Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/038793-c477-4259-b9f4-bc27d56f8c37/1/oc9V7ZA1l-8z52LiHygsJ_O-b7M.mft
File:                     oc9V7ZA1l-8z52LiHygsJ_O-b7M.mft (raw, json)
Hash identifier:          vYUMuwUMVLig81QG/N7wQJO4ACMthP9sY010FhxNOSI=
Subject key identifier:   01:F5:A1:C9:78:53:D9:EB:5A:66:93:A0:26:BA:8F:49:85:97:75:EE
Authority key identifier: A1:CF:55:ED:90:35:97:EF:33:E7:62:E2:1F:28:2C:27:F3:BE:6F:B3
Certificate issuer:       /CN=a1cf55ed903597ef33e762e21f282c27f3be6fb3
Certificate serial:       018BA7F05F7E664E48A41C3C838A5DDBE294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oc9V7ZA1l-8z52LiHygsJ_O-b7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/038793-c477-4259-b9f4-bc27d56f8c37/1/oc9V7ZA1l-8z52LiHygsJ_O-b7M.mft
Manifest number:          06C2
Signing time:             Tue 07 Nov 2023 04:00:29 +0000
Manifest this update:     Tue 07 Nov 2023 04:00:29 +0000
Manifest next update:     Wed 08 Nov 2023 04:00:29 +0000
Files and hashes:         1: oc9V7ZA1l-8z52LiHygsJ_O-b7M.crl (hash: hcSDC3p2SrTv3/bsNDyL9OVgtwbsUzEFomVYQVBfZ/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a7:f0:5f:7e:66:4e:48:a4:1c:3c:83:8a:5d:db:e2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1cf55ed903597ef33e762e21f282c27f3be6fb3
        Validity
            Not Before: Nov  7 04:00:29 2023 GMT
            Not After : Nov  8 04:00:29 2023 GMT
        Subject: CN=01f5a1c97853d9eb5a6693a026ba8f49859775ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f8:bd:57:52:9a:67:76:eb:e5:00:da:ed:dd:
                    42:ff:4c:d3:e0:51:4f:ef:39:fd:5f:25:14:62:79:
                    22:d8:dd:e4:35:3c:84:40:9c:43:c4:40:dc:23:ed:
                    a4:65:b1:e6:e9:b6:e4:e4:ea:c8:a7:e3:18:ba:0e:
                    da:34:e1:82:6d:71:94:c9:5f:4e:43:0b:ee:38:df:
                    94:4c:1b:1d:92:84:cc:d6:d4:b3:a5:9c:d8:71:ca:
                    cf:49:e4:a9:19:97:cf:fa:0c:b3:e0:b6:b8:79:c0:
                    d9:6b:99:69:a7:31:44:89:b9:9a:1b:d4:37:30:9d:
                    84:ce:9f:90:04:a6:28:8d:ff:1b:f0:c1:7f:1f:95:
                    d3:cc:cc:0f:15:28:14:6d:d3:ac:5d:43:ef:7d:be:
                    2f:81:8a:4f:40:e0:2a:fe:22:01:6e:47:e3:ed:e7:
                    34:ac:d8:56:81:47:86:02:ba:12:2d:50:46:56:5f:
                    25:11:0e:a2:c1:8b:17:72:07:b0:70:6e:20:cb:8a:
                    9c:f7:b4:d9:33:41:fd:0f:36:2f:09:c0:0e:e4:8e:
                    a9:87:a0:5b:8d:d0:02:a3:73:4c:0d:6f:04:93:5a:
                    0a:a1:f6:fa:17:3c:9e:60:78:9f:5b:79:4e:72:e6:
                    3f:a7:03:85:21:b7:7e:45:73:a3:87:13:a6:0e:e3:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F5:A1:C9:78:53:D9:EB:5A:66:93:A0:26:BA:8F:49:85:97:75:EE
            X509v3 Authority Key Identifier:
                keyid:A1:CF:55:ED:90:35:97:EF:33:E7:62:E2:1F:28:2C:27:F3:BE:6F:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oc9V7ZA1l-8z52LiHygsJ_O-b7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/038793-c477-4259-b9f4-bc27d56f8c37/1/oc9V7ZA1l-8z52LiHygsJ_O-b7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/038793-c477-4259-b9f4-bc27d56f8c37/1/oc9V7ZA1l-8z52LiHygsJ_O-b7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:46:c0:f5:bd:af:2a:15:52:e4:e1:8d:44:1f:21:28:ae:f3:
         ee:18:76:d6:0d:ce:3e:f1:61:66:8c:dd:16:74:50:85:00:f9:
         05:5d:7c:74:90:90:42:f0:ae:bf:73:aa:f8:89:84:34:7d:f7:
         60:e6:d9:72:06:93:12:56:7b:21:d3:4c:b6:86:b3:14:46:3b:
         9a:c2:3f:25:4c:c1:f4:5a:5b:a7:68:6a:4a:e2:7f:99:7c:2f:
         c4:dc:2d:8c:da:df:f9:9f:4f:78:82:79:60:0a:2e:cd:ca:85:
         23:81:1c:1d:6f:a7:b7:a3:81:16:96:0a:a7:b9:43:25:21:41:
         2a:af:49:88:db:18:a5:91:b3:6f:79:5a:2a:ed:43:15:79:84:
         d8:36:cb:e7:33:ea:3c:6e:66:18:cf:2a:70:42:f8:88:02:c9:
         e7:ef:c4:82:d9:42:9f:53:1b:31:8b:93:c6:57:8c:5e:6f:c3:
         fe:65:d1:d3:cc:9f:51:85:55:cd:f4:40:39:d1:36:de:56:ce:
         09:6a:51:83:03:86:ad:f6:28:62:d1:4a:f8:14:95:48:e9:6b:
         e0:a6:5d:b6:5d:00:53:0b:f3:8f:f2:ee:23:bf:47:53:a3:2f:
         ce:67:d7:d0:1c:99:5b:40:6c:82:62:a3:26:a5:20:cf:24:29:
         c8:7f:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----