Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/92bccb-9325-47b9-a6b3-47daf43b5424/1/W8JDPpPpIiJuyjS8wC-Bnga5B1w.mft
File:                     W8JDPpPpIiJuyjS8wC-Bnga5B1w.mft (raw, json)
Hash identifier:          PHnp1xCZQvovYA3Pge4T20EoYNC+bq6jf+58p8glTGc=
Subject key identifier:   4B:46:91:E5:A9:07:65:66:41:46:4F:6B:4E:01:18:39:E3:77:34:DE
Authority key identifier: 5B:C2:43:3E:93:E9:22:22:6E:CA:34:BC:C0:2F:81:9E:06:B9:07:5C
Certificate issuer:       /CN=5bc2433e93e922226eca34bcc02f819e06b9075c
Certificate serial:       0188FFCCB3815FABAB2C7993163312DAC67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8JDPpPpIiJuyjS8wC-Bnga5B1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/92bccb-9325-47b9-a6b3-47daf43b5424/1/W8JDPpPpIiJuyjS8wC-Bnga5B1w.mft
Manifest number:          013B
Signing time:             Wed 28 Jun 2023 02:19:45 +0000
Manifest this update:     Wed 28 Jun 2023 02:19:45 +0000
Manifest next update:     Thu 29 Jun 2023 02:19:45 +0000
Files and hashes:         1: W8JDPpPpIiJuyjS8wC-Bnga5B1w.crl (hash: bGy4UgsfwAkd8r6lPlnut2tSxZuSYv/h6/6TU26TzH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ff:cc:b3:81:5f:ab:ab:2c:79:93:16:33:12:da:c6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc2433e93e922226eca34bcc02f819e06b9075c
        Validity
            Not Before: Jun 28 02:19:45 2023 GMT
            Not After : Jun 29 02:19:45 2023 GMT
        Subject: CN=4b4691e5a907656641464f6b4e011839e37734de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:aa:b0:ec:3f:e1:12:a6:7b:b2:94:29:9f:
                    5c:1a:86:66:c6:04:b4:05:43:e0:13:7d:7b:f2:23:
                    b8:5e:a2:6e:d5:e1:5d:53:3a:36:87:46:bc:ae:c6:
                    03:f5:34:cb:e7:fc:89:ce:ec:c3:77:ef:44:36:1b:
                    ac:9f:98:45:9f:2f:63:c9:98:7c:8e:d7:68:9b:61:
                    31:3e:c9:86:df:e3:ea:8d:74:a8:38:ec:84:44:53:
                    ab:31:47:2a:98:49:30:0c:ff:64:5e:64:ab:65:ea:
                    4d:8e:1f:ef:8c:ad:e3:e7:03:c1:57:65:6c:66:e6:
                    5e:41:74:ae:77:ad:9e:67:b7:c2:ef:a6:6a:aa:78:
                    c9:9a:1d:7b:3c:83:e8:0d:5f:33:eb:57:f9:fa:c1:
                    cf:5a:9b:fb:87:c4:77:20:1b:6d:92:df:e5:a4:dd:
                    18:d8:33:4a:5c:59:71:25:8d:26:3b:f0:e6:cb:02:
                    e5:68:84:40:63:9e:11:0e:27:66:62:60:70:77:9b:
                    3b:1f:80:04:ba:49:27:2f:3e:d8:36:d8:5c:59:2c:
                    b0:23:46:02:49:37:1e:f1:30:7c:d7:40:de:b8:cb:
                    cd:d4:3d:2e:68:52:af:20:30:c5:ff:1c:dc:03:f6:
                    3f:b6:75:87:41:35:2a:12:f9:21:5a:50:9e:de:e0:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:46:91:E5:A9:07:65:66:41:46:4F:6B:4E:01:18:39:E3:77:34:DE
            X509v3 Authority Key Identifier:
                keyid:5B:C2:43:3E:93:E9:22:22:6E:CA:34:BC:C0:2F:81:9E:06:B9:07:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8JDPpPpIiJuyjS8wC-Bnga5B1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/92bccb-9325-47b9-a6b3-47daf43b5424/1/W8JDPpPpIiJuyjS8wC-Bnga5B1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/92bccb-9325-47b9-a6b3-47daf43b5424/1/W8JDPpPpIiJuyjS8wC-Bnga5B1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e4:ac:84:99:e3:de:93:9c:bd:fa:a9:86:56:02:15:ea:98:
         ad:c8:ad:85:74:aa:85:5a:a0:30:c5:e4:cc:87:33:3a:87:a3:
         ce:72:96:55:8e:61:48:90:ed:00:d6:a6:df:67:27:5c:7a:d8:
         06:c4:df:9f:b4:9e:3c:0c:88:76:b5:19:b3:5d:42:46:56:f9:
         6f:10:8d:78:fe:2a:32:8d:1b:13:be:f7:d4:e8:4e:df:49:02:
         cf:a7:30:b6:8e:c6:ba:25:1e:ea:de:4f:68:9f:30:3d:bd:06:
         20:ae:29:22:ee:09:3f:2d:ea:6d:cd:22:81:55:15:fb:6e:a2:
         7e:50:f5:66:d4:ee:82:9c:dc:3c:4f:e8:8b:70:23:38:7c:f4:
         6e:64:8d:9b:77:e0:cf:42:66:c3:72:23:14:39:08:46:40:c2:
         2b:fe:8c:4b:c6:a9:b5:d7:9e:f2:65:f8:85:c5:2b:17:3f:1b:
         3f:b2:30:9c:00:54:ac:97:36:a3:bc:13:92:7d:d0:76:84:35:
         61:b0:83:41:fd:e2:f8:37:88:47:5c:35:18:bb:0e:b0:dc:10:
         46:5d:6f:38:19:8b:20:98:09:df:a3:68:08:7c:07:42:bf:cb:
         da:2f:3b:e7:ff:17:5e:f2:69:17:dd:25:4f:87:2d:08:78:24:
         36:cc:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----