Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0f6023-dd43-431f-9f55-d775778a2053/1/1whmBpRdsg-yLjfnl2ZbXk3HMAI.mft
File:                     1whmBpRdsg-yLjfnl2ZbXk3HMAI.mft (raw, json)
Hash identifier:          y5O1yA92OCO742K6Ff5MWTuwgjzmnB6Z1U+2G0CB/4s=
Subject key identifier:   D8:D4:22:69:82:39:25:C9:9F:20:9D:C3:87:55:8D:BC:11:BB:22:57
Authority key identifier: D7:08:66:06:94:5D:B2:0F:B2:2E:37:E7:97:66:5B:5E:4D:C7:30:02
Certificate issuer:       /CN=d7086606945db20fb22e37e797665b5e4dc73002
Certificate serial:       0188B91820B1A0416C5C1001765F416C6E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1whmBpRdsg-yLjfnl2ZbXk3HMAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/0f6023-dd43-431f-9f55-d775778a2053/1/1whmBpRdsg-yLjfnl2ZbXk3HMAI.mft
Manifest number:          0343
Signing time:             Wed 14 Jun 2023 08:49:06 +0000
Manifest this update:     Wed 14 Jun 2023 08:49:06 +0000
Manifest next update:     Thu 15 Jun 2023 08:49:06 +0000
Files and hashes:         1: 1whmBpRdsg-yLjfnl2ZbXk3HMAI.crl (hash: uuRmu++gMX9ItCC3gA2pUO1SpyzG/MI8l/485WTUvGo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:18:20:b1:a0:41:6c:5c:10:01:76:5f:41:6c:6e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7086606945db20fb22e37e797665b5e4dc73002
        Validity
            Not Before: Jun 14 08:49:06 2023 GMT
            Not After : Jun 15 08:49:06 2023 GMT
        Subject: CN=d8d42269823925c99f209dc387558dbc11bb2257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8b:6e:c5:b6:e9:cc:86:a2:64:c3:dd:c2:80:
                    8e:69:7e:99:67:29:d1:59:f3:47:a2:f2:4e:f0:7c:
                    a2:a3:02:71:7b:e1:78:ab:ec:52:e1:86:15:a4:a2:
                    6e:4c:35:7b:8a:9e:9f:1a:41:f0:4f:44:02:27:98:
                    de:76:c8:51:7f:72:8c:74:69:79:32:b6:02:5c:70:
                    04:c6:0f:54:62:9b:65:6e:08:fd:6a:bf:5f:d0:62:
                    3b:1c:ae:61:f3:ec:9c:3d:2b:76:ae:5f:14:a9:85:
                    7a:a5:83:ce:22:e6:f1:5c:39:49:7d:1d:42:41:76:
                    bc:23:63:61:b1:9d:f1:f8:39:57:3e:ad:17:a0:b2:
                    ba:6c:40:74:02:db:ba:e9:9b:67:a0:1d:70:5b:b0:
                    11:13:34:71:b4:49:5d:1b:0e:f7:dd:c4:f3:f8:70:
                    8b:4d:37:09:e8:81:62:0e:3d:e7:09:4d:f3:0c:9b:
                    9f:a6:8f:76:1d:a2:af:d7:da:0e:9b:3d:87:6f:31:
                    3a:d3:3d:72:89:ec:bf:d7:c3:ef:3b:21:db:ba:70:
                    98:6a:4a:11:db:d5:02:2d:8a:59:e1:fb:11:fd:06:
                    e4:c8:76:a7:16:8f:6f:9d:bc:f7:f0:3c:a4:7a:74:
                    2a:31:9e:b7:0c:a8:ab:b3:bc:48:2c:06:87:54:dd:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D4:22:69:82:39:25:C9:9F:20:9D:C3:87:55:8D:BC:11:BB:22:57
            X509v3 Authority Key Identifier:
                keyid:D7:08:66:06:94:5D:B2:0F:B2:2E:37:E7:97:66:5B:5E:4D:C7:30:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1whmBpRdsg-yLjfnl2ZbXk3HMAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f6023-dd43-431f-9f55-d775778a2053/1/1whmBpRdsg-yLjfnl2ZbXk3HMAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f6023-dd43-431f-9f55-d775778a2053/1/1whmBpRdsg-yLjfnl2ZbXk3HMAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:e1:01:a8:b8:b6:0a:e9:08:24:a8:48:b0:80:ae:30:21:89:
         bd:ab:bd:82:fe:32:8b:3c:18:99:5a:e7:4a:f1:1f:ac:c8:3e:
         b2:1c:ad:c6:00:93:ea:64:18:00:e4:e9:c5:26:b6:32:8a:65:
         fd:a2:24:72:14:05:5d:e0:4e:d7:27:66:06:1d:52:e3:65:19:
         ad:bb:e9:dc:8e:ea:39:26:0f:7d:94:a5:ad:60:39:6f:2b:18:
         be:b0:05:2b:6e:32:1a:44:a2:10:ae:1c:bd:7d:7f:ed:18:13:
         31:b4:23:21:a1:b7:76:6f:b0:57:b6:ca:bf:35:42:28:75:2a:
         e6:77:29:68:5b:7b:e0:77:d9:bd:51:f4:63:ca:07:1e:0c:1e:
         36:a4:fa:c1:09:0c:a4:3d:57:94:d2:2d:19:8e:17:ac:37:94:
         97:90:79:17:cb:8b:44:5c:20:de:0f:fc:9d:c5:45:5a:b2:36:
         20:69:75:18:df:f1:3e:65:25:cc:a7:9a:ff:b5:be:ef:f2:eb:
         82:f8:d0:f8:da:d9:c4:e9:2d:e7:00:b7:ae:17:cc:3b:ab:5f:
         b3:1a:7f:2b:a5:29:cc:97:97:5b:3a:f4:df:0f:c9:08:8c:0a:
         e1:ee:0d:a4:88:ad:23:f6:95:61:ed:bc:d1:cd:c5:03:04:fc:
         7b:b5:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----