Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.mft
File:                     hcMT6ZZeqns66b1cvzVm1EpRCX0.mft (raw, json)
Hash identifier:          CI2b506zdkqCADW1PREhdJDKvuDrS3rk6FHf2ArkXx8=
Subject key identifier:   76:E4:0B:9D:EA:2F:5D:7A:CE:CE:AB:D7:30:09:F3:62:84:95:E4:1D
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Certificate issuer:       /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial:       018C8B2DEF3E9092DBD51902FDB3039F4CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.mft
Manifest number:          0FF2
Signing time:             Thu 21 Dec 2023 07:01:32 +0000
Manifest this update:     Thu 21 Dec 2023 07:01:32 +0000
Manifest next update:     Fri 22 Dec 2023 07:01:32 +0000
Files and hashes:         1: hcMT6ZZeqns66b1cvzVm1EpRCX0.crl (hash: XfgcgjhDVskmcmhr1jfNXCtxbrZ0x+hF+erqsJ3EOYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:2d:ef:3e:90:92:db:d5:19:02:fd:b3:03:9f:4c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
        Validity
            Not Before: Dec 21 07:01:32 2023 GMT
            Not After : Dec 22 07:01:32 2023 GMT
        Subject: CN=76e40b9dea2f5d7aceceabd73009f3628495e41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:15:9e:25:b7:33:b9:3a:cf:7c:7e:ae:67:
                    f9:0c:84:be:a1:bf:f5:c4:a4:e7:8c:ef:01:b0:a0:
                    15:76:07:37:0f:62:5f:81:41:d6:7d:8b:38:73:70:
                    af:96:95:96:45:37:87:cc:79:cc:49:5d:35:24:e5:
                    18:6e:65:06:7b:67:d1:b7:d3:75:8c:fc:5c:39:95:
                    c4:5c:71:0f:dc:0c:70:13:9c:9e:97:fb:48:4e:f6:
                    16:0a:e0:14:5c:75:0d:d2:0a:c4:d2:fc:8a:3e:3f:
                    30:f1:82:4b:76:b1:66:a0:32:1b:97:bb:42:e5:b7:
                    bd:dd:f9:74:3e:0d:04:0f:fe:0c:0d:e8:51:07:e5:
                    33:f1:bb:44:bc:70:45:34:ba:90:4b:c8:2c:97:e1:
                    f0:3e:6a:c9:4e:ec:b4:e3:84:2c:bc:cf:5a:35:7d:
                    c1:f1:9b:37:0f:27:b5:80:9f:19:76:a4:7d:ad:e3:
                    3b:81:8d:70:d5:8e:46:92:8f:6e:2c:2f:67:fc:f7:
                    45:4a:1c:77:b0:14:e7:8e:ce:95:88:5e:3a:df:d7:
                    f7:07:68:37:32:bb:e3:20:20:10:3f:79:4a:52:45:
                    c6:22:a5:46:b8:30:41:5f:3f:1d:9a:13:19:61:33:
                    cf:20:26:d0:c9:38:4e:5b:dd:3c:81:15:79:e0:2e:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E4:0B:9D:EA:2F:5D:7A:CE:CE:AB:D7:30:09:F3:62:84:95:E4:1D
            X509v3 Authority Key Identifier:
                keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:a6:f3:fb:6c:b7:48:df:67:45:d9:ac:6f:65:1d:1c:43:
         d6:4b:40:c1:1a:88:8a:d2:1f:68:4f:3c:5e:71:6f:89:34:61:
         c6:b4:5a:68:42:66:68:e3:bf:37:3b:e9:01:6b:8e:15:ff:e6:
         2f:1d:f5:b3:ad:63:94:28:7f:af:27:60:0b:19:08:61:29:dc:
         e5:a1:0a:ed:35:34:e1:58:9a:17:68:60:aa:ab:26:a4:ee:28:
         6f:9e:90:73:26:a3:d8:e2:00:94:66:cf:80:d7:a6:57:e8:52:
         aa:5e:c1:fc:46:b2:32:5f:e6:37:e3:2f:de:34:0a:25:d7:74:
         e2:83:56:bd:31:3f:e0:b7:88:a6:f4:e2:07:ed:9c:ee:8e:41:
         cd:81:f2:7e:59:cf:63:47:e5:32:ea:35:e7:ad:bc:23:f3:a8:
         7b:55:3d:33:70:b8:e8:25:11:7f:e6:b9:fd:29:73:55:73:02:
         b4:ec:20:4e:5d:77:17:30:91:7c:ad:e4:00:ff:77:13:a3:e4:
         b5:12:27:7a:b2:79:bb:7f:68:b1:e6:75:74:e9:11:8f:ed:c1:
         65:f6:ce:2c:47:4e:f1:6b:a7:6b:2c:4b:ca:eb:fc:70:e4:3d:
         8e:7d:73:4c:ee:d6:62:02:93:93:55:91:a4:0c:7c:8a:08:4e:
         1a:ab:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----