Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fb39b4-b695-4e54-9326-700743324485/1/cDuKPV09LmZhIF0-H6Wx3bihfRc.mft
File:                     cDuKPV09LmZhIF0-H6Wx3bihfRc.mft (raw, json)
Hash identifier:          9t7ICYkVkAntgkdEu5zNa1MWPMf7revw57lv/ipcFNc=
Subject key identifier:   9C:BC:23:F6:A2:AE:0A:58:96:98:41:72:82:8F:E3:1E:D8:D4:77:B5
Authority key identifier: 70:3B:8A:3D:5D:3D:2E:66:61:20:5D:3E:1F:A5:B1:DD:B8:A1:7D:17
Certificate issuer:       /CN=703b8a3d5d3d2e6661205d3e1fa5b1ddb8a17d17
Certificate serial:       018A97003796A8C6F16A9EB5ED1134C08D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDuKPV09LmZhIF0-H6Wx3bihfRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/fb39b4-b695-4e54-9326-700743324485/1/cDuKPV09LmZhIF0-H6Wx3bihfRc.mft
Manifest number:          03
Signing time:             Fri 15 Sep 2023 04:01:28 +0000
Manifest this update:     Fri 15 Sep 2023 04:01:28 +0000
Manifest next update:     Sat 16 Sep 2023 04:01:28 +0000
Files and hashes:         1: cDuKPV09LmZhIF0-H6Wx3bihfRc.crl (hash: LMLTHc/oocjve7ZvzsQCmWf7337B87E0+xxgtc+BY3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:97:00:37:96:a8:c6:f1:6a:9e:b5:ed:11:34:c0:8d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703b8a3d5d3d2e6661205d3e1fa5b1ddb8a17d17
        Validity
            Not Before: Sep 15 04:01:28 2023 GMT
            Not After : Sep 16 04:01:28 2023 GMT
        Subject: CN=9cbc23f6a2ae0a5896984172828fe31ed8d477b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:07:0f:71:c8:52:d7:ec:fd:0f:c0:e1:a1:
                    6b:6e:6e:12:3f:1a:9c:9e:6f:e8:ca:c6:cf:ca:46:
                    e1:0a:da:41:e1:4a:8a:05:c4:39:0f:06:d6:47:31:
                    2a:86:f9:64:67:ba:64:8c:1e:a4:54:83:76:93:f7:
                    ef:e4:dc:8c:59:a3:c5:93:5a:51:ba:b7:15:8b:9b:
                    a2:9e:6c:af:92:b9:e1:e7:7e:aa:29:a8:80:f7:a3:
                    ce:f8:6e:90:f6:95:39:dd:1e:e4:01:90:0e:04:c0:
                    c1:0e:57:78:4c:b3:32:3a:1b:88:83:dc:74:8e:9a:
                    2d:b3:82:c1:87:a5:cb:73:f1:9b:8f:70:5f:93:6c:
                    71:f5:84:e1:31:f4:77:76:55:d9:bd:e8:70:b6:80:
                    35:28:66:4c:ea:6c:99:0c:2c:1b:06:44:e2:03:a9:
                    0a:f0:3b:ff:31:e2:02:d2:95:fa:30:14:7a:af:e0:
                    3c:6e:b9:b8:38:bb:4e:31:fd:62:6f:86:95:2e:8d:
                    8a:83:37:bc:0a:4a:cd:72:31:ca:a1:dd:44:5e:d6:
                    a6:22:25:47:e9:ea:42:6b:80:16:ae:fb:56:30:15:
                    6a:76:d4:60:1d:6d:e3:ea:2a:a5:29:66:66:6c:c4:
                    b2:0d:75:52:64:b4:23:b7:ce:1e:12:da:73:59:b3:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BC:23:F6:A2:AE:0A:58:96:98:41:72:82:8F:E3:1E:D8:D4:77:B5
            X509v3 Authority Key Identifier:
                keyid:70:3B:8A:3D:5D:3D:2E:66:61:20:5D:3E:1F:A5:B1:DD:B8:A1:7D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDuKPV09LmZhIF0-H6Wx3bihfRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fb39b4-b695-4e54-9326-700743324485/1/cDuKPV09LmZhIF0-H6Wx3bihfRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fb39b4-b695-4e54-9326-700743324485/1/cDuKPV09LmZhIF0-H6Wx3bihfRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:48:59:26:d6:84:7d:58:1a:9e:5a:2b:a0:af:1c:56:c0:72:
         44:c7:fb:ff:86:69:fe:70:93:79:b5:a0:20:ce:6c:42:72:f2:
         f4:84:ea:60:08:3f:8d:8e:78:6d:dc:20:e8:b1:bc:bf:c7:64:
         fc:67:2b:3a:7a:4c:0b:5c:f3:85:35:48:fa:76:a5:96:a2:60:
         6d:96:99:57:55:70:7c:29:a9:67:2e:91:c9:e2:f8:9f:06:f4:
         0c:6d:8b:d0:0a:36:d5:c3:05:80:d6:e7:ee:98:27:63:d3:cb:
         45:92:b8:41:5c:31:6a:30:58:5d:bf:92:99:3c:29:03:5f:05:
         77:99:ae:20:e1:6c:ce:ce:37:c8:56:8f:1d:2a:a2:99:df:d2:
         ad:dd:84:14:4d:ec:80:14:62:6e:90:b8:c5:11:eb:e4:07:6c:
         81:ca:6a:94:3b:b2:c7:70:19:5f:4b:25:74:34:71:ab:c2:b1:
         87:e3:de:2e:58:c2:17:45:3b:7b:d7:53:d3:23:e1:12:5c:0b:
         3b:71:f4:8b:e8:f0:df:02:f2:84:22:c4:ff:71:cc:55:07:b3:
         30:2c:49:6a:d7:0b:28:23:27:12:9c:1c:99:ad:c6:de:0e:75:
         ca:79:32:71:a5:eb:af:38:f4:45:26:cb:44:77:16:80:d3:c1:
         46:67:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----