Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1a33-b6b8-42d9-b0c0-b4511b9e244f/1/1-qQYwHYsTsL5lIbdAZP7o42jnWo.mft
File:                     1-qQYwHYsTsL5lIbdAZP7o42jnWo.mft (raw, json)
Hash identifier:          akB3mDygUvBSmQ9vyoh+vnG5ZpIHWIOlS2bjlyrgy1U=
Subject key identifier:   93:F5:1A:D0:AB:90:50:CF:FB:D9:FD:C2:69:E8:68:B9:B0:76:42:55
Authority key identifier: FA:A4:18:C0:76:2C:4E:C2:F9:94:86:DD:01:93:FB:A3:8D:A3:9D:6A
Certificate issuer:       /CN=faa418c0762c4ec2f99486dd0193fba38da39d6a
Certificate serial:       018AAB9A2FB4A77DD6E20C3D4191C11E4C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qQYwHYsTsL5lIbdAZP7o42jnWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/7a1a33-b6b8-42d9-b0c0-b4511b9e244f/1/1-qQYwHYsTsL5lIbdAZP7o42jnWo.mft
Manifest number:          044F
Signing time:             Tue 19 Sep 2023 04:02:03 +0000
Manifest this update:     Tue 19 Sep 2023 04:02:03 +0000
Manifest next update:     Wed 20 Sep 2023 04:02:03 +0000
Files and hashes:         1: 1-qQYwHYsTsL5lIbdAZP7o42jnWo.crl (hash: hY25CYdK3hO7mxj695dk1Cr6lidqSU9nXCzp/iJg7A4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ab:9a:2f:b4:a7:7d:d6:e2:0c:3d:41:91:c1:1e:4c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa418c0762c4ec2f99486dd0193fba38da39d6a
        Validity
            Not Before: Sep 19 04:02:03 2023 GMT
            Not After : Sep 20 04:02:03 2023 GMT
        Subject: CN=93f51ad0ab9050cffbd9fdc269e868b9b0764255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:2f:68:83:49:14:e9:ce:0a:e7:48:94:d0:
                    3a:81:a6:8a:22:ba:32:f7:bc:90:a9:26:b5:e6:c4:
                    7a:2d:db:b2:92:c1:36:92:49:27:57:63:6c:ba:bc:
                    87:d9:ff:60:27:8f:aa:29:26:a7:67:ca:94:86:98:
                    6f:f3:c0:21:67:46:13:52:bc:7d:a4:76:87:aa:49:
                    65:ff:69:1a:cc:bf:ee:b7:af:66:da:96:da:8d:ec:
                    23:f1:83:18:36:e3:db:0f:f6:18:fc:1a:a9:b1:73:
                    06:0f:e7:a4:32:ee:f6:69:52:da:8f:a7:9f:42:66:
                    b3:4d:e6:cd:c0:fd:a0:0e:cd:0b:e8:81:7e:38:29:
                    38:fc:e7:61:b0:3b:8c:11:4b:2a:bb:29:90:77:50:
                    5e:41:92:db:31:f8:a7:ef:e3:6b:63:4d:0b:b9:c9:
                    0c:55:e7:c1:bb:fe:9c:fa:9a:1e:33:6b:bd:a4:ad:
                    77:0a:6f:e7:77:6e:26:45:b2:10:5c:73:a6:7e:5e:
                    c5:38:f1:39:83:10:69:34:b2:5b:4f:af:7b:b7:8a:
                    20:bb:c3:5e:9b:31:67:c6:db:c6:fd:a9:ed:3b:50:
                    2d:91:c5:3e:41:3e:00:06:2a:9b:e6:ee:65:ca:f9:
                    7b:e1:6c:df:84:fa:dd:d2:af:17:d5:da:83:79:5d:
                    96:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F5:1A:D0:AB:90:50:CF:FB:D9:FD:C2:69:E8:68:B9:B0:76:42:55
            X509v3 Authority Key Identifier:
                keyid:FA:A4:18:C0:76:2C:4E:C2:F9:94:86:DD:01:93:FB:A3:8D:A3:9D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qQYwHYsTsL5lIbdAZP7o42jnWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1a33-b6b8-42d9-b0c0-b4511b9e244f/1/1-qQYwHYsTsL5lIbdAZP7o42jnWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1a33-b6b8-42d9-b0c0-b4511b9e244f/1/1-qQYwHYsTsL5lIbdAZP7o42jnWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:68:91:f0:a6:4f:d6:e6:e5:58:d9:8e:0e:20:c8:55:5d:0a:
         b6:a5:87:d0:86:b4:1d:4b:34:de:5f:29:56:8b:96:bb:2e:1e:
         b7:d3:a5:71:27:62:37:8e:e1:56:99:b3:cf:9d:5f:7f:e8:0a:
         f2:c7:d0:64:94:d8:fe:d9:4b:f3:7a:2b:59:44:5a:28:23:93:
         4f:af:6b:07:20:2b:c8:27:ed:4c:3b:8b:cf:64:c0:02:cb:80:
         1a:5e:0d:3c:5a:a0:a5:01:e6:f8:33:17:73:dd:be:43:be:0f:
         00:b8:f7:de:db:51:b3:92:5e:5e:5a:19:29:5d:ab:f3:21:bd:
         d1:68:15:a6:65:f2:76:b2:c1:b1:cd:89:db:ec:5f:ca:3e:65:
         30:d8:2f:47:5c:6d:70:9d:db:09:d1:dd:b7:0d:b1:ab:da:35:
         de:55:a3:4a:cb:c3:54:4d:29:5a:19:9a:e0:f5:d0:a9:e2:89:
         2f:c9:66:4c:53:fe:1a:dd:7a:7d:11:5e:78:70:20:5a:88:67:
         3e:00:59:33:c3:b2:01:55:b2:78:21:18:be:3f:35:e5:0c:bf:
         4d:0b:1e:ae:e7:08:84:16:50:89:c0:45:4c:77:8e:c8:c5:ee:
         31:de:d4:16:9f:4a:ba:ad:de:b0:a0:3a:25:d0:c4:1b:27:af:
         51:5a:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----