Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a8064e-2c04-4441-965d-e45423f27ed9/1/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.mft
File:                     EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.mft (raw, json)
Hash identifier:          j+Zuz/Ic/f+WI29ixu+p2nA0jdV04GEikWaEJ3oJFDc=
Subject key identifier:   C2:81:07:47:50:63:7A:F6:B3:63:B6:FE:E0:8E:FB:11:63:C4:45:DB
Authority key identifier: 12:AB:6E:54:C9:04:EB:32:69:58:57:CA:86:64:37:83:76:45:70:AA
Certificate issuer:       /CN=12ab6e54c904eb32695857ca86643783764570aa
Certificate serial:       018C618C627CCB58AFE2D1EFC6A50422D65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/a8064e-2c04-4441-965d-e45423f27ed9/1/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.mft
Manifest number:          1A
Signing time:             Wed 13 Dec 2023 05:00:39 +0000
Manifest this update:     Wed 13 Dec 2023 05:00:39 +0000
Manifest next update:     Thu 14 Dec 2023 05:00:39 +0000
Files and hashes:         1: EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.crl (hash: TRb0pHFcENLSvVzoJkf/7oNWX4XtNyP7gW7iI6iFAbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:61:8c:62:7c:cb:58:af:e2:d1:ef:c6:a5:04:22:d6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ab6e54c904eb32695857ca86643783764570aa
        Validity
            Not Before: Dec 13 05:00:39 2023 GMT
            Not After : Dec 14 05:00:39 2023 GMT
        Subject: CN=c281074750637af6b363b6fee08efb1163c445db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:22:8a:fd:ff:e9:9a:f0:ae:f2:79:d5:4b:9a:
                    3c:ff:82:4e:36:bb:ba:42:c8:c8:1a:62:01:81:84:
                    8b:57:51:f9:5e:ed:0c:65:26:57:05:08:ce:d3:1f:
                    50:5a:a5:3d:65:53:66:d7:2a:80:f2:cf:52:98:5e:
                    66:65:bf:1e:a8:cb:64:7b:c0:b9:8a:03:b2:5b:4c:
                    a6:46:2e:77:68:57:15:dc:0c:60:8b:b8:17:44:3b:
                    96:1e:d5:45:ce:8f:ac:4f:d9:eb:b0:0e:16:92:51:
                    7a:c4:af:a2:ab:84:68:35:81:a2:ba:d3:5d:ea:2f:
                    27:3f:74:d5:a8:a5:26:63:26:3f:dd:43:55:77:79:
                    65:0d:e4:9a:eb:cb:ff:33:7d:7b:f7:e1:f2:3d:5f:
                    dc:b8:bf:08:50:06:6f:f3:b0:9c:79:2d:e5:e3:0a:
                    c6:96:f9:12:e4:b3:0d:b4:d3:02:4a:45:7e:32:be:
                    fc:0a:20:e9:d3:ec:c5:be:b1:30:36:ed:bc:32:71:
                    65:a4:18:fa:3b:5c:20:fb:03:b2:fa:c2:d9:e4:20:
                    73:72:2c:8c:8c:35:82:31:db:bf:3c:4d:fc:9d:76:
                    e8:6c:7a:45:6b:24:9e:f2:63:2c:ae:73:dd:da:05:
                    9d:de:ff:2c:c1:62:83:3f:3b:d7:90:4c:c0:cb:05:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:81:07:47:50:63:7A:F6:B3:63:B6:FE:E0:8E:FB:11:63:C4:45:DB
            X509v3 Authority Key Identifier:
                keyid:12:AB:6E:54:C9:04:EB:32:69:58:57:CA:86:64:37:83:76:45:70:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a8064e-2c04-4441-965d-e45423f27ed9/1/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a8064e-2c04-4441-965d-e45423f27ed9/1/EqtuVMkE6zJpWFfKhmQ3g3ZFcKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:c1:fb:d0:83:48:05:d1:f7:32:90:d0:3a:e7:2b:0e:7f:
         ba:e8:5c:b3:2d:56:5b:64:cf:4b:b8:cb:a0:41:23:e7:ea:56:
         9b:40:ce:a2:e4:5f:f8:eb:24:9c:90:f1:ef:9b:79:57:2c:fa:
         ed:b8:6f:81:54:09:8a:18:a4:ed:9a:e0:1e:62:cf:35:bd:56:
         7a:4e:9d:cf:f5:2d:ba:3b:8f:dc:67:1c:9c:75:1b:4a:7f:72:
         e2:3f:ce:4a:5c:0c:f2:cc:03:a5:e1:39:bf:31:6a:01:f8:f2:
         fe:85:5f:84:38:64:0b:59:ae:5f:bb:60:43:ca:73:df:db:aa:
         35:c6:60:1a:33:60:3e:60:6d:be:c2:7b:2a:f7:79:8c:7d:e4:
         a0:e1:02:b9:3e:4c:ce:04:44:71:cd:26:8b:2c:ba:14:5e:eb:
         59:54:a4:98:12:44:8d:ec:f4:70:7c:ac:69:51:c5:71:41:80:
         6f:ec:e0:da:bc:c7:e5:78:9a:9a:ba:e2:01:54:56:10:3b:f6:
         af:61:f5:9d:ba:d8:e0:52:52:3d:ff:dd:2a:f2:aa:93:0e:61:
         41:49:8d:6b:a2:e9:9b:78:14:c3:02:0c:61:89:2c:94:13:3a:
         1b:88:a2:06:95:cf:e5:c6:a7:92:d8:91:40:59:a7:eb:90:a4:
         18:3b:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----