Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d71b67-7e16-4857-90a4-888fe2ac97e7/1/JLW0Yz0HCDkcw4sKWyqos9amn1E.mft
File:                     JLW0Yz0HCDkcw4sKWyqos9amn1E.mft (raw, json)
Hash identifier:          tELEabL9sWNzLQdhHZAIKPubhJZhe+ARbgtHRHNDVu4=
Subject key identifier:   27:D1:6B:21:F1:7E:62:01:91:77:92:1E:23:9E:9C:B9:6F:8F:DD:BE
Authority key identifier: 24:B5:B4:63:3D:07:08:39:1C:C3:8B:0A:5B:2A:A8:B3:D6:A6:9F:51
Certificate issuer:       /CN=24b5b4633d0708391cc38b0a5b2aa8b3d6a69f51
Certificate serial:       018C0D388C14876FBF44140E7C5093A625B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLW0Yz0HCDkcw4sKWyqos9amn1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d71b67-7e16-4857-90a4-888fe2ac97e7/1/JLW0Yz0HCDkcw4sKWyqos9amn1E.mft
Manifest number:          03
Signing time:             Sun 26 Nov 2023 20:00:58 +0000
Manifest this update:     Sun 26 Nov 2023 20:00:58 +0000
Manifest next update:     Mon 27 Nov 2023 20:00:58 +0000
Files and hashes:         1: JLW0Yz0HCDkcw4sKWyqos9amn1E.crl (hash: C5mvgeSazECuziGQWN4iqmddm77n/VW5V+vwvHQxy2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0d:38:8c:14:87:6f:bf:44:14:0e:7c:50:93:a6:25:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b5b4633d0708391cc38b0a5b2aa8b3d6a69f51
        Validity
            Not Before: Nov 26 20:00:58 2023 GMT
            Not After : Nov 27 20:00:58 2023 GMT
        Subject: CN=27d16b21f17e62019177921e239e9cb96f8fddbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:ba:21:dc:6c:35:17:9c:16:07:be:f1:45:
                    12:92:79:db:8a:67:46:60:0c:2e:3d:6b:6f:1a:8d:
                    22:a5:fc:4c:76:71:c4:97:d4:df:66:25:4c:ec:00:
                    09:04:29:54:1a:41:37:1f:e3:20:17:5d:f5:f5:dc:
                    e3:74:ee:bc:0b:aa:e7:b2:d6:4f:34:05:9b:61:e4:
                    4b:87:4f:07:41:57:29:4b:0b:8d:dc:b0:e4:83:00:
                    f0:44:24:e9:26:8e:82:ed:ea:14:46:64:d5:26:8b:
                    14:bb:c4:39:b8:7e:30:62:27:a9:6d:7d:8a:55:c1:
                    67:49:c4:67:55:be:e8:fc:ed:85:ac:b1:ba:c6:44:
                    61:6d:32:01:47:34:16:52:0b:ff:09:e7:73:66:7e:
                    a5:b3:d0:59:63:79:1a:a7:ba:6b:69:74:d1:a5:b8:
                    89:40:6d:7e:4e:7a:e8:bf:b4:e8:e3:00:2f:dc:0b:
                    21:b0:3d:29:8b:87:95:bc:2f:76:2c:7a:df:bf:83:
                    9c:99:6c:22:d4:87:f7:4c:69:ae:18:c5:d6:c8:1e:
                    b4:ff:2b:00:fc:80:1d:03:b0:4c:a9:14:98:12:a1:
                    b6:2d:fd:d4:9f:8a:56:d6:3f:4a:c6:6f:46:cf:60:
                    2e:5c:be:72:a9:65:09:f8:6c:dd:16:5e:7d:e5:fd:
                    e7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:6B:21:F1:7E:62:01:91:77:92:1E:23:9E:9C:B9:6F:8F:DD:BE
            X509v3 Authority Key Identifier:
                keyid:24:B5:B4:63:3D:07:08:39:1C:C3:8B:0A:5B:2A:A8:B3:D6:A6:9F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLW0Yz0HCDkcw4sKWyqos9amn1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d71b67-7e16-4857-90a4-888fe2ac97e7/1/JLW0Yz0HCDkcw4sKWyqos9amn1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d71b67-7e16-4857-90a4-888fe2ac97e7/1/JLW0Yz0HCDkcw4sKWyqos9amn1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:a6:2f:78:c0:5b:20:cb:c7:84:f3:50:e6:9d:e4:8a:a1:
         2e:93:2f:67:47:e0:1a:df:17:d4:b6:14:97:b3:97:04:1c:15:
         6b:ad:b6:79:4d:2a:41:ba:52:7a:c8:eb:da:ae:42:50:4f:bb:
         a0:d7:c6:44:30:de:36:62:e6:e7:b5:8c:e3:8c:6c:3b:d0:4a:
         c9:da:93:e6:a0:54:cc:c5:10:30:c0:24:fd:5c:cd:31:a9:ef:
         8f:51:f2:7d:02:bf:41:66:1e:8b:36:3b:42:67:d3:10:c7:71:
         25:20:33:72:fa:53:19:64:09:b8:3e:46:f4:19:68:33:b3:e5:
         3a:8f:9c:62:84:f1:76:82:90:94:1e:f5:fd:de:e9:d6:c3:99:
         07:3e:f3:b5:3d:89:50:d2:1b:5d:3a:9b:aa:77:34:7e:77:75:
         0e:57:7b:f2:d1:61:ff:7e:23:d7:d6:e8:d0:49:af:e2:cd:b4:
         cc:8c:de:06:5a:bd:e0:95:25:72:df:0d:df:ea:f9:ea:f4:98:
         f3:b9:c9:83:d6:0a:76:da:69:e1:b1:74:91:d8:b4:60:38:6c:
         3d:c5:40:32:75:6a:de:cc:f9:f3:a6:f6:21:95:cd:82:d0:33:
         5a:2a:6e:cf:00:66:44:15:04:32:59:3a:29:0b:ce:6b:05:ba:
         33:e1:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----