Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.mft
File:                     8XQPwwzWxspfgKKaG-fRg0Yjzo8.mft (raw, json)
Hash identifier:          EI4BcUL6i0nsFANXjy60/qN1W2DqS+oUS2fEOGYNVf4=
Subject key identifier:   45:52:C6:56:EA:22:85:29:99:E4:A8:7E:56:28:C9:E8:E1:3C:E3:92
Authority key identifier: F1:74:0F:C3:0C:D6:C6:CA:5F:80:A2:9A:1B:E7:D1:83:46:23:CE:8F
Certificate issuer:       /CN=f1740fc30cd6c6ca5f80a29a1be7d1834623ce8f
Certificate serial:       018A2C13BBDCC87A8F4F3B076AB96EF4BFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XQPwwzWxspfgKKaG-fRg0Yjzo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.mft
Manifest number:          0884
Signing time:             Fri 25 Aug 2023 09:43:25 +0000
Manifest this update:     Fri 25 Aug 2023 09:43:25 +0000
Manifest next update:     Sat 26 Aug 2023 09:43:25 +0000
Files and hashes:         1: 8XQPwwzWxspfgKKaG-fRg0Yjzo8.crl (hash: rDhipMLZYvaHs6K/Fe9ViO+dvb0kX3/QIX5hwi0FHjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2c:13:bb:dc:c8:7a:8f:4f:3b:07:6a:b9:6e:f4:bf:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1740fc30cd6c6ca5f80a29a1be7d1834623ce8f
        Validity
            Not Before: Aug 25 09:43:25 2023 GMT
            Not After : Aug 26 09:43:25 2023 GMT
        Subject: CN=4552c656ea22852999e4a87e5628c9e8e13ce392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:e5:63:5d:06:9b:03:4a:35:da:81:d9:87:
                    62:00:1d:4a:6d:cf:39:d8:ba:f0:58:22:62:fa:02:
                    bd:b8:1a:6c:8c:3d:f1:37:28:1c:a4:da:ef:28:8f:
                    0a:f3:fb:c5:68:48:5c:5e:46:3a:ac:45:1d:43:7b:
                    42:0a:47:f4:7f:3b:0e:62:47:be:48:68:43:5f:c4:
                    5a:2f:11:c4:42:3c:2c:c8:60:14:39:5c:5e:ec:c2:
                    d6:08:12:f1:d6:a6:2f:39:af:d4:c1:ef:45:35:55:
                    3a:9e:79:8f:1d:98:89:1d:82:7f:d1:48:fd:e1:42:
                    ae:4f:1e:91:30:2f:20:af:05:0a:cf:db:f8:be:09:
                    b2:ff:63:0e:74:b6:f6:78:ec:19:0e:f3:d3:2f:2b:
                    d6:8a:e7:0b:d7:56:9c:2f:79:18:25:11:56:bb:de:
                    36:61:79:00:4f:1f:48:33:3d:44:9a:4f:ed:8c:ec:
                    bf:de:2e:cb:7f:85:56:9f:45:7d:20:0f:ec:62:96:
                    dc:be:8b:f6:ed:62:dd:e4:38:ff:d6:54:3e:b6:58:
                    19:8c:e0:e3:1e:bf:d4:2b:38:c0:53:2d:42:f6:89:
                    91:ad:a2:b6:85:9c:6a:fa:d8:46:e3:d1:ee:5c:81:
                    a1:61:24:e4:e0:13:d0:63:dc:39:f2:e6:72:b1:82:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:52:C6:56:EA:22:85:29:99:E4:A8:7E:56:28:C9:E8:E1:3C:E3:92
            X509v3 Authority Key Identifier:
                keyid:F1:74:0F:C3:0C:D6:C6:CA:5F:80:A2:9A:1B:E7:D1:83:46:23:CE:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XQPwwzWxspfgKKaG-fRg0Yjzo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:71:12:23:21:90:e5:b3:27:3c:fb:79:84:1f:f7:25:f9:
         28:41:5d:bc:58:3e:1c:8d:5a:99:11:bf:24:11:ff:e8:45:c8:
         7b:3a:5e:6e:07:e7:6e:21:6f:3a:1e:27:87:1c:e7:a1:fe:29:
         33:12:c9:9a:09:df:7c:3c:af:38:0d:41:a1:d1:98:fc:6d:46:
         17:04:73:32:e9:5b:de:18:54:b4:88:c5:2d:2b:0d:e3:a4:3f:
         92:c0:aa:58:d4:2d:31:3e:2f:75:67:0d:15:b3:47:de:28:ae:
         e9:98:57:cf:47:96:63:04:d4:5f:ba:fe:d0:2c:a3:13:f6:ef:
         c0:dd:e4:44:7f:19:66:0e:6a:98:c0:3e:79:9c:95:d4:49:6d:
         4a:42:1b:ba:81:ed:79:17:96:78:87:9e:d8:00:0b:27:a0:4c:
         34:03:01:0a:0b:7a:d7:71:59:93:e9:ae:9b:68:9c:c0:b8:47:
         cf:cb:0e:84:4e:48:af:ee:45:d3:dc:2f:f4:cd:5d:9d:10:ed:
         13:94:b6:9c:e2:2d:15:8e:a7:98:51:77:f1:de:88:f8:7c:ff:
         1c:2f:54:16:1a:45:2a:bb:04:4a:0e:4f:ad:c3:1a:77:11:e2:
         2b:e4:cd:d4:54:4c:ba:36:90:48:15:b2:a3:9a:46:e7:d9:f6:
         f8:67:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----