Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/776e39-019d-4a81-843c-78832ac7be12/1/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.mft
File:                     PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.mft (raw, json)
Hash identifier:          7Y/VtSQ0TO+gY4xJ1FSCafVofFnk9f8CUKvCQuJAl/s=
Subject key identifier:   52:26:BC:D2:81:7E:66:C6:54:40:9E:4F:98:43:FC:FE:54:1C:3A:67
Authority key identifier: 3C:70:F0:33:1F:1B:36:39:97:67:8B:43:05:B5:F5:B9:C0:5D:84:44
Certificate issuer:       /CN=3c70f0331f1b363997678b4305b5f5b9c05d8444
Certificate serial:       01889AFB991E72ED89384E85E2BA4DE90DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/776e39-019d-4a81-843c-78832ac7be12/1/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.mft
Manifest number:          0714
Signing time:             Thu 08 Jun 2023 12:29:19 +0000
Manifest this update:     Thu 08 Jun 2023 12:29:19 +0000
Manifest next update:     Fri 09 Jun 2023 12:29:19 +0000
Files and hashes:         1: PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.crl (hash: 5qt8iaifp6RhW0ikC5fwmUiywc/FIqEQhk3xysyiOqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9a:fb:99:1e:72:ed:89:38:4e:85:e2:ba:4d:e9:0d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c70f0331f1b363997678b4305b5f5b9c05d8444
        Validity
            Not Before: Jun  8 12:29:19 2023 GMT
            Not After : Jun  9 12:29:19 2023 GMT
        Subject: CN=5226bcd2817e66c654409e4f9843fcfe541c3a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:27:d5:8e:39:5e:44:48:c0:e2:d0:4f:55:
                    25:9a:be:38:d8:3b:20:7e:c9:33:b4:f5:b1:2e:84:
                    71:09:e9:98:ea:45:ed:48:32:63:ab:31:da:e0:f5:
                    3c:fd:73:6f:a9:cc:e2:ac:3e:55:ac:a2:c7:79:ca:
                    f1:18:9f:0f:5f:33:52:48:bc:7f:f8:70:7d:66:d4:
                    db:2f:56:2f:3d:9c:78:bd:30:36:0e:8c:bf:91:df:
                    c7:ba:b7:86:55:db:3e:a6:01:ec:33:0b:f8:e3:39:
                    a8:b1:c4:c1:2d:4d:29:15:40:a0:1d:a3:31:71:ba:
                    ef:4b:30:b1:bf:dd:6a:4e:4e:32:27:65:63:05:2f:
                    3d:4c:68:65:e1:cc:83:8a:ac:86:f5:bf:4b:33:7f:
                    bf:00:ce:8d:6d:e2:6b:44:11:bb:80:36:2e:b3:5b:
                    58:f4:b0:f7:ce:9b:3e:cc:cc:00:b0:27:0c:17:42:
                    4d:6e:9e:57:42:f7:b0:42:c2:26:3c:8c:4b:f7:95:
                    24:c1:ed:f5:37:24:c4:15:93:01:9a:ee:00:10:21:
                    2b:1d:3b:e5:6c:39:bb:a7:7b:c8:03:20:8c:c4:7a:
                    10:f4:31:be:77:c7:6a:02:a6:b2:0b:2b:d2:3a:ca:
                    87:3d:be:e0:7e:34:f9:3c:80:e5:2e:39:26:be:57:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:26:BC:D2:81:7E:66:C6:54:40:9E:4F:98:43:FC:FE:54:1C:3A:67
            X509v3 Authority Key Identifier:
                keyid:3C:70:F0:33:1F:1B:36:39:97:67:8B:43:05:B5:F5:B9:C0:5D:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/776e39-019d-4a81-843c-78832ac7be12/1/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/776e39-019d-4a81-843c-78832ac7be12/1/PHDwMx8bNjmXZ4tDBbX1ucBdhEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:c9:9b:25:ad:da:a5:1e:a6:15:29:98:ef:61:93:c7:83:c1:
         30:09:fc:1d:72:a1:46:cb:c3:38:cd:e2:06:9d:61:f2:10:7e:
         53:7a:e7:c4:ce:e9:c5:0f:65:0d:67:9e:ca:08:ab:35:60:fd:
         54:e5:a8:a7:1f:12:c7:7d:8a:ba:3d:af:74:52:cf:e8:46:0d:
         10:c2:6a:3f:4e:14:c4:36:cc:69:19:eb:5d:70:d4:9f:da:33:
         42:d3:e7:96:aa:20:91:c0:e0:ad:f7:c1:c5:21:f6:82:6d:47:
         4a:bc:9b:c1:e6:bd:4d:1b:34:71:7b:d7:12:37:1f:72:a9:af:
         73:e4:18:85:05:44:3f:10:2c:24:31:6e:bf:34:e3:1a:e4:1b:
         f8:dd:d1:89:da:7d:40:78:81:2c:ed:72:32:d8:6b:8c:cd:08:
         09:07:b0:ca:69:54:c9:4f:ce:08:3e:6c:fb:a9:ff:49:28:7a:
         0d:56:88:b9:39:a5:0e:e0:a0:7b:d2:02:3a:3b:0c:fd:6c:b7:
         f1:0d:ab:b0:68:dc:81:86:fc:66:71:17:2f:5c:3d:5a:48:0e:
         c0:52:11:e3:50:37:33:fa:db:43:5f:b9:40:a8:9e:0c:a3:22:
         46:64:07:e9:3a:63:b3:60:da:72:5d:a0:9f:91:cb:43:a4:39:
         84:43:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----