Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/bHIo27F_ZOYt4dxGmIFaNbtHIC0.mft
File:                     bHIo27F_ZOYt4dxGmIFaNbtHIC0.mft (raw, json)
Hash identifier:          OnOEapy/ey34kEXux4krvjnDOmQoCh0On8Qw7WFWZwQ=
Subject key identifier:   F5:09:BF:75:4D:EC:0C:89:C8:AA:95:B2:95:78:40:D1:43:FC:A9:AE
Authority key identifier: 6C:72:28:DB:B1:7F:64:E6:2D:E1:DC:46:98:81:5A:35:BB:47:20:2D
Certificate issuer:       /CN=6c7228dbb17f64e62de1dc4698815a35bb47202d
Certificate serial:       018CAE95DC9A7D5B4439B0E97EAED61DF418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bHIo27F_ZOYt4dxGmIFaNbtHIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/bHIo27F_ZOYt4dxGmIFaNbtHIC0.mft
Manifest number:          0FFF
Signing time:             Thu 28 Dec 2023 04:01:45 +0000
Manifest this update:     Thu 28 Dec 2023 04:01:45 +0000
Manifest next update:     Fri 29 Dec 2023 04:01:45 +0000
Files and hashes:         1: bHIo27F_ZOYt4dxGmIFaNbtHIC0.crl (hash: uwYnpn06BaP8GL50VCImiY5G9aHaMCQ0jRnYuiFVKP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ae:95:dc:9a:7d:5b:44:39:b0:e9:7e:ae:d6:1d:f4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7228dbb17f64e62de1dc4698815a35bb47202d
        Validity
            Not Before: Dec 28 04:01:45 2023 GMT
            Not After : Dec 29 04:01:45 2023 GMT
        Subject: CN=f509bf754dec0c89c8aa95b2957840d143fca9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:30:07:d1:ea:9c:a0:b0:cb:02:e1:8c:f4:
                    0f:48:72:94:cb:23:2f:e6:88:d9:29:23:67:79:df:
                    b0:bd:f0:26:dd:94:35:38:c8:c5:47:1b:19:cb:1a:
                    e2:aa:a4:58:79:22:b8:6b:16:63:29:ad:a2:a0:59:
                    d9:42:76:9c:15:50:f2:6f:36:ab:f7:64:50:e3:14:
                    11:47:a9:8f:c2:30:21:18:5e:c4:92:2f:5d:5f:0e:
                    90:f4:e1:ad:dd:00:96:12:17:7f:4b:3a:4b:4b:40:
                    ea:5b:df:dd:5f:64:17:50:7e:df:89:c5:fa:15:23:
                    e2:e2:fa:aa:93:4a:84:af:ea:c2:bb:97:5a:58:b9:
                    b7:9d:fa:4f:d3:56:b0:dc:5a:c8:91:a3:2f:f0:47:
                    b0:ba:43:80:f7:18:16:e5:f2:92:08:aa:57:0f:c1:
                    1d:5f:68:12:25:ed:64:4c:a7:1c:12:60:99:79:22:
                    e9:78:6e:ff:74:e6:d3:45:99:c6:2a:c1:6d:e2:0e:
                    37:a6:48:f8:dd:10:db:c7:6e:61:76:c3:21:5c:07:
                    3d:9b:5e:c5:25:4e:44:c2:f4:62:c0:cb:b7:6e:6e:
                    f7:e3:e6:20:27:15:be:2f:c1:8a:72:32:b7:d8:b6:
                    5a:44:e7:dc:dd:28:3e:6c:cc:fb:aa:cb:eb:60:1f:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:BF:75:4D:EC:0C:89:C8:AA:95:B2:95:78:40:D1:43:FC:A9:AE
            X509v3 Authority Key Identifier:
                keyid:6C:72:28:DB:B1:7F:64:E6:2D:E1:DC:46:98:81:5A:35:BB:47:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHIo27F_ZOYt4dxGmIFaNbtHIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/bHIo27F_ZOYt4dxGmIFaNbtHIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29e960-eff5-44f2-bc40-ade60728ec37/1/bHIo27F_ZOYt4dxGmIFaNbtHIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:79:0c:86:0f:d0:fa:74:2c:ec:b3:6e:ea:32:b2:8b:06:6d:
         2d:2c:7d:af:b5:a9:56:0f:aa:43:2a:09:d7:32:fc:0b:ab:27:
         a9:57:d6:d9:c6:03:5a:da:df:a3:93:d0:24:71:61:1c:9e:06:
         31:2e:d5:30:64:63:24:2d:f2:2f:91:22:aa:ee:f1:6c:3c:01:
         a5:61:54:02:36:f8:41:7d:10:bf:f9:e8:71:0b:cb:ae:ae:90:
         61:67:fa:01:69:76:74:45:66:8b:12:46:52:27:99:f0:80:c6:
         03:64:ad:80:4d:5f:59:ac:cd:c2:3c:08:4d:25:a7:0c:a7:67:
         cf:52:59:17:7d:85:c5:0a:e8:bd:9a:35:7e:25:89:4f:12:d2:
         34:1c:1e:ce:4c:3b:0b:11:73:c0:2d:9d:b0:ce:10:ea:f4:a5:
         47:fd:8e:af:34:dc:91:5f:da:e9:50:4e:92:72:31:03:47:de:
         87:07:89:f7:f3:a4:82:2f:32:2d:fd:ce:3d:97:22:08:fe:95:
         f3:90:07:d6:3b:32:b1:71:cf:ba:4d:52:44:ed:6b:6f:54:98:
         d2:ff:57:f6:28:0d:34:88:9c:65:3f:d2:13:82:90:b6:93:3a:
         35:fb:14:b7:4f:c8:79:96:77:6e:b0:19:88:72:76:4d:7a:3f:
         f5:d8:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----