Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/40a067-180f-41db-91ba-4502089c0216/1/SqMmlBHFaF0AkKWpHiLw4cvgl_M.mft
File:                     SqMmlBHFaF0AkKWpHiLw4cvgl_M.mft (raw, json)
Hash identifier:          IBIP3G4PVxaINTd43PypHV7RHx72RevLBwRAe0sK28g=
Subject key identifier:   53:4A:52:87:CB:1A:44:C6:13:55:2C:06:6C:BF:37:72:16:07:FB:65
Authority key identifier: 4A:A3:26:94:11:C5:68:5D:00:90:A5:A9:1E:22:F0:E1:CB:E0:97:F3
Certificate issuer:       /CN=4aa3269411c5685d0090a5a91e22f0e1cbe097f3
Certificate serial:       018A07797E08BF35AD98DF8E9107EB1396AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqMmlBHFaF0AkKWpHiLw4cvgl_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/40a067-180f-41db-91ba-4502089c0216/1/SqMmlBHFaF0AkKWpHiLw4cvgl_M.mft
Manifest number:          53
Signing time:             Fri 18 Aug 2023 07:08:37 +0000
Manifest this update:     Fri 18 Aug 2023 07:08:37 +0000
Manifest next update:     Sat 19 Aug 2023 07:08:37 +0000
Files and hashes:         1: SqMmlBHFaF0AkKWpHiLw4cvgl_M.crl (hash: zBsJqmgcGMmnqnrfcogJ45VLgnAFtilR+S8669SWM+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:07:79:7e:08:bf:35:ad:98:df:8e:91:07:eb:13:96:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa3269411c5685d0090a5a91e22f0e1cbe097f3
        Validity
            Not Before: Aug 18 07:08:37 2023 GMT
            Not After : Aug 19 07:08:37 2023 GMT
        Subject: CN=534a5287cb1a44c613552c066cbf37721607fb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:09:35:6d:e2:28:0c:d0:ee:23:d6:e8:4a:
                    d6:e9:87:6f:9c:a5:00:49:e0:86:b1:c6:69:8e:2b:
                    16:5b:d3:1e:73:00:11:29:12:c6:46:33:b8:98:e0:
                    f1:1f:49:09:a0:6c:f2:5a:6e:86:7b:7b:f6:d7:32:
                    be:63:71:0c:9d:15:91:e8:d5:3b:f4:92:5a:69:4a:
                    f0:b3:e2:14:90:18:30:fe:08:0e:43:fe:03:97:a4:
                    51:fe:80:5c:01:b4:2e:66:7b:18:35:fe:ec:d8:ff:
                    7d:8c:8f:cc:dc:d7:a4:e7:e0:65:3a:52:ca:40:ab:
                    de:49:39:2d:a7:1b:e3:59:b6:1a:94:a0:e2:87:40:
                    27:e5:0f:a9:5f:b2:7e:c8:28:3d:20:d6:b6:d7:49:
                    1a:00:9c:85:e8:8b:63:56:20:21:96:59:d0:38:ff:
                    f2:0c:f8:2b:71:bb:10:72:69:9a:4d:c9:66:28:3d:
                    76:90:40:0d:68:53:92:34:b3:b8:0d:3f:cf:15:16:
                    bf:19:e3:e2:b1:61:d6:47:10:76:79:29:a3:d7:3e:
                    c6:ef:d6:87:1c:8a:08:af:08:86:2c:f7:54:ea:e9:
                    04:11:78:8b:d0:e1:18:31:b7:13:45:44:ac:dd:3d:
                    48:91:06:57:2b:48:17:62:67:40:72:78:6e:cc:6f:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4A:52:87:CB:1A:44:C6:13:55:2C:06:6C:BF:37:72:16:07:FB:65
            X509v3 Authority Key Identifier:
                keyid:4A:A3:26:94:11:C5:68:5D:00:90:A5:A9:1E:22:F0:E1:CB:E0:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqMmlBHFaF0AkKWpHiLw4cvgl_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/40a067-180f-41db-91ba-4502089c0216/1/SqMmlBHFaF0AkKWpHiLw4cvgl_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/40a067-180f-41db-91ba-4502089c0216/1/SqMmlBHFaF0AkKWpHiLw4cvgl_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:db:72:95:3d:87:5c:7c:f7:af:0b:50:f5:39:76:73:09:95:
         09:16:8f:78:f0:a5:46:ff:fa:24:c8:ba:64:77:fd:25:35:b4:
         e1:5f:28:d3:bc:13:61:8b:46:54:16:84:8b:6e:04:50:19:ca:
         b5:07:ec:a2:30:c1:eb:b6:f6:8a:23:38:8f:4b:27:9d:d7:cd:
         2d:93:1e:ac:35:d3:ba:77:72:cc:bc:b8:de:a0:57:33:7e:d7:
         ea:9d:a8:bd:a5:68:e2:5d:f0:bd:6e:43:60:60:71:bf:10:cf:
         60:c7:e2:d7:ed:ae:03:40:20:b0:f2:44:10:14:02:f1:59:c9:
         4f:0d:4b:ae:32:2b:9a:26:a5:32:da:10:db:d5:94:f1:d7:4f:
         50:70:1b:0f:18:6c:a1:37:99:f2:0c:fc:79:3b:25:76:5c:09:
         bf:84:a9:6b:e2:87:95:45:17:df:d5:9e:69:f7:71:ca:c8:b2:
         d4:9c:e8:03:ce:f3:83:15:a2:f0:54:d9:11:fd:f9:33:a9:1c:
         0d:12:6e:5e:cd:49:52:15:6e:f9:95:73:42:8f:aa:98:d7:c6:
         9a:46:3d:ed:99:c6:11:06:d3:7a:0e:1e:96:03:69:82:07:61:
         55:76:fe:ae:22:4c:bb:eb:c4:b6:7a:f8:96:1e:a0:85:0d:8b:
         ca:59:f2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----