Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7dda-57b2-4b59-8ddc-673132c187a9/1/7eFvhR6sjKf4alyG9IvmFvDWTiw.mft
File:                     7eFvhR6sjKf4alyG9IvmFvDWTiw.mft (raw, json)
Hash identifier:          4vkX38G0pfGJbMEF6oKICkHyqUpq6kUY3cmhjwQ3RYk=
Subject key identifier:   2D:0B:A2:CB:A4:B3:FF:23:25:86:6C:98:82:C2:73:C4:C9:C0:5C:8B
Authority key identifier: ED:E1:6F:85:1E:AC:8C:A7:F8:6A:5C:86:F4:8B:E6:16:F0:D6:4E:2C
Certificate issuer:       /CN=ede16f851eac8ca7f86a5c86f48be616f0d64e2c
Certificate serial:       018B84888D71181D7C6D26E931E73D7D9265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eFvhR6sjKf4alyG9IvmFvDWTiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7dda-57b2-4b59-8ddc-673132c187a9/1/7eFvhR6sjKf4alyG9IvmFvDWTiw.mft
Manifest number:          0F60
Signing time:             Tue 31 Oct 2023 07:00:23 +0000
Manifest this update:     Tue 31 Oct 2023 07:00:23 +0000
Manifest next update:     Wed 01 Nov 2023 07:00:23 +0000
Files and hashes:         1: 7eFvhR6sjKf4alyG9IvmFvDWTiw.crl (hash: zOB/bBGmfMBO00rrqMAYRKo1/cKdyHih5jv2ntqnCh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:84:88:8d:71:18:1d:7c:6d:26:e9:31:e7:3d:7d:92:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede16f851eac8ca7f86a5c86f48be616f0d64e2c
        Validity
            Not Before: Oct 31 07:00:23 2023 GMT
            Not After : Nov  1 07:00:23 2023 GMT
        Subject: CN=2d0ba2cba4b3ff2325866c9882c273c4c9c05c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:66:34:5a:17:5b:68:ac:6c:6c:27:e2:92:
                    d9:dd:17:22:8d:e9:c9:2a:a7:0e:bb:9e:e5:08:14:
                    78:99:46:93:2d:54:27:bf:13:0b:44:e3:aa:0c:f6:
                    28:31:cc:84:0f:18:ce:ff:71:5a:b9:8d:3a:b1:f7:
                    cd:bb:44:fd:ea:89:06:c8:f0:3d:91:ea:5d:37:16:
                    e2:0a:f7:82:fd:f6:73:07:98:6a:3f:bd:1a:76:f9:
                    92:ff:38:77:50:dd:0e:8a:a8:42:b5:5b:f4:31:07:
                    a4:6f:41:0c:5d:9a:cf:31:52:47:1a:c9:f5:17:ff:
                    5c:d6:b6:9c:c7:b1:41:d0:75:d1:6e:66:62:00:7d:
                    23:ce:81:85:0d:7b:f1:10:c3:56:9f:73:65:0e:46:
                    e3:37:14:0c:20:23:63:65:be:3f:93:fe:5e:3c:6e:
                    da:71:97:4f:f0:7a:29:38:18:da:42:4d:2a:46:d8:
                    55:c9:4c:d2:a0:99:85:67:9d:32:f7:b4:db:9b:a9:
                    2f:37:ef:ae:bc:f1:9c:1b:92:cd:d2:b8:c3:32:f6:
                    19:97:51:1a:57:c7:c5:c2:c4:a0:e3:d2:ee:97:30:
                    25:c3:ad:05:53:46:bb:d4:e7:6f:74:32:3f:83:f5:
                    ab:62:9d:a6:0c:28:18:ae:35:a7:a9:d6:5e:d0:8b:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:A2:CB:A4:B3:FF:23:25:86:6C:98:82:C2:73:C4:C9:C0:5C:8B
            X509v3 Authority Key Identifier:
                keyid:ED:E1:6F:85:1E:AC:8C:A7:F8:6A:5C:86:F4:8B:E6:16:F0:D6:4E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eFvhR6sjKf4alyG9IvmFvDWTiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7dda-57b2-4b59-8ddc-673132c187a9/1/7eFvhR6sjKf4alyG9IvmFvDWTiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7dda-57b2-4b59-8ddc-673132c187a9/1/7eFvhR6sjKf4alyG9IvmFvDWTiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:55:ee:d0:94:8c:d9:4b:74:f8:56:79:55:82:8a:8d:91:6e:
         1b:0e:c6:a6:17:c6:4f:9e:5d:8d:f4:44:69:67:f4:99:c8:b6:
         01:73:c6:d0:06:4d:14:11:88:09:c0:c4:f3:2d:f4:c5:56:7d:
         e6:02:90:aa:a7:23:20:ea:a1:a4:5f:59:48:f0:ba:a0:85:14:
         b5:25:d9:24:f4:a3:75:6c:ea:ea:ce:a8:4f:b5:9c:0e:b2:67:
         97:8c:02:a5:71:60:5b:2e:2d:62:22:f5:b9:44:2e:96:49:41:
         5e:94:1d:d8:98:3a:91:4f:96:8f:31:c2:14:22:32:94:4e:a8:
         00:35:18:83:6d:d0:f0:84:48:52:d6:1e:53:09:17:fa:80:07:
         5e:49:c0:93:72:19:66:fa:2d:9f:57:5d:e4:35:1e:fc:e2:c1:
         23:9a:bd:86:b1:9e:38:c1:b2:4d:71:f8:3b:e2:7e:53:59:30:
         14:4f:e0:d5:18:ed:7a:b2:e7:db:b1:6a:66:e3:af:c8:39:a9:
         75:85:36:86:21:6d:85:00:8c:46:bb:87:57:00:18:00:b3:9b:
         0e:79:c6:a4:19:91:07:3d:5e:8f:f7:68:55:8f:89:9d:f1:f9:
         e1:7d:86:86:7f:22:a0:f0:c6:e7:55:7c:ec:7b:de:77:13:cd:
         ae:5e:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----