Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/685f02-1d15-488d-9936-62b0b1af42a8/1/j5GhXsjoOPacjw1kHRxUo1wt7cM.mft
File:                     j5GhXsjoOPacjw1kHRxUo1wt7cM.mft (raw, json)
Hash identifier:          tZ9e1SZJQWeDcdE5mGij0U/i1hXLoH7HSOb9DcluR9I=
Subject key identifier:   DD:54:CD:95:2F:CE:45:2F:C9:F7:D4:F2:F0:13:E0:88:58:B9:68:E6
Authority key identifier: 8F:91:A1:5E:C8:E8:38:F6:9C:8F:0D:64:1D:1C:54:A3:5C:2D:ED:C3
Certificate issuer:       /CN=8f91a15ec8e838f69c8f0d641d1c54a35c2dedc3
Certificate serial:       018719DCB3EE0B0CBA4750387B198DE976D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5GhXsjoOPacjw1kHRxUo1wt7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/685f02-1d15-488d-9936-62b0b1af42a8/1/j5GhXsjoOPacjw1kHRxUo1wt7cM.mft
Manifest number:          01
Signing time:             Sat 25 Mar 2023 17:41:46 +0000
Manifest this update:     Sat 25 Mar 2023 17:41:46 +0000
Manifest next update:     Sun 26 Mar 2023 17:41:46 +0000
Files and hashes:         1: j5GhXsjoOPacjw1kHRxUo1wt7cM.crl (hash: atZkEZzY20s7oVh9z/VEqhxLcEow2HWmjUXNlzUp/OU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:19:dc:b3:ee:0b:0c:ba:47:50:38:7b:19:8d:e9:76:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f91a15ec8e838f69c8f0d641d1c54a35c2dedc3
        Validity
            Not Before: Mar 25 17:41:46 2023 GMT
            Not After : Mar 26 17:41:46 2023 GMT
        Subject: CN=dd54cd952fce452fc9f7d4f2f013e08858b968e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1b:4d:8f:aa:44:7d:98:bb:b2:47:56:48:ee:
                    ca:af:74:ba:2f:14:7c:73:05:49:95:8c:68:47:da:
                    cd:2d:3a:ad:91:d2:12:ab:c1:9c:09:67:00:80:f4:
                    45:11:ab:20:1b:20:8a:58:3d:6f:c2:5f:30:94:11:
                    c0:f1:c7:79:18:bf:5b:c8:de:18:64:a9:bf:7e:cc:
                    c5:ff:b6:9f:90:24:d1:c1:f0:9c:4b:d0:ab:a3:41:
                    42:68:a2:d4:10:c0:f0:b7:5a:07:47:b9:bc:3f:29:
                    ea:7a:f3:40:9f:fa:16:e1:bc:2d:6e:20:9a:d1:31:
                    c6:19:5c:43:ce:6c:2c:cb:f3:a9:5d:e8:41:a6:d8:
                    68:2d:16:e6:01:d6:24:07:f5:06:28:87:05:ca:14:
                    8d:65:c4:7b:04:73:8d:8f:50:04:82:3c:f9:36:04:
                    4c:09:44:e9:81:58:9d:e7:21:e4:dc:05:37:45:f7:
                    f3:5e:3d:22:0f:25:e1:39:18:7f:7c:6c:a7:eb:a0:
                    61:c5:6c:3a:0e:97:0a:e4:64:26:96:89:75:0c:c9:
                    0f:a3:ce:aa:3f:4a:5a:43:93:e2:fa:06:45:7d:3e:
                    43:03:54:17:cf:3f:82:5d:04:fe:c2:30:09:63:00:
                    80:fd:d8:15:d1:72:a1:0e:2b:ef:70:48:f9:ef:f3:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:54:CD:95:2F:CE:45:2F:C9:F7:D4:F2:F0:13:E0:88:58:B9:68:E6
            X509v3 Authority Key Identifier:
                keyid:8F:91:A1:5E:C8:E8:38:F6:9C:8F:0D:64:1D:1C:54:A3:5C:2D:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5GhXsjoOPacjw1kHRxUo1wt7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/685f02-1d15-488d-9936-62b0b1af42a8/1/j5GhXsjoOPacjw1kHRxUo1wt7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/685f02-1d15-488d-9936-62b0b1af42a8/1/j5GhXsjoOPacjw1kHRxUo1wt7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:45:2f:c8:da:0a:08:f0:fe:8d:d9:8b:21:3e:68:66:92:1f:
         70:6e:ac:de:19:37:c2:84:f4:cb:e2:71:55:db:1e:d1:c5:44:
         d5:5b:99:c3:9a:c7:0a:ef:b5:0e:39:be:26:d9:95:93:3b:9c:
         4f:1b:0a:5e:aa:da:06:42:0e:bd:6d:d7:bb:fe:a2:6c:6a:23:
         0c:06:2c:34:54:9c:bd:b6:d8:dc:98:33:dc:d6:46:23:0b:c3:
         0a:43:f8:22:11:10:8d:30:8d:24:85:d5:e2:80:e0:fd:63:b9:
         b3:04:e1:0e:4a:b6:d8:56:59:dd:82:97:ec:c5:9c:15:66:20:
         99:6e:5c:53:35:d1:ef:39:a5:54:b3:42:e2:b9:33:8b:09:eb:
         16:5c:1d:29:c6:64:f2:a9:4d:d9:8a:a7:2d:40:19:f5:c6:80:
         8d:43:93:8c:0e:2a:88:51:12:74:4c:78:47:fd:d7:05:18:d3:
         9b:ce:63:49:02:64:ee:e4:e3:ff:df:94:28:52:ae:b6:07:01:
         99:80:c8:d1:7a:ca:4a:f7:2a:96:85:39:e6:40:13:64:94:e0:
         0a:d9:4a:d8:c4:09:78:78:6d:08:2c:b1:cd:4f:43:7c:a4:62:
         f8:5f:94:dc:d3:15:7a:96:4c:27:ae:54:04:66:d5:00:26:24:
         69:1f:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----