Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/pGPrgkIxdQvpqfHYcEAM6eCYv5M.mft
File:                     pGPrgkIxdQvpqfHYcEAM6eCYv5M.mft (raw, json)
Hash identifier:          W4BydrYOQM7bLoKblqGlje2zCSkR2e86hPtQrxJ8E8w=
Subject key identifier:   DF:51:8A:65:29:AE:B4:65:7F:67:3E:34:5F:15:65:5D:5C:EC:97:BD
Authority key identifier: A4:63:EB:82:42:31:75:0B:E9:A9:F1:D8:70:40:0C:E9:E0:98:BF:93
Certificate issuer:       /CN=a463eb824231750be9a9f1d870400ce9e098bf93
Certificate serial:       018972C966ABA5DA25D712A5703D3CC0F13F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pGPrgkIxdQvpqfHYcEAM6eCYv5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/pGPrgkIxdQvpqfHYcEAM6eCYv5M.mft
Manifest number:          081A
Signing time:             Thu 20 Jul 2023 10:12:28 +0000
Manifest this update:     Thu 20 Jul 2023 10:12:28 +0000
Manifest next update:     Fri 21 Jul 2023 10:12:28 +0000
Files and hashes:         1: pGPrgkIxdQvpqfHYcEAM6eCYv5M.crl (hash: DRj9NRxYzRHWOhkHovqgbNCf3No3+VZKpaeG1JY/Ij4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:c9:66:ab:a5:da:25:d7:12:a5:70:3d:3c:c0:f1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a463eb824231750be9a9f1d870400ce9e098bf93
        Validity
            Not Before: Jul 20 10:12:28 2023 GMT
            Not After : Jul 21 10:12:28 2023 GMT
        Subject: CN=df518a6529aeb4657f673e345f15655d5cec97bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:6b:e6:4e:e8:7c:44:b6:25:82:e4:29:93:
                    d3:79:f8:37:1a:58:bf:db:d7:1e:8d:6b:b0:34:ee:
                    2c:b3:a3:15:9b:4b:38:dc:db:b1:65:b4:ba:09:32:
                    c6:6d:4f:14:dc:bc:af:5b:72:b4:0b:d6:5a:db:b2:
                    59:3a:33:04:c6:83:21:c8:be:fb:e5:4a:50:e0:16:
                    ae:92:9f:bd:26:42:98:f5:e0:68:3b:2d:24:b4:a9:
                    a2:90:dc:79:e3:05:c9:5e:e8:8b:36:c5:f7:15:10:
                    5b:9a:4d:ce:28:e3:63:0c:52:04:88:8b:69:2a:dc:
                    6d:cf:e5:8c:25:cd:00:0d:fe:82:8f:ff:8f:d4:b5:
                    97:a1:80:38:59:ff:5c:c0:fd:db:a9:c3:f0:90:25:
                    28:bc:1b:07:b6:b1:96:65:6a:47:9d:2e:16:b1:cf:
                    04:78:06:16:48:d9:91:84:01:7a:01:e6:6d:41:fb:
                    70:68:5a:e1:85:e7:2a:64:a5:99:c3:e6:5a:c8:a0:
                    b4:ed:26:dc:b8:6b:1c:37:a0:bb:6b:f6:79:c6:1d:
                    e9:66:33:b5:26:34:fd:21:67:cc:cf:3e:a4:f2:a7:
                    53:f8:5c:b3:93:1e:8c:f9:3a:cc:c4:08:c4:d0:58:
                    86:d4:b3:11:25:4c:b1:75:2a:68:36:84:3f:5e:34:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:51:8A:65:29:AE:B4:65:7F:67:3E:34:5F:15:65:5D:5C:EC:97:BD
            X509v3 Authority Key Identifier:
                keyid:A4:63:EB:82:42:31:75:0B:E9:A9:F1:D8:70:40:0C:E9:E0:98:BF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pGPrgkIxdQvpqfHYcEAM6eCYv5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/pGPrgkIxdQvpqfHYcEAM6eCYv5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/pGPrgkIxdQvpqfHYcEAM6eCYv5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:77:33:fa:9a:d9:fc:9e:40:ba:89:df:e3:6c:3f:11:c0:e4:
         f4:b9:2a:90:35:82:2b:7f:65:da:16:83:88:bf:27:00:7d:51:
         91:3a:bc:b2:5c:f3:e5:46:91:97:22:c7:e8:39:c4:e1:d1:02:
         e6:99:8d:aa:f0:16:36:3f:c6:31:ff:85:0e:34:04:72:75:e1:
         ac:fd:76:b4:4e:8d:4b:d5:a2:ad:c6:2e:7f:db:87:27:f0:54:
         3d:38:1c:38:4f:0e:f1:d4:76:19:27:cc:79:95:a1:dd:43:da:
         49:05:9e:9f:e6:74:1b:bb:b1:0e:ea:fd:4e:60:be:1b:48:ab:
         75:7c:ad:fe:a5:79:2e:2e:a2:a4:4d:ff:ae:39:1b:8c:2f:e4:
         d4:42:2d:53:19:34:c3:e2:1b:ea:3d:b1:6e:a2:f0:00:93:ef:
         e9:d6:bb:7d:ba:40:36:96:d5:e1:f9:a0:02:3a:af:ac:15:28:
         ae:62:f7:30:65:6a:58:03:73:80:28:f2:37:f2:c0:3a:02:b4:
         6d:88:f4:a3:8e:8b:df:5b:dc:53:c0:00:4e:42:d7:53:7a:1a:
         5e:3e:f7:7b:6a:d6:fb:04:58:31:2e:4a:a0:d2:67:e8:33:99:
         42:5d:56:8b:ed:96:1a:04:74:83:7b:44:e6:f1:6d:54:5f:8a:
         22:0c:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----