Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdb917-0c6a-415e-9869-7d744c0698a2/1/ab7k_ugF87i2jRueNQIAMRswYLE.mft
File:                     ab7k_ugF87i2jRueNQIAMRswYLE.mft (raw, json)
Hash identifier:          HgljtY/rfwQ1KXtZRDeF1Kfq/F+iib2qUoUyg/QHfL0=
Subject key identifier:   29:80:FA:12:AD:70:9C:7F:BC:52:21:64:74:85:04:90:5F:E0:83:BE
Authority key identifier: 69:BE:E4:FE:E8:05:F3:B8:B6:8D:1B:9E:35:02:00:31:1B:30:60:B1
Certificate issuer:       /CN=69bee4fee805f3b8b68d1b9e350200311b3060b1
Certificate serial:       018A3A21B6C49EA7A7EF8A5079907D5839E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ab7k_ugF87i2jRueNQIAMRswYLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/bdb917-0c6a-415e-9869-7d744c0698a2/1/ab7k_ugF87i2jRueNQIAMRswYLE.mft
Manifest number:          0639
Signing time:             Mon 28 Aug 2023 03:13:22 +0000
Manifest this update:     Mon 28 Aug 2023 03:13:22 +0000
Manifest next update:     Tue 29 Aug 2023 03:13:22 +0000
Files and hashes:         1: ab7k_ugF87i2jRueNQIAMRswYLE.crl (hash: eqcGNKp7ksUu2cgF7Kai1e+Ey2FZ0E4PDOYJMn/sOpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3a:21:b6:c4:9e:a7:a7:ef:8a:50:79:90:7d:58:39:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69bee4fee805f3b8b68d1b9e350200311b3060b1
        Validity
            Not Before: Aug 28 03:13:22 2023 GMT
            Not After : Aug 29 03:13:22 2023 GMT
        Subject: CN=2980fa12ad709c7fbc522164748504905fe083be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fb:dd:98:8d:6f:0c:78:d6:4c:d4:5f:46:93:
                    de:0e:a7:8f:97:b0:b3:9c:fa:d4:05:7f:2c:53:47:
                    b9:a4:e3:d7:a2:ae:2d:f1:eb:8e:aa:e9:87:d2:21:
                    11:8d:bd:8d:39:d1:d6:52:ce:25:b4:3a:91:25:99:
                    2d:0b:71:b5:04:f4:0a:a8:94:3d:9a:48:19:30:eb:
                    f1:1d:0a:67:91:38:dd:a2:2c:d1:5b:dc:2e:48:7b:
                    3b:44:11:5c:26:87:cd:9a:6c:12:35:f9:1a:34:d6:
                    2c:d3:93:ab:65:d7:65:75:01:7a:8d:4c:53:1e:9f:
                    f7:4d:1d:e3:5a:98:90:01:93:5a:b2:ef:59:c4:3e:
                    63:ba:01:ba:0f:c2:ad:83:03:ee:ba:f6:89:7a:7c:
                    10:4b:19:86:71:64:a3:c5:e8:a7:2b:f2:e3:71:1b:
                    81:46:5d:e0:cc:5d:96:33:dd:d4:36:38:b8:25:a4:
                    c2:27:58:0d:e1:53:27:f1:a9:5a:7e:b4:e7:01:8d:
                    12:24:45:44:dd:0b:a8:66:f1:c8:3f:b4:fc:aa:a3:
                    40:8c:06:7f:03:19:e7:9d:0b:24:40:01:53:da:33:
                    9e:ee:17:fb:23:8d:ef:25:ec:7b:74:31:62:4a:c0:
                    ef:c3:11:e5:15:f6:c3:48:be:4d:3b:9b:4d:ac:50:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:80:FA:12:AD:70:9C:7F:BC:52:21:64:74:85:04:90:5F:E0:83:BE
            X509v3 Authority Key Identifier:
                keyid:69:BE:E4:FE:E8:05:F3:B8:B6:8D:1B:9E:35:02:00:31:1B:30:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab7k_ugF87i2jRueNQIAMRswYLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdb917-0c6a-415e-9869-7d744c0698a2/1/ab7k_ugF87i2jRueNQIAMRswYLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdb917-0c6a-415e-9869-7d744c0698a2/1/ab7k_ugF87i2jRueNQIAMRswYLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d1:39:6e:9f:45:0c:29:74:f3:1d:86:24:1d:7a:33:ee:99:
         72:b8:fc:3b:39:66:87:65:04:2f:10:d0:63:44:e3:c0:13:0a:
         9b:e8:2e:42:86:5f:14:8a:20:ee:35:62:d4:e1:f4:8c:b8:b5:
         e9:f0:49:36:d0:bb:25:f0:23:b2:1b:55:af:ed:03:bf:38:6d:
         44:1a:1c:79:7a:99:c1:75:58:30:83:14:cf:42:4f:ae:ad:44:
         5f:3c:76:9c:e8:a3:82:d2:1f:a7:ef:ad:5d:45:fd:a4:eb:9c:
         76:72:ad:5d:c0:63:95:98:98:41:d9:e2:53:67:56:66:67:aa:
         98:c8:97:8a:18:38:a3:bf:fc:0d:9b:24:cb:e6:74:e2:2a:75:
         cc:fe:a7:69:4e:11:c7:f6:25:a0:c4:31:5e:84:11:6a:ea:50:
         4b:e2:bf:09:ae:7a:88:4c:ac:5e:76:3c:5e:4a:e6:7d:77:04:
         4d:0d:91:20:8f:5f:a2:d9:ed:47:4d:6d:ed:54:25:4b:3e:ae:
         61:c7:86:0a:e3:95:be:fa:16:f2:47:5a:9b:26:06:99:98:dc:
         08:75:81:60:be:e9:12:9d:e8:c5:2a:56:f2:7f:cb:c0:b1:58:
         10:b4:cd:b5:9c:38:b5:86:8c:ca:93:b2:13:81:d1:d0:d3:19:
         a0:14:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----