Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.mft
File:                     H3c6E31b-1hp9X2sfzWewoGAR6Q.mft (raw, json)
Hash identifier:          OzImpFdColygnsIx0Fo1SLpWYlL2V68t+nCzRmrToQ8=
Subject key identifier:   58:4A:90:FA:84:98:D8:67:8E:38:34:35:22:CB:06:63:E8:15:13:20
Authority key identifier: 1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
Certificate issuer:       /CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Certificate serial:       018CA900F27C4ABA7A601356A0D8FCF9CD5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.mft
Manifest number:          07D5
Signing time:             Wed 27 Dec 2023 02:01:00 +0000
Manifest this update:     Wed 27 Dec 2023 02:01:00 +0000
Manifest next update:     Thu 28 Dec 2023 02:01:00 +0000
Files and hashes:         1: H3c6E31b-1hp9X2sfzWewoGAR6Q.crl (hash: RlJME70jDp0B0hPBOB6s2b8E0izEKlisuFCJw72LH0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:00:f2:7c:4a:ba:7a:60:13:56:a0:d8:fc:f9:cd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
        Validity
            Not Before: Dec 27 02:01:00 2023 GMT
            Not After : Dec 28 02:01:00 2023 GMT
        Subject: CN=584a90fa8498d8678e38343522cb0663e8151320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:9b:2a:bc:04:0d:4a:04:fd:11:b2:f2:58:
                    80:e5:66:f2:b3:f7:a0:e3:ba:ed:8c:ce:70:31:fa:
                    7d:bd:15:84:3f:50:c0:f4:43:c9:31:56:54:5e:11:
                    79:c2:d7:1b:ba:52:b2:8b:67:53:13:2b:7b:4e:58:
                    84:29:20:f4:79:57:1c:4f:02:c8:81:bf:c3:47:f9:
                    56:93:a1:30:fc:f6:85:93:d1:6a:ad:45:40:e6:58:
                    8e:f6:71:5a:36:c5:47:78:37:6b:25:f2:bb:29:9c:
                    cd:02:04:03:d3:8e:d0:2e:1f:31:67:61:dd:1d:90:
                    45:c0:d3:40:c9:07:e1:a6:66:e2:2a:d5:d3:55:b7:
                    19:16:2b:69:88:cc:77:a6:e9:17:8b:ea:2f:f7:fb:
                    ac:c2:9a:09:98:d1:63:20:54:ae:94:40:31:b5:89:
                    40:24:d9:a7:15:57:15:d9:f4:48:86:c4:67:40:a0:
                    de:32:ac:3f:26:55:bc:be:82:67:80:9b:2f:d3:bd:
                    4a:fe:9a:fd:c1:6d:11:63:09:66:69:04:4a:b3:56:
                    7e:6e:87:2e:1e:39:63:e1:e5:65:61:0b:a7:26:48:
                    6e:6e:28:b4:67:86:80:b6:60:7b:93:d6:e3:85:7f:
                    03:9f:bf:20:29:e5:81:d7:b0:84:a7:ec:c2:2a:1b:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4A:90:FA:84:98:D8:67:8E:38:34:35:22:CB:06:63:E8:15:13:20
            X509v3 Authority Key Identifier:
                keyid:1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:28:e1:2e:27:20:1e:42:92:39:1d:26:58:a3:ff:71:7e:01:
         2c:1d:54:2d:35:f7:bc:7c:0d:c3:e6:de:d6:bf:ba:c0:3e:92:
         0c:84:53:fb:0a:c0:c7:0e:cc:8f:d9:04:ec:b1:72:ea:8f:91:
         56:0d:bc:39:c8:67:71:6e:7d:0f:ed:36:a1:9b:0b:da:85:fd:
         f2:e2:d7:3d:1e:02:f5:00:4c:2f:ea:fb:7a:78:81:da:87:76:
         09:5a:8f:50:cb:79:94:97:5f:06:3b:3e:b9:60:d5:e2:3c:ae:
         c3:c3:cd:15:a0:a0:21:c7:08:5f:f0:9f:1b:ce:9e:46:ca:72:
         d0:b9:dd:f1:08:8e:77:a6:78:74:b4:d1:cf:12:f7:72:5c:ff:
         f4:f8:3a:73:dd:77:d5:82:a1:c0:95:a3:4d:c0:d6:00:bb:1b:
         68:d2:07:9e:2a:d9:0c:c0:a7:93:b2:21:7a:fc:3c:f2:12:dd:
         65:10:36:aa:10:be:11:20:3a:1e:a4:7e:43:7a:13:d6:e6:e2:
         5e:73:e3:1e:59:50:60:ac:c3:0b:8a:75:cf:6c:7b:24:15:3c:
         e1:fd:e8:ce:21:d0:a2:5a:23:e0:6e:83:07:9e:88:25:94:5d:
         33:d4:0c:c6:76:10:f1:56:21:7b:1d:20:6a:3b:94:a1:46:50:
         ca:d9:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----