Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2cda45-d148-4e63-9b10-bf18f4585921/1/9APvcLS9Sp6wWyEQZpFvqCxzthI.mft
File:                     9APvcLS9Sp6wWyEQZpFvqCxzthI.mft (raw, json)
Hash identifier:          sqFWjkF37KeyOuUz8fsxlh/vCVqBkJTdhdAgmvPTQVY=
Subject key identifier:   1C:CF:A7:6A:5D:DE:11:C9:4F:EF:57:71:C7:DA:26:A0:1C:DD:B9:78
Authority key identifier: F4:03:EF:70:B4:BD:4A:9E:B0:5B:21:10:66:91:6F:A8:2C:73:B6:12
Certificate issuer:       /CN=f403ef70b4bd4a9eb05b211066916fa82c73b612
Certificate serial:       01895E1EFECB98FCAD649DEEAB7B067FDC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9APvcLS9Sp6wWyEQZpFvqCxzthI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2cda45-d148-4e63-9b10-bf18f4585921/1/9APvcLS9Sp6wWyEQZpFvqCxzthI.mft
Manifest number:          0E38
Signing time:             Sun 16 Jul 2023 09:53:56 +0000
Manifest this update:     Sun 16 Jul 2023 09:53:56 +0000
Manifest next update:     Mon 17 Jul 2023 09:53:56 +0000
Files and hashes:         1: 9APvcLS9Sp6wWyEQZpFvqCxzthI.crl (hash: TcCq3dO4NEqYpMsZSQ0HsXpmYYY9aNtkoor40EySL38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:5e:1e:fe:cb:98:fc:ad:64:9d:ee:ab:7b:06:7f:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f403ef70b4bd4a9eb05b211066916fa82c73b612
        Validity
            Not Before: Jul 16 09:53:56 2023 GMT
            Not After : Jul 17 09:53:56 2023 GMT
        Subject: CN=1ccfa76a5dde11c94fef5771c7da26a01cddb978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:07:f7:ab:d1:78:9c:f6:45:7f:f4:8d:a7:d1:
                    f4:7e:bf:d4:66:16:7a:3f:fd:f6:d6:d0:1b:23:ed:
                    54:d8:7a:ed:25:95:7c:77:df:86:45:88:a6:73:e1:
                    ed:ad:7f:61:c3:41:4b:3c:4b:5d:a1:89:22:78:78:
                    6d:1a:21:f0:b9:c4:fc:14:14:70:51:39:8b:88:26:
                    11:a0:f4:29:ed:c7:7c:c2:ef:78:1e:8a:38:e7:d5:
                    68:f2:b4:50:5a:88:08:f6:e3:24:44:80:74:4d:1c:
                    ea:1b:76:cf:75:98:96:9d:85:90:8b:52:d7:94:0a:
                    89:53:11:8f:ed:d3:c8:9a:06:7b:9e:cf:92:97:5f:
                    e5:67:c0:f0:41:03:e7:14:31:bd:3f:78:0e:03:18:
                    da:d4:1a:69:29:14:ab:cf:db:dd:97:51:fa:0a:15:
                    aa:87:12:62:77:33:40:31:cd:a8:8e:ad:ee:fd:a0:
                    d4:66:fe:e3:12:86:ba:b1:bd:b8:32:29:75:5b:98:
                    04:72:7d:77:a2:2f:bb:c4:d1:fe:ac:95:c5:9e:e1:
                    f7:9f:d8:9a:bf:93:4d:d6:2f:46:f2:83:b2:c9:6c:
                    3f:67:6e:f6:b1:2a:f1:e4:10:d6:89:e6:4e:a9:a4:
                    bf:f5:aa:05:58:7d:b8:24:92:0f:c9:d1:b4:01:08:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:A7:6A:5D:DE:11:C9:4F:EF:57:71:C7:DA:26:A0:1C:DD:B9:78
            X509v3 Authority Key Identifier:
                keyid:F4:03:EF:70:B4:BD:4A:9E:B0:5B:21:10:66:91:6F:A8:2C:73:B6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9APvcLS9Sp6wWyEQZpFvqCxzthI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2cda45-d148-4e63-9b10-bf18f4585921/1/9APvcLS9Sp6wWyEQZpFvqCxzthI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2cda45-d148-4e63-9b10-bf18f4585921/1/9APvcLS9Sp6wWyEQZpFvqCxzthI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3e:6d:77:f3:60:1b:88:5e:f9:3f:bd:7a:48:ed:ef:b0:cc:
         ff:4f:f3:37:94:0c:59:bf:c4:3d:b9:e3:ea:5a:d5:c2:75:43:
         1f:60:68:37:ff:26:3d:c4:bc:f9:40:d8:11:28:93:b2:59:47:
         d3:7e:00:1e:d3:7c:39:3e:82:7a:0b:a3:83:e2:25:57:f2:b3:
         1a:d7:d2:23:dd:14:cc:a8:2a:a5:ba:37:b9:2d:3d:f1:ca:ab:
         34:c3:2f:4e:58:28:cc:d3:60:b0:d8:4e:a9:5d:42:68:35:04:
         41:a5:c3:b3:38:9e:94:97:05:65:ef:b3:cf:c7:b9:b4:bd:7f:
         91:93:3d:78:0f:d8:14:b4:36:c2:d3:a0:e8:9d:f7:52:c5:18:
         1e:57:c5:c7:f2:00:be:f7:20:e4:4d:94:d4:c0:68:8c:96:41:
         1b:b2:74:f5:3a:56:5d:8c:9a:d4:c4:64:43:76:08:d3:84:af:
         b7:a1:88:d1:73:eb:80:32:d0:80:0e:7c:a5:17:cf:3c:39:18:
         37:62:ce:ef:7d:f6:04:6d:ae:77:66:17:ca:16:1b:63:a4:32:
         41:43:02:5d:58:68:67:cc:6b:e0:b4:71:34:2b:10:87:51:65:
         22:96:30:87:52:df:0e:ce:27:88:a3:84:db:5a:8a:b0:09:26:
         b6:35:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----