Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.mft
File:                     6emtk09AWUyfG6UASVqT7uw8bOM.mft (raw, json)
Hash identifier:          qiyzMl+6fOIl4SRZbvIkAQiMfV89WyDCji7YhtNttko=
Subject key identifier:   A6:EF:32:37:4F:6D:DD:18:80:DA:A2:1A:0C:D2:91:6A:C6:29:50:3F
Authority key identifier: E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
Certificate issuer:       /CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
Certificate serial:       018C856203B3BB81327E2B250CBB8BE2D7B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.mft
Manifest number:          0885
Signing time:             Wed 20 Dec 2023 04:00:42 +0000
Manifest this update:     Wed 20 Dec 2023 04:00:42 +0000
Manifest next update:     Thu 21 Dec 2023 04:00:42 +0000
Files and hashes:         1: 6emtk09AWUyfG6UASVqT7uw8bOM.crl (hash: OK3XrFzFCYpco4dwxgTgZyZd7uiP9tWh/oDhyP0AhYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:85:62:03:b3:bb:81:32:7e:2b:25:0c:bb:8b:e2:d7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
        Validity
            Not Before: Dec 20 04:00:42 2023 GMT
            Not After : Dec 21 04:00:42 2023 GMT
        Subject: CN=a6ef32374f6ddd1880daa21a0cd2916ac629503f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:1f:88:d0:9f:62:af:63:a1:6f:6d:db:2b:
                    f3:62:cd:9d:da:a5:5d:fc:e1:d9:ab:82:c5:b7:91:
                    d6:ff:0d:de:95:74:d5:f9:a5:3e:ed:0f:d9:4b:a8:
                    86:5d:52:0e:ba:c9:ea:4e:ef:43:8b:4d:e1:b8:fa:
                    e3:1a:b3:37:ff:ae:5e:dd:1a:f0:9c:39:0d:b6:5e:
                    98:a0:39:5e:27:94:ba:29:68:f8:30:ab:3d:3a:a3:
                    22:b2:fd:8e:de:ad:4e:36:67:e8:50:d1:5c:cf:d5:
                    d4:1e:8f:33:c9:be:af:d0:9d:81:16:14:e0:3c:90:
                    c3:42:9e:05:b8:e3:0e:ee:a0:27:1e:13:ae:98:d1:
                    ec:e6:d9:11:f3:00:c7:d9:b9:38:ad:3a:d6:64:9d:
                    47:fc:25:46:a3:54:6d:2a:96:3c:42:40:8f:f8:3f:
                    19:4a:47:1f:f5:c5:7e:62:42:19:6e:d6:f3:25:d9:
                    7d:71:ec:d2:d9:c5:e5:f7:a3:17:d1:93:6c:a8:fb:
                    80:7d:6c:8b:e8:81:9c:d2:ae:29:9c:49:6a:79:35:
                    33:be:cc:da:f5:78:35:4e:13:de:f4:b1:9d:30:88:
                    1c:91:06:a2:54:92:64:f3:94:a4:48:5b:76:6f:d1:
                    17:60:14:8d:cb:1c:c7:a1:65:5b:0a:c5:93:71:8b:
                    a2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:32:37:4F:6D:DD:18:80:DA:A2:1A:0C:D2:91:6A:C6:29:50:3F
            X509v3 Authority Key Identifier:
                keyid:E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:5c:7e:45:6c:05:b7:26:a3:0a:b6:70:a1:1c:5c:6c:64:ce:
         1b:e8:49:ec:f8:12:69:cd:0e:b9:0e:f0:23:20:62:00:27:6a:
         55:a5:9f:72:96:bb:ee:f0:39:70:25:91:f3:31:af:a3:37:e8:
         6c:b7:72:4c:0e:44:0a:e9:db:79:bb:85:aa:64:f4:5f:41:80:
         40:50:6f:0e:8d:cc:eb:10:bb:41:84:82:92:e5:e2:ef:5f:7f:
         34:9e:8e:4a:b5:4c:05:7d:f3:6b:e8:b0:df:85:f9:31:12:98:
         4e:52:90:0c:95:9a:bd:f7:51:e4:ee:e1:6f:1b:ba:d2:db:dc:
         1e:0d:b0:86:e9:54:e7:63:26:0f:b2:11:b3:fe:d1:0e:b3:eb:
         c3:9b:72:25:b0:93:ab:e8:ca:10:0c:92:a7:ce:5c:ec:ec:a1:
         36:aa:f3:b8:7f:86:f6:60:37:b3:3c:be:ca:fd:16:12:92:e2:
         8c:6a:b9:e2:33:48:72:26:6e:21:1a:7e:43:8b:cf:d7:f4:39:
         ea:5d:98:ad:b0:e6:2b:5d:5e:b8:ff:c9:23:12:17:af:3b:57:
         2f:09:81:82:90:28:78:bf:1c:96:74:69:38:00:28:85:4a:d9:
         a6:0e:2c:d6:5b:3b:47:cd:6c:3e:b8:64:fe:53:4a:0e:58:ff:
         5b:01:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----