Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/2c36c9-e101-4022-94c7-dbb6de45e0ee/1/zZPSTXSg9DJcgckcOd1MyFa8lTI.mft
File:                     zZPSTXSg9DJcgckcOd1MyFa8lTI.mft (raw, json)
Hash identifier:          5+SdAouUecP81JmxV/wmWGAuCmepJDGGxWW/H+9QNd8=
Subject key identifier:   36:EC:09:75:56:F4:25:3E:8D:C9:F8:59:E1:32:7A:01:DA:E1:9A:B7
Authority key identifier: CD:93:D2:4D:74:A0:F4:32:5C:81:C9:1C:39:DD:4C:C8:56:BC:95:32
Certificate issuer:       /CN=cd93d24d74a0f4325c81c91c39dd4cc856bc9532
Certificate serial:       018A05C1EB228A239B26C9D0DB61C24C7C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZPSTXSg9DJcgckcOd1MyFa8lTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/2c36c9-e101-4022-94c7-dbb6de45e0ee/1/zZPSTXSg9DJcgckcOd1MyFa8lTI.mft
Manifest number:          022C
Signing time:             Thu 17 Aug 2023 23:08:29 +0000
Manifest this update:     Thu 17 Aug 2023 23:08:29 +0000
Manifest next update:     Fri 18 Aug 2023 23:08:29 +0000
Files and hashes:         1: zZPSTXSg9DJcgckcOd1MyFa8lTI.crl (hash: asSw8rXWD91qOxJGLaBNlVgLRR4ndNt0N4sQMjMirec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:05:c1:eb:22:8a:23:9b:26:c9:d0:db:61:c2:4c:7c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd93d24d74a0f4325c81c91c39dd4cc856bc9532
        Validity
            Not Before: Aug 17 23:08:29 2023 GMT
            Not After : Aug 18 23:08:29 2023 GMT
        Subject: CN=36ec097556f4253e8dc9f859e1327a01dae19ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:06:73:e0:3c:ab:1e:dd:ab:a6:0f:76:18:d7:
                    40:b2:f8:c0:58:2e:18:2d:61:61:12:9d:78:74:9f:
                    f3:b5:b5:ae:91:11:68:ce:71:7b:b7:86:07:8c:81:
                    81:e1:30:44:39:7b:3a:bc:8a:b2:a8:f7:7d:63:1a:
                    ec:b5:cd:bd:3d:07:70:7e:d3:64:4e:6d:cc:d3:c2:
                    20:8a:16:84:57:41:4a:c9:dc:68:3c:b9:8a:dd:df:
                    e6:33:1f:e3:89:f9:cd:25:c0:89:cb:da:61:80:53:
                    3b:05:19:2d:bb:4c:b5:21:64:bd:48:e1:6e:50:08:
                    37:90:2c:d7:6c:a5:40:b6:9d:1b:03:95:7f:33:c5:
                    29:79:cd:ee:89:cf:fc:ac:56:dd:f1:44:d8:2a:a0:
                    ce:64:e1:30:9e:66:01:86:ff:bf:d1:99:1a:bf:ce:
                    88:f7:b0:67:18:7d:f7:43:2a:28:b0:4d:19:23:ce:
                    cd:42:4c:3b:87:af:1d:a2:88:be:c2:55:51:0e:ca:
                    09:fd:dd:e1:f7:11:51:75:19:eb:f1:89:b6:f4:10:
                    65:14:b8:8e:06:93:18:0b:c6:9b:02:b8:57:3c:96:
                    e9:88:56:36:22:3b:ca:b7:9d:ea:7a:74:f2:2c:58:
                    05:a0:bd:cb:da:57:7b:19:68:99:06:e2:af:06:f1:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EC:09:75:56:F4:25:3E:8D:C9:F8:59:E1:32:7A:01:DA:E1:9A:B7
            X509v3 Authority Key Identifier:
                keyid:CD:93:D2:4D:74:A0:F4:32:5C:81:C9:1C:39:DD:4C:C8:56:BC:95:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZPSTXSg9DJcgckcOd1MyFa8lTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2c36c9-e101-4022-94c7-dbb6de45e0ee/1/zZPSTXSg9DJcgckcOd1MyFa8lTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2c36c9-e101-4022-94c7-dbb6de45e0ee/1/zZPSTXSg9DJcgckcOd1MyFa8lTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:38:66:15:ae:cb:17:42:49:25:b5:11:3e:af:34:e8:a8:f2:
         d9:1e:8b:fe:b3:5b:59:bd:35:19:ac:a1:58:89:54:1d:a9:79:
         20:fa:8e:97:d0:fc:5f:f0:54:21:f1:9e:09:78:7d:5f:bb:6c:
         17:43:3d:b1:d0:bc:e4:68:02:fd:88:3b:8d:14:f0:13:04:89:
         65:06:72:b4:82:82:41:2f:f6:39:ef:81:f3:42:6c:04:45:38:
         fb:4b:b6:32:ff:fd:ca:31:80:ef:16:f7:5b:fd:3d:79:50:6c:
         6e:16:2d:51:07:e6:76:66:96:71:c6:4a:76:a0:47:d5:4a:63:
         1d:49:aa:8f:6f:56:75:65:f3:30:05:4a:74:f7:d8:15:cf:0c:
         0e:c3:4a:77:4d:9c:65:f6:19:3a:e8:f5:c4:36:85:25:75:f8:
         73:fb:93:f4:c1:24:43:73:92:42:08:00:2d:40:61:67:4f:32:
         f3:08:4a:d4:92:49:32:51:c7:e7:dd:ed:1b:f6:78:18:19:89:
         83:c4:5b:6b:ce:d4:dc:7e:7a:50:82:81:12:f2:ed:da:ed:79:
         76:23:08:ac:07:b6:62:f9:58:39:33:e3:b4:66:ce:35:c2:46:
         98:2b:9c:72:76:58:3f:7a:66:78:ce:03:3e:50:28:f0:4e:7e:
         43:92:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----