Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c10346-d98e-4d77-b4e4-05376e69cdc5/1/kcqUs1u3hNZZGVgtI5qia_NXGUY.mft
File:                     kcqUs1u3hNZZGVgtI5qia_NXGUY.mft (raw, json)
Hash identifier:          jord81V7KaTk2bl8o83k02FEgLJ5Z8DsSpv43U+1dlA=
Subject key identifier:   D4:3D:58:AD:4A:F8:CA:E1:0C:2F:9D:FB:72:6B:BB:C2:54:9A:42:44
Authority key identifier: 91:CA:94:B3:5B:B7:84:D6:59:19:58:2D:23:9A:A2:6B:F3:57:19:46
Certificate issuer:       /CN=91ca94b35bb784d65919582d239aa26bf3571946
Certificate serial:       018C8AC0260D2DCAB45A58BE476F37481C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcqUs1u3hNZZGVgtI5qia_NXGUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c10346-d98e-4d77-b4e4-05376e69cdc5/1/kcqUs1u3hNZZGVgtI5qia_NXGUY.mft
Manifest number:          0CBE
Signing time:             Thu 21 Dec 2023 05:01:37 +0000
Manifest this update:     Thu 21 Dec 2023 05:01:37 +0000
Manifest next update:     Fri 22 Dec 2023 05:01:37 +0000
Files and hashes:         1: kcqUs1u3hNZZGVgtI5qia_NXGUY.crl (hash: LIdytbt2zP+hL1mSngHBs6CRtpatNKdAo9/ipBHQ0Co=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:c0:26:0d:2d:ca:b4:5a:58:be:47:6f:37:48:1c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ca94b35bb784d65919582d239aa26bf3571946
        Validity
            Not Before: Dec 21 05:01:37 2023 GMT
            Not After : Dec 22 05:01:37 2023 GMT
        Subject: CN=d43d58ad4af8cae10c2f9dfb726bbbc2549a4244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:28:b5:ce:14:89:e6:e4:25:4b:f9:7a:42:
                    4b:98:59:dc:8a:a5:57:dc:8b:66:02:74:9c:2a:71:
                    ed:9f:fa:a0:b5:6b:16:c3:c2:01:b2:c3:35:c4:9e:
                    f8:2d:2a:9b:a1:6b:48:a4:0f:29:8e:b4:1c:35:29:
                    01:e4:cc:92:ea:91:f2:3f:87:ca:37:e3:02:28:78:
                    58:28:01:73:e6:c3:2f:bf:2f:85:0b:5b:0f:3c:71:
                    62:ac:59:7b:a9:56:9b:d2:e1:63:36:cf:31:9c:96:
                    f5:18:f5:52:37:48:1c:01:d9:01:0c:c3:9d:ef:5d:
                    fb:5a:4f:fe:e1:38:ce:68:1b:4d:44:08:74:f0:96:
                    e9:e2:78:bf:e2:eb:53:dd:2b:7e:26:90:ea:e2:4b:
                    37:67:ec:0a:14:f5:30:70:31:97:a2:a2:48:bc:fb:
                    46:3c:d9:e1:06:04:47:ea:f8:ca:eb:8d:3e:0a:5a:
                    51:df:4d:e6:68:71:c7:48:a7:a1:04:16:b4:43:66:
                    9a:d0:df:e4:24:8f:67:a4:19:8a:76:60:57:b5:cb:
                    af:6f:fa:40:1b:99:cd:67:ab:5c:0f:98:a5:b2:19:
                    bc:5b:53:c1:b8:25:53:50:d3:df:1e:f4:2c:18:57:
                    22:4a:67:68:7d:81:0f:82:d5:76:65:0f:68:af:be:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3D:58:AD:4A:F8:CA:E1:0C:2F:9D:FB:72:6B:BB:C2:54:9A:42:44
            X509v3 Authority Key Identifier:
                keyid:91:CA:94:B3:5B:B7:84:D6:59:19:58:2D:23:9A:A2:6B:F3:57:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcqUs1u3hNZZGVgtI5qia_NXGUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c10346-d98e-4d77-b4e4-05376e69cdc5/1/kcqUs1u3hNZZGVgtI5qia_NXGUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c10346-d98e-4d77-b4e4-05376e69cdc5/1/kcqUs1u3hNZZGVgtI5qia_NXGUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:26:0e:80:84:4d:9c:2f:75:34:5a:56:89:68:0e:61:f9:93:
         ff:c2:37:12:7e:20:76:57:7c:09:5f:40:8d:fe:f4:07:3b:30:
         06:87:83:65:61:98:b0:c4:c9:9e:2c:84:bf:3b:38:6d:50:3c:
         3a:5f:b8:37:88:dc:5f:57:d8:da:8b:87:cf:b6:98:b1:66:a7:
         99:9c:fb:f1:b3:63:7a:3f:1b:06:4a:f9:6b:17:e7:21:a9:5f:
         59:b7:47:8a:78:63:d5:ba:0a:9a:1a:33:b4:9a:af:ac:e8:d2:
         e6:55:6b:f8:e5:c8:64:f6:f9:d8:1e:9c:67:bf:1d:24:6d:34:
         fb:b2:1d:2e:c4:33:15:d0:8b:38:72:a8:4e:f8:75:3a:77:e3:
         3c:1a:7f:65:1a:98:ed:d9:b3:10:cc:72:06:92:db:dd:e8:50:
         15:26:d3:00:2b:d3:57:51:61:ed:a9:c0:08:ff:ed:7c:c4:9d:
         f5:80:33:11:60:1e:72:71:9a:f0:11:d5:81:10:68:c3:b6:b7:
         a7:36:f9:b1:38:a5:e0:ff:f3:13:54:5a:2e:7a:71:d5:ac:12:
         ba:1d:c1:92:37:69:f7:22:ae:58:3e:c5:3b:5b:2d:9b:10:ee:
         2e:bd:e5:dd:5f:dc:c5:09:d7:d8:4e:96:f3:5c:b8:14:50:04:
         d5:1a:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----