Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ad37b2-b499-41dc-a98e-7c852a8dfd7d/1/Z5X1M5L6UG7b1O-HCoMxWNqQdHA.mft
File:                     Z5X1M5L6UG7b1O-HCoMxWNqQdHA.mft (raw, json)
Hash identifier:          q6GwGnWAkpdFDe0TixkEzaxZR/o3FtqpoyGzRWTR+0s=
Subject key identifier:   7D:C1:B8:A5:FE:D5:53:1F:84:30:78:1B:DC:1A:BB:51:8F:4C:0C:EC
Authority key identifier: 67:95:F5:33:92:FA:50:6E:DB:D4:EF:87:0A:83:31:58:DA:90:74:70
Certificate issuer:       /CN=6795f53392fa506edbd4ef870a833158da907470
Certificate serial:       018995D5A5F07B3C929B4E20B0278CFD374B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5X1M5L6UG7b1O-HCoMxWNqQdHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ad37b2-b499-41dc-a98e-7c852a8dfd7d/1/Z5X1M5L6UG7b1O-HCoMxWNqQdHA.mft
Manifest number:          0E57
Signing time:             Thu 27 Jul 2023 05:32:34 +0000
Manifest this update:     Thu 27 Jul 2023 05:32:34 +0000
Manifest next update:     Fri 28 Jul 2023 05:32:34 +0000
Files and hashes:         1: Z5X1M5L6UG7b1O-HCoMxWNqQdHA.crl (hash: GPe6eW52/HHmS4R0zmxistAQq1xHlOp8683QnHJjafc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:95:d5:a5:f0:7b:3c:92:9b:4e:20:b0:27:8c:fd:37:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6795f53392fa506edbd4ef870a833158da907470
        Validity
            Not Before: Jul 27 05:32:34 2023 GMT
            Not After : Jul 28 05:32:34 2023 GMT
        Subject: CN=7dc1b8a5fed5531f8430781bdc1abb518f4c0cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:49:62:f6:e6:ce:1f:df:57:8e:b9:25:3e:
                    0a:da:e2:cb:98:89:40:ee:99:b1:78:f8:08:63:88:
                    71:8e:0d:88:5b:b4:92:2f:66:29:7a:93:3f:18:f7:
                    98:04:e4:79:04:26:2b:49:5d:60:f4:36:f9:8e:fa:
                    d2:76:cd:13:ab:98:9b:7a:82:ed:4d:b8:ab:96:71:
                    51:0d:f3:7d:78:39:f0:fd:a0:7b:71:e7:ea:93:a6:
                    41:d1:21:f1:e3:a6:02:ca:85:e9:2b:c0:03:96:e3:
                    43:d8:69:59:91:35:a6:7e:0d:0b:08:8d:aa:53:9c:
                    b3:d2:f7:a2:3a:6e:32:da:16:00:ef:a6:41:d1:30:
                    a2:93:00:13:63:d5:16:b8:b0:1d:f1:bc:03:9e:14:
                    92:c0:0e:f0:67:25:48:df:25:d8:97:f0:ef:0a:a8:
                    91:04:53:e8:78:87:09:ff:a4:70:3d:cc:b7:32:e8:
                    6a:23:18:44:ff:51:bf:69:30:d7:d3:64:92:4e:c0:
                    32:b0:75:80:9f:d1:93:68:15:cc:b7:a5:6f:a3:09:
                    06:e6:95:83:64:95:45:22:e1:af:fc:03:7f:43:0a:
                    01:30:6b:65:a5:b0:a6:19:3a:a2:5b:eb:86:a5:e7:
                    7c:fc:90:35:6e:56:50:16:7b:84:07:9f:69:ee:38:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C1:B8:A5:FE:D5:53:1F:84:30:78:1B:DC:1A:BB:51:8F:4C:0C:EC
            X509v3 Authority Key Identifier:
                keyid:67:95:F5:33:92:FA:50:6E:DB:D4:EF:87:0A:83:31:58:DA:90:74:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5X1M5L6UG7b1O-HCoMxWNqQdHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ad37b2-b499-41dc-a98e-7c852a8dfd7d/1/Z5X1M5L6UG7b1O-HCoMxWNqQdHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ad37b2-b499-41dc-a98e-7c852a8dfd7d/1/Z5X1M5L6UG7b1O-HCoMxWNqQdHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:0e:6f:c2:87:8a:91:9d:e5:19:f4:d6:cc:a1:22:76:4e:
         a6:cc:eb:ae:3d:e1:ab:07:f4:60:54:d9:ac:c0:de:7b:35:73:
         12:7f:a9:e5:e0:e5:bb:1a:66:69:2b:c1:35:50:e3:43:d5:f4:
         36:a7:db:68:1a:41:09:b9:7d:e4:4d:05:7b:87:41:86:02:94:
         ee:4f:a2:92:1d:4a:9f:fe:df:a8:27:99:97:69:d5:90:77:a1:
         34:58:95:ce:f3:11:98:36:a8:fa:e7:8b:1f:32:8f:14:99:2d:
         ac:db:05:9a:74:10:69:df:69:e9:f5:a0:35:ce:6f:e3:34:3f:
         d9:2f:d1:20:b4:ab:8d:57:0e:bb:bf:fa:62:e9:0f:6c:77:7f:
         f9:f8:b8:b8:54:62:8d:6e:59:1b:eb:e5:e6:49:af:9c:06:90:
         94:0e:bc:a7:0e:57:f7:d6:f0:92:9a:98:b6:f3:f0:f9:2e:83:
         d4:7f:69:6b:df:38:2e:08:13:3f:4d:0c:e9:71:13:c0:92:ac:
         94:69:77:6a:b1:9f:0c:00:5d:d3:33:5b:7b:17:0b:fd:37:25:
         20:47:ad:4d:67:33:63:e6:af:d1:6f:da:4b:42:aa:36:2b:a9:
         9b:ec:a1:01:64:91:82:3c:1c:50:5d:8e:65:23:bb:0c:16:ca:
         3b:ac:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----