Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/3QBoNzkz_w9uXf5melXI1VfTRVw.mft
File:                     3QBoNzkz_w9uXf5melXI1VfTRVw.mft (raw, json)
Hash identifier:          QNTH0M/xy5A5uLKX1rZMq9qXVYb9qzMzXq65NslVwv4=
Subject key identifier:   D3:BA:AD:64:19:10:86:FD:3B:95:17:B3:1B:F8:6C:5A:90:BF:30:BA
Authority key identifier: DD:00:68:37:39:33:FF:0F:6E:5D:FE:66:7A:55:C8:D5:57:D3:45:5C
Certificate issuer:       /CN=dd0068373933ff0f6e5dfe667a55c8d557d3455c
Certificate serial:       018AB68B02BC0B4D64622CD0AD7EF1D26CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QBoNzkz_w9uXf5melXI1VfTRVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/3QBoNzkz_w9uXf5melXI1VfTRVw.mft
Manifest number:          0861
Signing time:             Thu 21 Sep 2023 07:01:17 +0000
Manifest this update:     Thu 21 Sep 2023 07:01:17 +0000
Manifest next update:     Fri 22 Sep 2023 07:01:17 +0000
Files and hashes:         1: 3QBoNzkz_w9uXf5melXI1VfTRVw.crl (hash: l/2VDahzF+ufSg0ayV1PiZEP8Df97XGv7QIOfqsOYAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b6:8b:02:bc:0b:4d:64:62:2c:d0:ad:7e:f1:d2:6c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0068373933ff0f6e5dfe667a55c8d557d3455c
        Validity
            Not Before: Sep 21 07:01:17 2023 GMT
            Not After : Sep 22 07:01:17 2023 GMT
        Subject: CN=d3baad64191086fd3b9517b31bf86c5a90bf30ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:44:ba:5a:bd:f1:3c:87:68:e6:fd:41:ef:
                    26:9e:64:a4:62:ec:97:92:8f:e1:ca:60:99:12:66:
                    40:ba:65:15:ad:fb:95:9c:6b:24:d4:28:82:17:06:
                    52:00:91:ce:04:24:84:f2:ef:4c:0b:1f:02:90:11:
                    68:ca:b8:06:23:d6:15:13:33:a8:26:76:e2:88:9b:
                    22:1c:ca:83:3a:11:d8:94:19:ec:98:fe:fd:93:b4:
                    6c:b4:b9:c7:c3:ce:41:33:00:2f:f7:99:e9:9d:73:
                    f0:ed:aa:d4:0b:d9:aa:d8:05:68:29:d0:8e:e4:f1:
                    f2:89:2e:e7:5e:ad:36:7e:b8:fa:3b:f9:32:20:b3:
                    4e:48:e8:81:db:48:f9:0e:32:de:30:6b:5c:d9:ac:
                    3e:1c:1b:17:00:c2:47:70:e8:cd:7e:20:cf:97:9e:
                    f1:be:59:8a:c1:40:b6:1a:b8:a7:e7:7e:65:07:08:
                    63:95:f9:fe:b6:8d:cd:9f:0d:36:bd:5e:2d:c8:56:
                    01:c6:7e:ad:67:d9:2a:0d:cd:72:45:2f:3c:06:57:
                    5c:86:c2:fa:ac:cf:44:bb:a4:3d:c5:c0:66:e4:9c:
                    ce:63:23:7b:c4:f0:c7:df:00:f0:44:8e:2c:32:75:
                    2b:d3:f5:e2:28:f0:71:5a:0e:da:d8:7d:ce:ee:bc:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BA:AD:64:19:10:86:FD:3B:95:17:B3:1B:F8:6C:5A:90:BF:30:BA
            X509v3 Authority Key Identifier:
                keyid:DD:00:68:37:39:33:FF:0F:6E:5D:FE:66:7A:55:C8:D5:57:D3:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QBoNzkz_w9uXf5melXI1VfTRVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/3QBoNzkz_w9uXf5melXI1VfTRVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/3QBoNzkz_w9uXf5melXI1VfTRVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:46:7f:6f:5c:2f:20:43:bb:2f:bb:25:87:b1:db:9d:af:36:
         77:a8:bc:b0:dd:4c:29:a2:20:4e:a0:43:21:d3:67:56:96:6d:
         c9:d7:b4:43:37:50:7f:8f:ca:0a:72:30:2d:09:34:83:a4:8a:
         5a:3d:2f:ef:c4:3e:35:88:bd:69:d0:c3:a9:bc:2e:34:60:c1:
         04:90:75:48:4e:e2:18:a7:c2:b8:65:0e:46:bf:c1:cd:1b:05:
         9d:fe:2a:a5:3c:47:0b:02:0b:08:ce:2a:b3:66:5b:a3:3c:fc:
         df:ee:47:b8:bc:84:a7:a8:21:9a:f6:12:99:f5:31:4a:a1:4d:
         34:9d:36:82:4d:94:93:97:f1:06:0d:5d:08:7d:75:cf:c9:62:
         9b:3e:9b:de:5a:3d:2e:c2:02:d3:41:0e:99:31:c3:46:01:1d:
         2c:51:71:6e:d5:a6:6b:8c:de:51:b2:77:3b:41:68:ef:34:c5:
         79:86:7f:38:16:1e:8d:91:34:ad:d0:de:0c:65:82:44:86:ad:
         44:34:1c:9f:12:c3:69:f9:68:ed:26:73:8d:6f:28:d8:d6:c7:
         8a:e5:ef:e9:56:13:c8:de:33:50:cd:28:f1:be:56:93:e1:0d:
         68:62:30:2c:45:44:19:41:2a:e1:bf:16:79:bc:fe:e3:9b:f9:
         55:87:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----