Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.mft
File:                     uwlIm2EQhbkC8Vt45Ze6kUM3rPU.mft (raw, json)
Hash identifier:          4HJoyIx/2r4RrGKfR8/KprUwDPUO8G/Zn4meCkhMBQM=
Subject key identifier:   33:BB:BA:27:72:C2:E5:49:E8:AF:04:E1:B5:DB:9E:36:CF:AF:76:4A
Authority key identifier: BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
Certificate issuer:       /CN=bb09489b611085b902f15b78e597ba914337acf5
Certificate serial:       018C8B64FF58EB974E6EE5FFE73BEFCDC76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.mft
Manifest number:          0FED
Signing time:             Thu 21 Dec 2023 08:01:41 +0000
Manifest this update:     Thu 21 Dec 2023 08:01:41 +0000
Manifest next update:     Fri 22 Dec 2023 08:01:41 +0000
Files and hashes:         1: uwlIm2EQhbkC8Vt45Ze6kUM3rPU.crl (hash: rbJJfWAjZr/RImCz7GcqfTWE1iQZ0azz8sPwseDdPRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:64:ff:58:eb:97:4e:6e:e5:ff:e7:3b:ef:cd:c7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb09489b611085b902f15b78e597ba914337acf5
        Validity
            Not Before: Dec 21 08:01:41 2023 GMT
            Not After : Dec 22 08:01:41 2023 GMT
        Subject: CN=33bbba2772c2e549e8af04e1b5db9e36cfaf764a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:e2:81:3a:a5:b2:70:a1:80:20:de:f0:52:
                    71:15:91:82:21:92:23:0f:e1:e9:b1:0e:fe:0f:82:
                    d4:39:94:be:46:98:c0:65:d8:a9:d9:8e:25:38:7c:
                    45:e1:5a:ec:40:fe:3f:73:f1:83:e3:a9:27:e8:c1:
                    32:15:55:db:70:18:20:90:0d:89:74:61:11:b2:d1:
                    84:f7:e6:51:cf:0a:70:49:f8:fe:91:e6:ed:57:f4:
                    9c:f6:39:b3:5a:53:5a:be:00:21:cb:5c:1f:cb:5a:
                    4a:e0:62:9e:a7:71:67:c8:09:51:67:8b:11:d5:7f:
                    f2:0f:82:c9:45:68:a9:32:97:51:76:e1:70:87:00:
                    ad:19:f3:ef:e0:b5:53:77:ff:c3:bb:6e:36:f9:eb:
                    82:0a:df:ce:07:cb:c2:5d:f5:7e:9c:93:36:9a:74:
                    6e:84:6e:19:e3:68:2b:dc:d4:d6:dc:65:6b:48:55:
                    83:66:1a:b2:24:25:68:45:db:4a:eb:6b:e1:aa:46:
                    d5:19:6e:51:89:3f:ff:52:c4:3d:1c:21:aa:41:82:
                    16:dc:42:99:73:6c:82:bf:8b:9c:9c:be:0f:9b:3f:
                    c2:d8:be:ed:6c:6f:7a:c6:53:9a:1b:cc:65:1f:52:
                    10:2e:c8:9a:72:f3:1b:8d:47:c4:de:d8:e5:63:7e:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BB:BA:27:72:C2:E5:49:E8:AF:04:E1:B5:DB:9E:36:CF:AF:76:4A
            X509v3 Authority Key Identifier:
                keyid:BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:37:4b:36:3e:f7:f9:64:32:4e:8b:3d:e7:5a:73:56:ab:
         fa:db:4e:21:07:5b:f2:e3:40:db:73:97:8e:f3:94:bd:04:5e:
         d4:d0:e2:4f:b6:d0:d4:42:78:c9:85:cd:dd:7f:0e:62:6a:bc:
         8d:10:7e:99:61:28:3d:94:c8:97:b1:08:b6:90:da:49:b4:93:
         29:77:b4:4d:2c:4c:c1:c2:1f:5f:0f:56:d9:9f:7d:b6:b7:47:
         9e:2d:3d:d5:f1:86:e7:c6:81:dd:be:df:2f:cc:78:ca:26:6d:
         0b:39:7a:33:6f:92:bd:95:d0:64:31:2e:e6:38:4c:9b:0a:57:
         f6:47:96:25:f4:cf:da:4d:04:b0:46:0b:4c:01:09:33:b8:aa:
         e7:da:8a:96:9f:e3:a7:76:12:fb:3b:c9:7b:00:b1:fd:41:72:
         dd:7a:a0:d9:37:ab:4e:dd:28:e0:e8:7b:ab:c0:ab:8e:71:91:
         5d:8d:15:10:3d:07:bc:b6:b9:d1:fb:ba:4b:3f:56:fb:66:c9:
         bf:2d:a3:f5:cd:5c:d7:96:f6:fd:c3:8f:9b:84:93:e1:c2:ef:
         e1:ef:3e:63:3e:d4:1f:59:c7:a1:ab:0b:e9:14:9b:42:a3:40:
         bb:c5:d5:97:25:89:86:2b:92:80:86:e7:f1:a7:17:d0:5d:4f:
         e5:ec:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----