 2023 GMT
            Not After : Nov  4 05:00:42 2023 GMT
        Subject: CN=a63740cd8a96e958b5a83d556fc1ba99f9547e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:f8:10:36:c8:eb:2b:26:22:e7:b6:a4:85:
                    9b:dd:6d:74:43:6c:e6:5b:39:42:82:1a:6a:9b:1b:
                    68:7d:64:b4:2d:9a:d2:a6:16:a8:f6:07:91:a2:3f:
                    c0:cb:3b:01:8f:4d:6f:8a:d6:f2:16:99:bc:00:21:
                    b2:a0:b5:38:c6:a3:f8:6b:97:59:d9:cc:57:ca:b0:
                    91:9e:66:2b:ea:4f:a4:86:71:86:56:ff:23:a9:60:
                    eb:c8:9b:9a:d8:31:02:6a:56:01:82:25:25:a9:8c:
                    13:df:b1:26:a3:e7:e5:5d:a4:ba:fe:d1:c2:9b:83:
                    96:2e:0d:b8:10:e3:9b:32:f0:55:7d:c0:0c:55:03:
                    9e:99:b0:08:fb:96:fa:d9:8c:a5:3f:c1:63:fa:ea:
                    cc:30:86:b1:6c:e9:c5:e1:2e:d3:79:b2:7d:d3:be:
                    65:05:a8:40:71:c5:b0:dc:b5:ba:78:bb:d8:18:c1:
                    1a:8d:cc:5f:84:5f:72:41:30:88:e5:05:d5:68:0b:
                    e8:7f:0f:c6:bc:ab:31:ca:1e:6d:8a:09:82:56:80:
                    13:e9:9b:54:2e:18:e0:45:b8:5d:ca:1e:e2:52:84:
                    3a:c3:92:c2:f5:39:02:45:d6:3a:20:32:f2:5e:31:
                    2a:0c:2e:54:68:d6:93:21:b8:95:d1:2b:1e:ad:ad:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:37:40:CD:8A:96:E9:58:B5:A8:3D:55:6F:C1:BA:99:F9:54:7E:47
            X509v3 Authority Key Identifier:
                keyid:0C:4D:58:A7:E9:E3:91:49:F2:3F:35:FF:66:E2:1D:A4:24:60:8A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE1Yp-njkUnyPzX_ZuIdpCRgij0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a8f09f-9d1d-41dc-869a-ffbdc156eaf4/1/DE1Yp-njkUnyPzX_ZuIdpCRgij0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a8f09f-9d1d-41dc-869a-ffbdc156eaf4/1/DE1Yp-njkUnyPzX_ZuIdpCRgij0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:8b:8c:64:a0:ed:a6:d7:6f:43:ce:49:72:c1:d9:7b:9d:
         81:18:51:0e:55:59:e4:a1:c6:f7:a9:a5:77:09:cc:3a:22:d0:
         88:fc:68:6c:e4:54:9d:15:14:10:26:df:61:26:65:6c:4e:83:
         de:ff:a8:7e:34:50:f0:87:7b:7a:e3:b8:89:a0:81:7b:08:26:
         b0:ca:be:c9:b3:9b:a2:95:70:67:45:6f:63:04:9b:10:67:ff:
         e2:80:d9:ca:56:21:ea:f5:3c:b5:ec:cd:5c:c7:39:1d:92:78:
         f1:eb:5d:fd:d6:4c:8d:4d:eb:44:05:48:27:2e:26:04:d5:23:
         eb:30:67:63:bb:4f:45:b3:93:76:33:f5:d1:de:15:6d:b0:83:
         94:ef:74:22:83:97:f4:5a:fe:dd:1f:64:b5:fc:46:63:80:cd:
         20:ba:55:70:df:fd:e4:01:d7:65:8c:32:5f:84:a4:59:a8:c3:
         5c:4f:21:1f:7c:d9:97:f7:1f:79:1a:75:56:2f:43:b8:62:c1:
         bc:28:2a:63:b7:d9:62:4f:b6:78:6d:18:fc:73:16:cb:1a:9e:
         e6:8d:dd:f3:95:58:ca:99:07:a7:ad:9f:65:ea:94:f8:6f:b1:
         24:7d:68:bc:8e:fa:c7:00:7f:46:8e:60:07:4d:88:41:2a:f8:
         21:63:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----