Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/77e273-d37d-470f-adba-ce2dfd9f4e63/1/390PWqZuL5K1d2Bw2aUMlcsrxGc.mft
File:                     390PWqZuL5K1d2Bw2aUMlcsrxGc.mft (raw, json)
Hash identifier:          Fc56nKx4T1jRCNYSOSaVtpLOVf7U4LfMpg81zdxxBgs=
Subject key identifier:   F9:6A:F4:AB:DF:86:83:60:D4:4D:32:2A:4A:56:A4:7B:82:4E:86:F8
Authority key identifier: DF:DD:0F:5A:A6:6E:2F:92:B5:77:60:70:D9:A5:0C:95:CB:2B:C4:67
Certificate issuer:       /CN=dfdd0f5aa66e2f92b5776070d9a50c95cb2bc467
Certificate serial:       018A707B7B629EE42275CC4C0C141CC89A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/390PWqZuL5K1d2Bw2aUMlcsrxGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/77e273-d37d-470f-adba-ce2dfd9f4e63/1/390PWqZuL5K1d2Bw2aUMlcsrxGc.mft
Manifest number:          01
Signing time:             Thu 07 Sep 2023 16:30:55 +0000
Manifest this update:     Thu 07 Sep 2023 16:30:55 +0000
Manifest next update:     Fri 08 Sep 2023 16:30:55 +0000
Files and hashes:         1: 390PWqZuL5K1d2Bw2aUMlcsrxGc.crl (hash: CtyBHZwAGs9EoDAg08U/5AYDlnJoMVftIgpTwX3mR4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:70:7b:7b:62:9e:e4:22:75:cc:4c:0c:14:1c:c8:9a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfdd0f5aa66e2f92b5776070d9a50c95cb2bc467
        Validity
            Not Before: Sep  7 16:30:55 2023 GMT
            Not After : Sep  8 16:30:55 2023 GMT
        Subject: CN=f96af4abdf868360d44d322a4a56a47b824e86f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:55:0c:5b:2b:a6:3a:7f:a3:9e:66:10:39:
                    95:fd:76:e1:64:00:16:e1:2f:87:de:62:03:96:82:
                    85:07:6c:95:57:25:f3:e1:58:2a:df:f1:1e:8e:d3:
                    df:30:c2:1d:f7:cb:6e:39:1d:bf:0f:16:8a:48:1c:
                    1d:e3:66:c2:2c:a4:df:d8:87:fe:59:64:26:ab:44:
                    ab:06:5f:0b:83:75:8e:ed:51:52:76:ac:c6:3c:bf:
                    84:03:94:c8:3c:16:d1:43:72:f2:e2:95:89:2f:e8:
                    ae:56:cd:9d:6c:7d:c8:f7:3a:95:aa:62:f5:a4:b2:
                    c7:24:a8:2d:3c:81:8f:8a:26:fe:83:a3:b3:46:a8:
                    39:e3:cb:7b:64:02:a3:26:09:1d:e5:e9:7a:0f:d8:
                    2a:cf:56:39:90:96:e5:e4:b0:aa:3d:47:71:97:b8:
                    26:58:1e:62:8f:7f:34:6c:6d:f4:22:f3:32:6b:ca:
                    3a:42:8c:8c:93:b3:4b:02:f6:19:30:d0:87:95:58:
                    72:fe:17:b7:56:75:cd:2d:bb:f0:d7:5c:e2:00:b5:
                    a4:02:74:e2:37:6e:52:b7:d7:fa:3b:92:80:fe:3b:
                    fe:18:95:13:56:88:bb:76:a0:84:9b:72:73:40:b8:
                    82:9b:ab:6e:a5:ac:54:a3:c9:6c:0c:81:73:fb:b2:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6A:F4:AB:DF:86:83:60:D4:4D:32:2A:4A:56:A4:7B:82:4E:86:F8
            X509v3 Authority Key Identifier:
                keyid:DF:DD:0F:5A:A6:6E:2F:92:B5:77:60:70:D9:A5:0C:95:CB:2B:C4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/390PWqZuL5K1d2Bw2aUMlcsrxGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/77e273-d37d-470f-adba-ce2dfd9f4e63/1/390PWqZuL5K1d2Bw2aUMlcsrxGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/77e273-d37d-470f-adba-ce2dfd9f4e63/1/390PWqZuL5K1d2Bw2aUMlcsrxGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:0d:c9:01:b2:74:70:31:4b:04:59:e4:3b:e8:56:13:f2:
         1e:ae:34:2b:ce:38:44:e5:d7:9a:0c:56:34:b0:7d:9a:c8:61:
         28:09:3a:b1:48:e7:ba:46:81:fa:ce:88:df:61:91:ea:10:2b:
         00:8b:cf:46:29:4d:e8:fc:ef:52:1c:b1:ae:78:cb:4d:6c:a2:
         ed:0e:d3:d5:ec:83:13:4c:18:f6:0c:55:0f:50:91:90:06:04:
         c1:b9:6d:65:10:5b:0d:b5:c8:0c:87:1c:69:a8:f4:e1:2d:a3:
         ae:7b:ba:d5:53:97:c0:b6:5c:82:e2:fd:60:ee:a0:3c:a8:14:
         70:12:7b:2e:38:9a:c8:36:83:33:33:e1:d1:eb:5a:46:05:e9:
         36:18:5c:c7:3b:35:55:b5:1f:24:32:db:dc:e9:86:3d:a4:09:
         6c:5d:d0:1f:db:c5:8b:3b:c2:ce:ff:6c:83:3a:db:72:59:db:
         91:93:21:a4:d1:83:0d:c1:e1:47:44:a8:50:77:c6:b2:dc:2a:
         55:93:d4:d8:3f:34:6d:c1:b4:ba:2e:51:88:ed:a7:20:48:19:
         88:a9:9f:ef:21:ac:f7:8d:7b:e5:e9:7a:73:57:92:f5:16:e0:
         f0:50:58:60:4d:2f:4c:15:79:c9:c5:3b:fd:fc:8f:28:77:d1:
         6b:66:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----