Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b278e3-32ef-46b7-897d-2344b3681d9e/1/7BEVUBa9KaANILhE7a3juLY9hMg.mft
File:                     7BEVUBa9KaANILhE7a3juLY9hMg.mft (raw, json)
Hash identifier:          1RWJ/ulY9wXfA5re1BEmLayuSqr3vvHMlVntb8x6Aqg=
Subject key identifier:   7B:8E:FB:9E:B3:0B:83:25:FE:EA:C6:D3:04:79:68:F6:3B:5A:67:01
Authority key identifier: EC:11:15:50:16:BD:29:A0:0D:20:B8:44:ED:AD:E3:B8:B6:3D:84:C8
Certificate issuer:       /CN=ec11155016bd29a00d20b844edade3b8b63d84c8
Certificate serial:       018BFA1FAA9872B6F34A60512ABAD9CA5B88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BEVUBa9KaANILhE7a3juLY9hMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b278e3-32ef-46b7-897d-2344b3681d9e/1/7BEVUBa9KaANILhE7a3juLY9hMg.mft
Manifest number:          0851
Signing time:             Thu 23 Nov 2023 03:01:01 +0000
Manifest this update:     Thu 23 Nov 2023 03:01:01 +0000
Manifest next update:     Fri 24 Nov 2023 03:01:01 +0000
Files and hashes:         1: 7BEVUBa9KaANILhE7a3juLY9hMg.crl (hash: F4OqlfkLm56nj5kyFuVxiua0FZZ6fZwjHb2d+Sukq2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fa:1f:aa:98:72:b6:f3:4a:60:51:2a:ba:d9:ca:5b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11155016bd29a00d20b844edade3b8b63d84c8
        Validity
            Not Before: Nov 23 03:01:01 2023 GMT
            Not After : Nov 24 03:01:01 2023 GMT
        Subject: CN=7b8efb9eb30b8325feeac6d3047968f63b5a6701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:28:ef:2f:f9:7e:aa:bf:ac:da:d3:0d:4f:21:
                    36:4f:61:11:2b:a8:21:e5:dd:e7:e5:82:a3:17:f0:
                    7c:75:31:e6:5a:1b:4a:38:96:ab:7e:bb:d5:58:12:
                    d3:a7:db:26:c7:23:a1:25:02:c2:7e:ac:88:a8:8c:
                    a7:4c:de:f3:68:af:02:8f:1a:f7:92:ab:91:7e:bd:
                    52:00:2f:fb:d4:e9:a8:4e:f6:3f:54:0b:d4:9b:7c:
                    88:fd:64:b3:8b:ff:cf:80:ed:2d:6a:e1:47:21:36:
                    5c:8e:a3:76:ad:57:9b:97:74:2e:14:29:48:dd:7b:
                    9b:a8:80:a7:4e:82:ce:46:f0:6a:32:77:40:ad:64:
                    9c:34:ee:7f:fa:f8:f2:36:30:a7:ab:b9:33:eb:c7:
                    8f:a0:5f:0e:8e:59:09:a2:25:e6:1d:2b:d0:59:40:
                    c3:13:cf:83:ee:c7:75:39:0e:fb:24:8a:91:36:df:
                    8c:45:87:37:bd:55:2f:6c:c9:35:93:92:d5:23:76:
                    2f:d5:d2:ad:cf:a0:17:08:7b:df:e6:83:75:58:85:
                    ef:11:24:39:d7:ac:0c:59:3a:67:7a:c8:ac:ab:8d:
                    17:96:cb:d8:5d:f8:f4:82:fe:56:78:04:7a:0e:d5:
                    73:b2:24:cf:44:99:bb:28:e6:fd:4c:21:d7:44:91:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8E:FB:9E:B3:0B:83:25:FE:EA:C6:D3:04:79:68:F6:3B:5A:67:01
            X509v3 Authority Key Identifier:
                keyid:EC:11:15:50:16:BD:29:A0:0D:20:B8:44:ED:AD:E3:B8:B6:3D:84:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BEVUBa9KaANILhE7a3juLY9hMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b278e3-32ef-46b7-897d-2344b3681d9e/1/7BEVUBa9KaANILhE7a3juLY9hMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b278e3-32ef-46b7-897d-2344b3681d9e/1/7BEVUBa9KaANILhE7a3juLY9hMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:7b:e7:f6:b3:04:01:7c:4b:22:5c:70:bc:4a:6d:ff:77:
         ef:d9:37:48:6a:b3:25:a0:09:8c:01:a8:1a:dc:2e:58:06:dd:
         b7:e0:e9:d3:fa:fa:79:92:e7:38:40:ff:ec:3f:99:60:0f:f4:
         f0:42:86:02:e7:b8:1e:95:76:9d:76:54:6e:16:85:48:32:07:
         7e:e2:b4:00:c2:c7:cd:c0:e6:fa:10:2c:e9:36:22:15:a6:c5:
         8c:cf:5e:3a:d6:91:d1:da:90:cf:aa:3d:9a:f9:4f:7e:c4:4d:
         ff:cc:10:a6:0e:3b:f9:4d:16:10:65:89:63:5c:4f:48:99:77:
         25:4a:61:a1:d7:bc:59:0a:96:db:58:05:06:5d:00:cd:a1:90:
         c0:e7:c7:c7:11:5b:60:c6:29:ba:28:87:10:e6:4b:85:81:ad:
         95:6f:4b:e7:d0:0a:0e:f6:85:ae:88:7e:8b:fe:98:ad:e3:c4:
         af:f1:68:3e:29:40:1e:d5:c7:c9:e5:94:bc:56:75:42:98:d3:
         3a:b4:6f:95:b1:7c:31:38:6c:30:6d:60:96:94:30:92:13:0b:
         4f:a8:6d:b8:bb:7d:21:c9:7f:bc:ec:d9:c9:d1:6f:8f:b3:9d:
         a3:89:21:45:7a:d8:0b:8b:94:b4:46:10:35:d5:7d:b8:54:80:
         50:48:5a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----