Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1a2c97-30b1-48c2-b002-dea508867986/1/YdNLJV_dtV2pYrQStJRWAHW7caw.mft
File:                     YdNLJV_dtV2pYrQStJRWAHW7caw.mft (raw, json)
Hash identifier:          jE8ArUqaOnTZhwoHy2blkNdHdsikxmD9Fomp0KUswvE=
Subject key identifier:   27:23:7D:AC:05:A7:85:65:D9:C0:D4:B2:84:7A:BE:3F:91:78:3B:E0
Authority key identifier: 61:D3:4B:25:5F:DD:B5:5D:A9:62:B4:12:B4:94:56:00:75:BB:71:AC
Certificate issuer:       /CN=61d34b255fddb55da962b412b494560075bb71ac
Certificate serial:       0187796E590E60DDA3954DE7296A2E3A23F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdNLJV_dtV2pYrQStJRWAHW7caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1a2c97-30b1-48c2-b002-dea508867986/1/YdNLJV_dtV2pYrQStJRWAHW7caw.mft
Manifest number:          04E8
Signing time:             Thu 13 Apr 2023 07:04:47 +0000
Manifest this update:     Thu 13 Apr 2023 07:04:47 +0000
Manifest next update:     Fri 14 Apr 2023 07:04:47 +0000
Files and hashes:         1: YdNLJV_dtV2pYrQStJRWAHW7caw.crl (hash: 2Q1GSHJQRiYTkMGxQdnxhZBXVkPfYIM5cDYNFBACmUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:79:6e:59:0e:60:dd:a3:95:4d:e7:29:6a:2e:3a:23:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d34b255fddb55da962b412b494560075bb71ac
        Validity
            Not Before: Apr 13 07:04:47 2023 GMT
            Not After : Apr 14 07:04:47 2023 GMT
        Subject: CN=27237dac05a78565d9c0d4b2847abe3f91783be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:e3:cb:8f:f1:25:90:53:d9:b7:a1:7d:42:
                    9b:1e:41:ca:13:1d:47:22:c1:09:1e:de:5a:1f:ce:
                    fc:e5:6a:24:35:5d:a7:77:1a:3e:20:f5:53:2f:42:
                    4a:ea:cf:a0:42:2a:17:09:f8:d7:7f:84:0a:af:65:
                    54:41:e7:d5:73:3d:90:f5:cd:90:ea:fc:8e:c5:6a:
                    cf:b5:fd:c6:df:84:2d:d3:54:e6:4b:5a:29:1c:47:
                    78:62:90:05:08:45:2a:9e:f9:63:16:2f:92:06:e1:
                    84:91:49:54:d0:2f:3f:2c:df:e9:a5:e1:c3:c9:0d:
                    7b:e8:0b:ef:66:51:d9:00:48:e2:fd:d6:62:96:76:
                    c7:3e:cf:85:c7:52:e2:10:03:4a:d5:48:c3:3a:53:
                    8f:ce:5e:35:b8:6f:68:18:19:dd:85:28:5c:37:6b:
                    98:d8:ff:b1:4a:a2:19:e2:33:9a:87:aa:de:5b:d8:
                    04:3c:de:46:09:11:a4:0a:35:08:31:c6:22:ed:a9:
                    3b:57:cd:3d:1d:80:47:25:89:dc:74:04:53:2a:f7:
                    06:42:03:26:c3:e3:50:6d:98:1e:ae:a8:06:46:c6:
                    7d:4d:1e:06:d1:d4:8a:8d:c5:00:6d:e1:60:ba:ec:
                    96:4b:a8:1e:10:29:94:b7:70:e2:f0:92:1a:b7:e3:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:7D:AC:05:A7:85:65:D9:C0:D4:B2:84:7A:BE:3F:91:78:3B:E0
            X509v3 Authority Key Identifier:
                keyid:61:D3:4B:25:5F:DD:B5:5D:A9:62:B4:12:B4:94:56:00:75:BB:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdNLJV_dtV2pYrQStJRWAHW7caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1a2c97-30b1-48c2-b002-dea508867986/1/YdNLJV_dtV2pYrQStJRWAHW7caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1a2c97-30b1-48c2-b002-dea508867986/1/YdNLJV_dtV2pYrQStJRWAHW7caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:b7:e9:11:45:06:80:b6:79:89:40:47:ac:ee:b1:ba:bb:
         6d:9a:ac:87:b1:44:a2:7c:7b:3c:ec:ad:b4:c3:32:6c:03:8f:
         5c:04:1f:03:81:7e:4c:bb:71:18:56:d9:af:75:d6:cc:06:30:
         d2:03:6e:45:c4:b7:a8:c2:64:d1:87:c7:91:3e:08:5f:e5:96:
         aa:38:11:1f:8d:42:40:39:a3:90:48:28:20:2d:06:ee:57:87:
         67:8e:2d:77:48:86:35:90:94:2b:5b:1c:3b:c0:2d:11:83:6d:
         d5:20:85:45:4a:9c:4a:84:ed:df:49:82:75:c6:e9:89:f4:04:
         dd:f9:9f:38:52:11:df:ee:2b:a1:33:1e:99:35:06:8a:dc:35:
         6b:50:0e:04:03:b0:95:7d:fd:67:26:f1:30:f7:01:35:35:3d:
         7d:6c:5c:e2:ad:f0:ba:8b:85:f1:a4:8e:a4:f2:7d:39:8b:c8:
         a5:1c:f6:d1:a6:26:b0:8c:97:d4:e8:ea:8e:90:6c:8e:b2:5e:
         c4:98:4b:4d:76:00:29:fe:0d:93:e7:2b:29:29:a2:db:97:97:
         49:d2:2b:7c:a4:51:a2:cf:66:0e:29:77:3d:b5:0d:34:b2:08:
         2d:24:53:5d:2f:c0:1b:68:03:ac:53:81:8a:db:65:30:f0:59:
         4f:98:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----