Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4f4f3c-eabd-4928-84db-24fae5737e4e/1/1cqTJwxcqDDedztLGWbmrpuWlaY.mft
File:                     1cqTJwxcqDDedztLGWbmrpuWlaY.mft (raw, json)
Hash identifier:          tHFOfVFvXAQctQc4iNedY+gXVEwVFZGh9VxYY3xHNzI=
Subject key identifier:   31:1B:C9:25:6E:C0:B1:73:1E:89:06:B2:43:22:F5:2B:B8:DF:EB:01
Authority key identifier: D5:CA:93:27:0C:5C:A8:30:DE:77:3B:4B:19:66:E6:AE:9B:96:95:A6
Certificate issuer:       /CN=d5ca93270c5ca830de773b4b1966e6ae9b9695a6
Certificate serial:       01866C2946694F11CB79CCEA53F96FF4A65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cqTJwxcqDDedztLGWbmrpuWlaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4f4f3c-eabd-4928-84db-24fae5737e4e/1/1cqTJwxcqDDedztLGWbmrpuWlaY.mft
Manifest number:          0C88
Signing time:             Mon 20 Feb 2023 00:11:29 +0000
Manifest this update:     Mon 20 Feb 2023 00:11:29 +0000
Manifest next update:     Tue 21 Feb 2023 00:11:29 +0000
Files and hashes:         1: 1cqTJwxcqDDedztLGWbmrpuWlaY.crl (hash: wiu1QxXkFEjP3b70ltbC1AIt+RNFTUE4wsnySMxgFJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6c:29:46:69:4f:11:cb:79:cc:ea:53:f9:6f:f4:a6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ca93270c5ca830de773b4b1966e6ae9b9695a6
        Validity
            Not Before: Feb 20 00:11:29 2023 GMT
            Not After : Feb 21 00:11:29 2023 GMT
        Subject: CN=311bc9256ec0b1731e8906b24322f52bb8dfeb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:4e:dc:ed:62:c2:3c:ac:ed:9a:89:4a:8a:
                    7f:24:d2:60:90:37:69:2f:55:bf:27:8d:7b:a8:e0:
                    bd:4d:65:02:80:b4:68:0a:77:99:d2:d5:e2:f0:d0:
                    71:55:d7:fb:e2:f0:33:78:44:b9:ec:e5:e8:43:87:
                    a2:eb:95:a4:7e:13:74:12:17:3e:0c:4d:96:a5:5f:
                    4d:27:48:09:da:16:77:56:76:a0:cc:a8:6d:50:40:
                    22:54:c4:af:ed:27:53:d2:6d:63:0d:8d:5a:af:f3:
                    6b:2e:52:89:16:12:65:5a:e3:28:38:cc:27:af:bf:
                    e0:49:a3:12:28:7a:44:da:40:a0:a9:4b:c2:ca:3d:
                    ba:fb:8a:bf:e2:e2:32:dc:9d:bf:f0:63:68:55:d4:
                    4d:82:fa:59:c6:a2:2f:6d:0f:76:2b:b2:14:fc:de:
                    39:80:7a:5e:07:b2:c3:8c:7d:f8:4d:44:62:25:5c:
                    a6:08:2d:37:ce:25:e6:76:ad:ee:7b:1d:d8:4a:f7:
                    54:8f:81:37:e7:0c:c1:1f:b0:05:48:9f:84:db:f5:
                    01:03:f2:bb:82:72:65:a0:b6:e3:80:91:14:db:67:
                    bd:3e:3a:68:f6:9b:a5:67:32:e4:a5:e1:40:ad:ae:
                    77:48:c8:91:44:83:d5:0b:74:e5:eb:b3:71:d6:c3:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1B:C9:25:6E:C0:B1:73:1E:89:06:B2:43:22:F5:2B:B8:DF:EB:01
            X509v3 Authority Key Identifier:
                keyid:D5:CA:93:27:0C:5C:A8:30:DE:77:3B:4B:19:66:E6:AE:9B:96:95:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cqTJwxcqDDedztLGWbmrpuWlaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4f4f3c-eabd-4928-84db-24fae5737e4e/1/1cqTJwxcqDDedztLGWbmrpuWlaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4f4f3c-eabd-4928-84db-24fae5737e4e/1/1cqTJwxcqDDedztLGWbmrpuWlaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:e5:44:a8:72:c7:86:8d:40:ba:46:62:2d:0f:a8:19:88:
         57:09:05:4b:98:ce:cd:a6:24:6c:ad:e9:dd:fb:87:68:ec:45:
         d2:ce:d5:ad:82:9b:d3:a2:c5:b4:66:b1:90:00:97:5e:a1:17:
         75:12:34:a1:e5:9c:a5:51:3a:22:09:91:18:5c:18:30:47:25:
         1c:b8:2b:7a:ff:80:1d:9a:a9:92:9e:05:08:97:63:ee:22:20:
         de:fa:40:bd:78:1b:79:73:92:f1:99:6a:6d:24:f3:63:38:39:
         67:32:9d:2d:84:94:04:8a:25:17:2a:82:9d:c0:55:95:87:20:
         c7:c1:a6:ed:1d:50:73:3a:f9:14:31:10:08:4f:ac:e2:86:cf:
         04:bf:b5:d2:fa:c5:64:46:18:85:0a:25:78:3e:14:0d:37:43:
         d1:31:a2:31:c6:fd:07:47:a8:4f:82:97:76:32:0a:98:47:5b:
         ce:05:6a:cb:2f:4f:e7:a6:8a:05:5f:1e:57:9f:cb:35:05:ff:
         55:69:50:a8:a4:44:e2:49:c2:9c:a2:a2:65:ca:bd:ad:76:fe:
         5c:3a:92:6e:e0:41:83:7b:10:8b:55:ff:be:35:ac:bd:19:15:
         d8:d5:77:a8:fc:72:4a:b7:30:8b:cc:3c:7d:4e:80:9c:b2:09:
         24:48:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----