Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.mft
File:                     kXOnu43UBf0BvCyNw8LBMmf6BuU.mft (raw, json)
Hash identifier:          +waXuKT6olMwaE6y0vPwK0g04kv0ex20lYBgOqCky70=
Subject key identifier:   9A:50:C2:4D:23:F5:5E:92:E4:1C:F6:09:E4:65:2E:53:B7:1F:92:F6
Authority key identifier: 91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
Certificate issuer:       /CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
Certificate serial:       018BEAACBC6586974DC4D5C5389371DE6017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.mft
Manifest number:          08D5
Signing time:             Mon 20 Nov 2023 03:01:10 +0000
Manifest this update:     Mon 20 Nov 2023 03:01:10 +0000
Manifest next update:     Tue 21 Nov 2023 03:01:10 +0000
Files and hashes:         1: kXOnu43UBf0BvCyNw8LBMmf6BuU.crl (hash: Kb7yrldHGhb+Rz7z826b9L39fQSeCzn5vNU1NaZjKpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:ac:bc:65:86:97:4d:c4:d5:c5:38:93:71:de:60:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
        Validity
            Not Before: Nov 20 03:01:10 2023 GMT
            Not After : Nov 21 03:01:10 2023 GMT
        Subject: CN=9a50c24d23f55e92e41cf609e4652e53b71f92f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:31:4a:1a:c5:db:1c:4a:1c:65:e9:b1:f5:
                    06:1b:b7:16:24:e1:a6:e8:e1:a9:da:e2:c1:dc:df:
                    3a:2d:27:59:21:bb:3e:22:7d:90:58:07:7a:34:3e:
                    63:33:6e:98:78:03:e9:d6:c7:97:98:f9:00:b6:93:
                    ce:d2:a7:2a:dd:2b:3c:39:c5:22:40:f1:53:e7:2f:
                    6d:ce:62:9a:f3:cb:a4:8e:04:b9:2f:3c:5c:63:85:
                    09:1a:2d:54:97:7a:04:a7:ca:e2:75:30:33:56:10:
                    2f:96:42:aa:e8:a9:4a:6f:82:09:7d:a1:49:9a:42:
                    61:0c:6e:c5:8f:af:e6:56:68:5e:80:78:4d:38:01:
                    b3:94:d0:54:7c:62:40:85:b2:9d:f6:84:26:14:b8:
                    41:52:33:96:7f:74:fa:6e:cf:8e:b9:6c:dd:48:e1:
                    a1:46:19:b2:3c:e8:1d:cb:26:0c:2b:cf:93:3b:64:
                    86:9e:50:d7:b6:84:c2:b6:0c:47:77:06:6e:35:11:
                    27:7e:94:e9:53:f9:72:b2:95:c8:f7:0d:63:e3:54:
                    bd:48:e1:25:9f:97:49:b4:65:d1:e3:81:03:c1:75:
                    35:16:8f:f3:3f:55:83:73:58:79:75:23:25:fb:a7:
                    93:50:16:1b:30:05:47:d6:89:fa:84:b6:4e:b4:19:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:50:C2:4D:23:F5:5E:92:E4:1C:F6:09:E4:65:2E:53:B7:1F:92:F6
            X509v3 Authority Key Identifier:
                keyid:91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:85:a5:3e:ec:23:25:1e:de:8c:19:0f:0f:c0:6f:0a:55:0d:
         42:ea:4b:61:9f:ce:df:fc:6b:84:29:bb:8b:79:fc:34:7e:a4:
         e4:35:61:78:3d:da:33:06:d4:83:20:c7:1d:b4:66:5b:a9:c3:
         41:0b:6f:d2:9e:86:42:c9:d7:10:92:f0:44:fa:8c:de:68:9b:
         4e:09:62:3a:d1:55:da:86:cd:57:81:6a:eb:40:56:ee:41:af:
         d9:40:37:e8:12:cd:e3:d1:78:36:f8:e6:fa:a4:e5:2e:05:12:
         fb:2c:d3:63:75:66:70:3b:01:f3:73:e6:dc:d5:bc:b7:9a:88:
         2f:a1:2d:14:43:14:71:a8:22:60:36:22:e9:48:27:31:dc:64:
         14:3a:c0:4c:9c:20:97:ce:c0:c7:2e:d4:3b:b0:6c:bc:53:ca:
         70:b7:3a:38:7c:d6:07:d3:6e:09:cb:43:d5:1e:8e:69:cf:cb:
         45:31:db:26:79:fe:0d:53:7b:e6:9f:83:32:23:ab:fb:88:2b:
         2e:2e:ad:b6:17:f3:62:77:24:ab:48:d6:ac:51:ee:5d:f4:ec:
         8c:61:b2:81:34:9d:81:5c:75:0b:77:08:70:01:13:d0:18:4b:
         65:8f:a1:f4:05:c8:a6:68:09:1a:3f:3d:69:04:0f:e5:3a:6f:
         69:16:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----