Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.mft
File:                     Ah-YeUI--xB8d5E29VPkpvJFoNc.mft (raw, json)
Hash identifier:          zk9jN2US86VJdnGKiEhbH2F8Ed6ybD4/aYktWPpwQpU=
Subject key identifier:   59:88:C0:A3:36:26:A1:49:31:60:0E:C5:61:1B:AD:DE:A1:24:A6:2F
Authority key identifier: 02:1F:98:79:42:3E:FB:10:7C:77:91:36:F5:53:E4:A6:F2:45:A0:D7
Certificate issuer:       /CN=021f9879423efb107c779136f553e4a6f245a0d7
Certificate serial:       018539097AFFEFD7E1FB38255B5C8C1D3FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ah-YeUI--xB8d5E29VPkpvJFoNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.mft
Manifest number:          E4
Signing time:             Thu 22 Dec 2022 08:53:20 +0000
Manifest this update:     Thu 22 Dec 2022 08:53:20 +0000
Manifest next update:     Fri 23 Dec 2022 08:53:20 +0000
Files and hashes:         1: Ah-YeUI--xB8d5E29VPkpvJFoNc.crl (hash: UWBu0y7dMEuSuung7rXrq0Y/LV3OVbxtITecdMdo+Ws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:39:09:7a:ff:ef:d7:e1:fb:38:25:5b:5c:8c:1d:3f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021f9879423efb107c779136f553e4a6f245a0d7
        Validity
            Not Before: Dec 22 08:53:20 2022 GMT
            Not After : Dec 23 08:53:20 2022 GMT
        Subject: CN=5988c0a33626a14931600ec5611baddea124a62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:c2:42:c6:27:c2:d9:74:8c:ec:b3:06:d9:
                    6f:a7:50:a9:81:25:50:bf:56:dd:56:bd:d3:1c:5c:
                    89:5c:fb:db:b0:f5:f1:df:55:26:d6:61:2f:18:4b:
                    c5:b1:06:16:79:59:5e:ce:6b:1a:83:6e:34:21:6f:
                    b2:92:fe:36:77:0d:e1:4e:4e:54:82:00:5a:e9:05:
                    7f:22:52:85:cb:9c:61:e1:5f:c0:35:cf:4b:79:44:
                    bd:6c:82:9d:0c:6d:08:4f:8e:2f:a6:9d:26:80:ce:
                    ad:05:31:12:9f:d2:3d:bb:56:86:64:e4:fc:9d:0d:
                    4c:6a:95:91:d5:15:b7:ab:21:ce:d0:5b:98:ea:22:
                    81:6f:c1:24:d2:af:57:b9:56:a5:3a:35:60:da:c6:
                    42:cd:e3:e6:d6:93:74:bf:c3:fa:ae:aa:1a:b6:fb:
                    d8:57:9f:e1:97:67:e0:ff:64:42:3d:82:08:63:c1:
                    ae:a4:98:e1:e8:49:8e:a6:14:0b:10:f5:cf:d5:5e:
                    a3:2e:e9:34:66:63:65:4a:2a:31:e8:2d:a9:60:7f:
                    6d:d9:20:90:5f:e3:90:19:a0:2b:d8:d8:80:e4:7f:
                    c1:02:35:1e:e4:2d:a6:e7:6e:02:dc:9c:9a:a1:5e:
                    19:c0:33:4a:f7:5c:7d:79:09:4b:f5:fb:e9:52:fd:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:88:C0:A3:36:26:A1:49:31:60:0E:C5:61:1B:AD:DE:A1:24:A6:2F
            X509v3 Authority Key Identifier:
                keyid:02:1F:98:79:42:3E:FB:10:7C:77:91:36:F5:53:E4:A6:F2:45:A0:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ah-YeUI--xB8d5E29VPkpvJFoNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:07:d1:15:20:0f:44:83:72:20:a6:a0:fd:7f:68:0a:cc:2c:
         57:84:5e:53:be:7f:29:fc:06:3f:98:7e:a8:3a:88:d3:dc:c1:
         25:ea:77:8a:e9:fd:20:91:2e:9b:72:be:04:87:03:eb:02:50:
         b7:f0:72:bc:82:aa:be:52:96:d7:f5:44:cf:20:5b:dc:28:08:
         7c:1b:bb:79:74:c8:c3:f6:f8:24:8f:df:73:a2:3d:03:6f:e2:
         22:a4:de:56:89:96:a4:0d:df:e5:ba:00:1b:fa:96:fa:2f:d5:
         d6:68:f8:5d:f6:ea:b9:6c:76:f9:ed:13:76:2c:c6:a5:fd:20:
         81:cd:28:20:c5:ba:b6:ed:0f:d1:10:11:52:e3:2d:43:93:c0:
         d9:9c:47:fa:77:e6:b9:79:73:9c:e5:6a:47:c3:c9:2d:a1:9c:
         a1:c2:34:af:72:f1:3b:5e:ca:4f:b0:7d:09:4b:81:57:4f:06:
         b0:a8:c8:98:f2:13:31:a9:78:8e:be:77:57:6e:1d:30:eb:8e:
         5e:1e:cb:be:0b:15:8f:70:e7:31:45:f5:19:7c:58:45:42:0e:
         16:4a:5b:39:03:b3:54:95:40:b4:96:81:9c:fb:6a:bb:e9:2b:
         38:c0:71:27:33:c2:13:27:cc:53:43:c6:3d:d3:bb:9f:c5:27:
         42:11:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----