Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/631f54-0322-4854-8930-e22d3d073b8d/1/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.mft
File:                     jgcDQ4zlH9Qq5D_TUADfmHR6GC0.mft (raw, json)
Hash identifier:          KqXKVozlNN8hj+iwrE0hzw5AOuYteHdNNSjTlG2zi3U=
Subject key identifier:   00:6C:F8:31:38:73:2F:1E:D9:53:35:A4:D1:A2:1A:CF:25:67:F6:7D
Authority key identifier: 8E:07:03:43:8C:E5:1F:D4:2A:E4:3F:D3:50:00:DF:98:74:7A:18:2D
Certificate issuer:       /CN=8e0703438ce51fd42ae43fd35000df98747a182d
Certificate serial:       01879BE53218D9E29477598CA47661FBDE88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/631f54-0322-4854-8930-e22d3d073b8d/1/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.mft
Manifest number:          0CE5
Signing time:             Wed 19 Apr 2023 23:41:41 +0000
Manifest this update:     Wed 19 Apr 2023 23:41:41 +0000
Manifest next update:     Thu 20 Apr 2023 23:41:41 +0000
Files and hashes:         1: jgcDQ4zlH9Qq5D_TUADfmHR6GC0.crl (hash: A2D7Yg3T9p+LwMH+BCSiMZVwCsUx0K1PZCzmKPO086w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9b:e5:32:18:d9:e2:94:77:59:8c:a4:76:61:fb:de:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0703438ce51fd42ae43fd35000df98747a182d
        Validity
            Not Before: Apr 19 23:41:41 2023 GMT
            Not After : Apr 20 23:41:41 2023 GMT
        Subject: CN=006cf83138732f1ed95335a4d1a21acf2567f67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:61:98:11:fa:ff:30:24:d0:57:0d:1b:15:
                    bc:e7:e9:4f:99:dc:66:b4:bd:a0:8d:aa:a7:56:16:
                    42:94:0e:75:31:07:3a:a4:6a:a8:0f:97:b1:e5:03:
                    86:57:bb:c6:a7:3f:ef:61:e4:ab:b6:ee:90:c3:d5:
                    cd:a1:31:16:c5:77:69:fd:11:1a:79:6a:72:5e:e8:
                    3f:4a:52:90:e7:04:16:27:37:f9:e3:2b:06:88:b3:
                    4f:a9:06:3c:c1:1a:1c:a8:75:27:26:b3:43:14:b6:
                    07:c6:e9:64:2f:79:6a:8c:f5:f2:78:73:84:db:bc:
                    85:b2:29:c0:41:2d:e8:e3:e5:ab:53:7d:bb:fc:e1:
                    66:fd:7b:40:a0:c8:bb:e5:1c:7d:93:a7:a8:90:e5:
                    d5:9a:0e:79:20:2e:e7:a1:1b:83:5f:b7:83:3f:5b:
                    b9:39:6a:f8:50:7b:dd:57:c4:ef:d0:78:31:4f:67:
                    17:07:34:9a:65:11:ce:db:12:98:39:aa:46:8f:1d:
                    32:c8:dc:ff:89:16:d1:f3:42:0d:1b:cc:51:61:30:
                    3f:38:31:40:0b:62:f8:46:00:8c:b9:de:f7:83:47:
                    5d:6c:86:d4:6f:c9:18:34:8f:a9:f5:36:99:75:7e:
                    c5:fb:94:0b:54:f5:c6:65:ed:b0:e5:ea:a0:0c:f7:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6C:F8:31:38:73:2F:1E:D9:53:35:A4:D1:A2:1A:CF:25:67:F6:7D
            X509v3 Authority Key Identifier:
                keyid:8E:07:03:43:8C:E5:1F:D4:2A:E4:3F:D3:50:00:DF:98:74:7A:18:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/631f54-0322-4854-8930-e22d3d073b8d/1/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/631f54-0322-4854-8930-e22d3d073b8d/1/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5d:12:2b:83:05:d7:a0:62:cf:2c:da:f2:d0:e9:62:8e:8f:
         e7:cf:a7:f3:8c:be:62:1a:16:98:5a:e4:ba:58:57:74:5a:1b:
         0d:cd:d9:ad:41:1f:be:52:71:e5:69:3a:19:85:7b:5e:51:50:
         f5:bd:c9:6d:75:bc:16:0a:55:70:32:81:c5:5e:0a:b0:9e:3a:
         22:05:81:41:c4:5f:91:9b:22:a3:56:03:ba:31:e1:6f:e1:54:
         d4:61:43:97:da:48:c0:a3:9b:79:07:d7:9b:a7:db:68:78:c8:
         ab:d4:79:1b:6a:f9:19:99:a6:b4:b1:69:6b:1e:d3:fe:d0:dd:
         d9:d0:ed:89:12:48:bc:89:7f:20:d2:10:d6:84:b4:19:59:d4:
         28:58:62:5f:0b:26:b7:6e:5f:7c:32:ba:80:06:74:b1:89:31:
         c2:64:4d:86:e1:9c:dd:ea:6b:49:27:20:ec:e8:27:22:03:85:
         98:44:64:f2:78:db:84:96:19:bf:8a:18:54:a9:90:bd:ce:f3:
         78:0c:41:77:49:d2:06:02:09:1e:22:04:5c:96:27:a8:cb:fc:
         dd:c5:2d:2a:47:07:1e:d7:b1:2b:f4:31:46:53:92:e2:af:10:
         47:30:7f:32:56:b9:0f:bf:a7:e9:34:18:2e:85:b7:21:ec:13:
         54:aa:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----