Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/e1e7eb-9b28-4ca9-a863-40aaea762188/1/39V5-lSVsyko88kp3HMYipkX1W4.mft
File:                     39V5-lSVsyko88kp3HMYipkX1W4.mft (raw, json)
Hash identifier:          CSG48iuyL00m4bnLKe0jvdSiypLS7GOt+YTTT7f+1aI=
Subject key identifier:   3D:B4:27:8F:AE:C8:CE:1C:11:AA:DB:3A:15:37:61:8E:5B:9F:68:57
Authority key identifier: DF:D5:79:FA:54:95:B3:29:28:F3:C9:29:DC:73:18:8A:99:17:D5:6E
Certificate issuer:       /CN=dfd579fa5495b32928f3c929dc73188a9917d56e
Certificate serial:       018A3A58D3DA63462B3C8D9394EB0D905CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39V5-lSVsyko88kp3HMYipkX1W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/e1e7eb-9b28-4ca9-a863-40aaea762188/1/39V5-lSVsyko88kp3HMYipkX1W4.mft
Manifest number:          0639
Signing time:             Mon 28 Aug 2023 04:13:34 +0000
Manifest this update:     Mon 28 Aug 2023 04:13:34 +0000
Manifest next update:     Tue 29 Aug 2023 04:13:34 +0000
Files and hashes:         1: 39V5-lSVsyko88kp3HMYipkX1W4.crl (hash: vdMxzhSxgVCoiStjxCmxF0JyaLaDR6kiAo4Af3mDD5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3a:58:d3:da:63:46:2b:3c:8d:93:94:eb:0d:90:5c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd579fa5495b32928f3c929dc73188a9917d56e
        Validity
            Not Before: Aug 28 04:13:34 2023 GMT
            Not After : Aug 29 04:13:34 2023 GMT
        Subject: CN=3db4278faec8ce1c11aadb3a1537618e5b9f6857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:1e:af:ad:46:52:f9:8e:28:b0:c6:77:ad:
                    6b:65:0e:83:53:7f:1a:cb:42:73:05:eb:43:4f:b8:
                    8c:51:81:18:7c:e9:88:e6:d7:16:3f:5a:a7:b7:69:
                    13:27:b0:b9:a4:dc:36:ab:22:0c:b4:14:bc:96:d5:
                    ba:15:ec:fd:90:3b:46:74:92:71:aa:cd:7f:38:ad:
                    52:65:74:dc:f3:40:5e:f8:c8:73:22:44:82:6e:c2:
                    6a:d5:98:7f:20:96:30:26:95:ac:18:f0:36:1c:26:
                    01:29:03:de:18:8b:74:9c:17:79:46:d5:d6:44:0d:
                    a0:a4:df:22:83:6e:1f:1b:6d:fe:10:9e:5d:13:97:
                    33:8e:84:7e:36:9f:fd:96:f4:f8:74:61:ab:63:b2:
                    8c:05:03:04:fe:50:93:2e:b6:24:ea:e7:3b:69:d8:
                    ba:3f:b3:66:09:af:0f:d8:c4:65:5c:8d:be:4d:c2:
                    ed:5d:81:e7:f9:0f:bd:8a:65:21:8e:19:d5:00:4e:
                    c4:02:ed:e1:44:ab:de:ec:bf:16:99:85:02:82:59:
                    78:a9:48:49:d9:9e:75:9d:1e:a1:68:3e:0c:90:39:
                    05:97:49:1c:fe:c0:b9:c8:c3:ce:85:c7:e9:87:d1:
                    ed:21:a3:ea:2a:b1:ca:b2:da:c5:ad:88:6e:ff:f4:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B4:27:8F:AE:C8:CE:1C:11:AA:DB:3A:15:37:61:8E:5B:9F:68:57
            X509v3 Authority Key Identifier:
                keyid:DF:D5:79:FA:54:95:B3:29:28:F3:C9:29:DC:73:18:8A:99:17:D5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39V5-lSVsyko88kp3HMYipkX1W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/e1e7eb-9b28-4ca9-a863-40aaea762188/1/39V5-lSVsyko88kp3HMYipkX1W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/e1e7eb-9b28-4ca9-a863-40aaea762188/1/39V5-lSVsyko88kp3HMYipkX1W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:ff:a5:59:71:74:2d:36:db:d4:91:af:af:d0:46:57:39:
         02:67:a2:a1:52:b9:b2:89:48:af:e1:88:b6:5e:00:93:03:c2:
         f1:c3:60:f2:1c:99:09:a0:63:b7:17:b7:9a:ba:d1:60:57:05:
         c6:34:c0:02:fe:5c:cf:0c:45:02:ce:1e:c7:67:13:31:2f:9d:
         cb:4a:8f:c8:4b:de:6e:85:dd:fe:bc:0d:c1:0b:c3:84:be:58:
         47:33:14:ec:14:b1:50:3f:08:3c:18:97:40:8c:8e:35:77:02:
         70:b4:c0:0a:c2:20:b7:b9:a2:a6:50:40:b2:49:67:fa:97:b9:
         f1:e2:05:ac:03:86:74:6c:23:c8:fa:3d:d1:7d:bc:ed:8b:df:
         b1:e2:f3:2f:44:a7:b7:c8:80:07:26:f1:a0:b4:89:80:ca:91:
         96:48:ed:73:33:36:b7:8c:10:6d:b4:be:c3:a5:d8:bb:c9:4e:
         58:73:8e:22:d3:37:80:f1:00:3a:94:c1:f7:0c:f2:9e:1a:c6:
         ca:59:47:c4:0c:ad:37:06:fe:23:46:bc:b2:81:5d:e0:86:d2:
         69:0e:45:96:be:a2:c0:ce:85:85:c3:cf:e8:1c:6e:22:1a:8e:
         67:e6:44:bd:15:cc:e8:2e:dd:7c:14:08:e6:9a:76:fe:13:97:
         99:f6:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----