Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/60d442-b120-4838-8289-66efe8e424b7/1/y-QypXVxjfrP9EG5YRNQO7hD6U8.mft
File:                     y-QypXVxjfrP9EG5YRNQO7hD6U8.mft (raw, json)
Hash identifier:          PQuxIhaVXhTAXA1vRy83odZRIiRmxFkGWkbx2Mo4PQo=
Subject key identifier:   12:D3:0B:62:67:AA:0C:AD:39:03:B3:B7:B9:95:31:0B:08:35:06:57
Authority key identifier: CB:E4:32:A5:75:71:8D:FA:CF:F4:41:B9:61:13:50:3B:B8:43:E9:4F
Certificate issuer:       /CN=cbe432a575718dfacff441b96113503bb843e94f
Certificate serial:       018A8831FFD354C533CFEA295915E159274B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-QypXVxjfrP9EG5YRNQO7hD6U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/60d442-b120-4838-8289-66efe8e424b7/1/y-QypXVxjfrP9EG5YRNQO7hD6U8.mft
Manifest number:          034C
Signing time:             Tue 12 Sep 2023 07:01:32 +0000
Manifest this update:     Tue 12 Sep 2023 07:01:32 +0000
Manifest next update:     Wed 13 Sep 2023 07:01:32 +0000
Files and hashes:         1: y-QypXVxjfrP9EG5YRNQO7hD6U8.crl (hash: s7jSUOxUgcDQtO859vnTDyeyZx8+UhkB7MblthwtZOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:88:31:ff:d3:54:c5:33:cf:ea:29:59:15:e1:59:27:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe432a575718dfacff441b96113503bb843e94f
        Validity
            Not Before: Sep 12 07:01:32 2023 GMT
            Not After : Sep 13 07:01:32 2023 GMT
        Subject: CN=12d30b6267aa0cad3903b3b7b995310b08350657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:54:2e:73:5d:e0:50:b9:0c:d6:31:03:3c:
                    4e:7d:f0:21:47:c7:8c:ce:96:b5:82:7c:2a:d5:c6:
                    b4:7d:40:20:5f:65:b5:9d:98:7a:7b:86:da:4f:a9:
                    dd:e9:76:0c:3e:2c:6c:53:c2:86:1a:c7:bb:da:c1:
                    af:77:9f:7d:90:6e:0c:a3:fa:f4:67:91:f1:3a:a8:
                    36:46:2d:5c:30:61:b0:aa:90:15:fd:60:8f:ab:f8:
                    24:c7:fe:79:a9:af:9a:ab:fb:e7:49:32:1e:1e:b7:
                    11:21:58:ea:5b:60:11:09:b1:ad:cf:2f:61:1f:c3:
                    97:ad:31:78:8c:1f:5e:59:90:57:9f:12:54:56:b4:
                    c5:a3:8c:91:bd:fb:40:58:14:f3:53:98:a6:5a:9b:
                    1a:42:0e:60:a1:94:3a:f2:14:89:c1:ee:dd:06:b0:
                    4f:1d:56:ce:51:9d:2e:21:b0:57:73:53:a3:42:9a:
                    bf:61:49:e8:89:88:e0:48:0e:68:e7:e3:aa:21:21:
                    16:53:56:ce:28:68:bd:37:2d:77:09:65:50:84:fe:
                    02:11:64:f5:99:8a:7f:07:a4:64:a0:0e:62:76:b1:
                    9f:fa:b7:29:29:c6:36:a9:72:c5:22:ed:ff:b8:25:
                    5f:54:85:50:21:b6:77:c0:25:64:5f:df:0f:70:c3:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D3:0B:62:67:AA:0C:AD:39:03:B3:B7:B9:95:31:0B:08:35:06:57
            X509v3 Authority Key Identifier:
                keyid:CB:E4:32:A5:75:71:8D:FA:CF:F4:41:B9:61:13:50:3B:B8:43:E9:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-QypXVxjfrP9EG5YRNQO7hD6U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/60d442-b120-4838-8289-66efe8e424b7/1/y-QypXVxjfrP9EG5YRNQO7hD6U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/60d442-b120-4838-8289-66efe8e424b7/1/y-QypXVxjfrP9EG5YRNQO7hD6U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:d7:10:96:dd:69:fb:df:5e:50:7f:c4:b3:f7:cb:48:66:
         d1:79:8f:4b:70:ad:1f:0e:bc:77:1d:e7:67:bf:a9:dc:68:de:
         8f:8b:b1:df:78:af:8b:87:51:cc:dc:02:11:b1:9e:43:9b:c8:
         67:ad:9b:08:0e:00:3e:74:c3:57:a0:c1:22:88:64:73:04:64:
         1c:30:fd:2d:4e:ac:d6:83:75:5b:45:a7:e7:1a:67:15:e6:e2:
         b7:23:36:d3:61:db:a3:e2:4b:4c:f2:d4:c6:48:98:68:1f:ac:
         54:38:3c:e5:65:6a:aa:e7:b7:83:10:69:7e:e2:2d:e0:a6:e4:
         a5:ca:c6:fc:79:8f:8f:44:f7:c8:93:f2:d5:cd:55:1e:2d:a1:
         8d:0d:c4:d7:72:0e:66:58:ae:13:8d:96:90:43:4c:2e:9a:dc:
         0a:d2:d2:84:65:96:8d:b6:d1:4e:02:56:06:ea:61:31:a7:83:
         5e:4c:a8:be:0b:63:f8:30:a7:37:45:00:b0:3c:a9:5b:47:1d:
         5a:bd:b1:cc:ad:cc:9c:bc:d5:19:95:5b:9b:4c:5a:91:30:7f:
         37:85:99:87:c4:c4:3e:68:6c:68:60:0c:b4:aa:8a:19:cd:e5:
         a2:28:55:13:b2:16:57:8a:39:53:4d:fa:04:9b:a9:37:f6:f2:
         1d:16:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----