Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft
File:                     8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft (raw, json)
Hash identifier:          eDU81TZl9Mj9ogrWTpdIQlzgHViYSoXxSRfO55gbO7s=
Subject key identifier:   99:76:1A:77:D6:FB:03:37:EE:B8:81:FA:30:D5:9D:F3:49:EE:6D:EC
Authority key identifier: F0:B7:E2:1D:06:D6:21:2E:07:9C:06:3A:B2:12:69:28:BA:4F:8F:D6
Certificate issuer:       /CN=f0b7e21d06d6212e079c063ab2126928ba4f8fd6
Certificate serial:       01876E0F0C1C40207908B3A612BF82440DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8LfiHQbWIS4HnAY6shJpKLpPj9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft
Manifest number:          06AC
Signing time:             Tue 11 Apr 2023 02:04:52 +0000
Manifest this update:     Tue 11 Apr 2023 02:04:52 +0000
Manifest next update:     Wed 12 Apr 2023 02:04:52 +0000
Files and hashes:         1: 8LfiHQbWIS4HnAY6shJpKLpPj9Y.crl (hash: R99mGnWse0+YONtnCSVT+SWtBNml1PClYE9Vm7pHIvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6e:0f:0c:1c:40:20:79:08:b3:a6:12:bf:82:44:0d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b7e21d06d6212e079c063ab2126928ba4f8fd6
        Validity
            Not Before: Apr 11 02:04:52 2023 GMT
            Not After : Apr 12 02:04:52 2023 GMT
        Subject: CN=99761a77d6fb0337eeb881fa30d59df349ee6dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:58:07:00:45:1e:74:35:fb:f3:43:b6:c6:
                    76:c2:1b:80:2d:37:fd:0f:a0:98:59:a8:36:f5:b7:
                    ec:5e:72:dc:1b:7d:70:f7:7e:95:46:62:58:0d:6d:
                    b2:e2:19:84:48:5c:61:75:3a:be:67:57:4a:c2:8d:
                    7f:ea:5d:06:76:88:9a:39:d1:cb:c1:9a:a9:5e:26:
                    ad:b5:f4:b9:c0:fb:fc:1a:ea:88:43:83:a5:24:05:
                    f3:84:3d:c4:ee:11:ae:1e:71:f1:2e:0a:bb:75:0d:
                    bb:92:12:f0:d7:f1:ec:24:36:3c:02:d1:15:f8:eb:
                    57:22:be:f9:77:87:a2:c0:be:c9:79:2f:85:ce:96:
                    32:2a:a0:54:de:cc:a1:39:2f:ed:89:b5:cf:9a:97:
                    f2:06:17:b8:58:c6:fa:8e:51:4c:98:e3:b8:cf:0e:
                    04:91:e6:5e:53:df:aa:8b:d5:f3:5b:94:9e:48:0e:
                    f5:49:6b:9f:0e:91:37:39:ae:89:9a:e4:b0:ff:e5:
                    d4:5a:13:28:33:c8:94:22:b3:c1:86:fd:97:a8:7a:
                    e5:35:b1:fc:8b:76:98:07:0c:df:c1:0e:57:ff:09:
                    af:84:81:da:09:7a:10:6d:28:a3:f6:43:d9:6a:ed:
                    d2:da:b6:8a:cc:30:3c:4d:9e:12:54:d6:29:61:4c:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:1A:77:D6:FB:03:37:EE:B8:81:FA:30:D5:9D:F3:49:EE:6D:EC
            X509v3 Authority Key Identifier:
                keyid:F0:B7:E2:1D:06:D6:21:2E:07:9C:06:3A:B2:12:69:28:BA:4F:8F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LfiHQbWIS4HnAY6shJpKLpPj9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:f6:2e:d7:91:cc:02:f0:16:82:70:78:2d:5a:2d:1f:fc:
         44:e6:af:80:b4:f9:1b:1e:e5:10:63:fd:00:f7:92:ab:53:7a:
         23:a7:fc:39:b8:e8:36:36:1d:8b:5f:65:94:ed:55:4b:6b:15:
         ec:2f:6c:60:a4:95:4d:60:94:6c:bd:90:4f:28:01:d3:f3:23:
         11:a1:75:08:df:b9:c7:e8:6b:fc:63:62:ad:81:dd:86:79:53:
         81:73:3f:91:97:47:4e:0c:4a:e0:b1:6a:7d:e9:e6:d6:2e:41:
         f8:01:ed:25:1a:71:39:c1:42:31:e2:17:48:83:23:30:16:35:
         d1:cb:56:4f:3c:19:09:63:42:06:b6:4f:59:70:03:27:b2:37:
         0a:a9:cb:22:89:fb:ef:9d:a4:ca:44:40:18:12:b8:96:40:9d:
         b8:59:bd:f3:fe:10:d1:73:fa:d4:84:b0:85:2e:0d:ed:f6:86:
         0a:01:bb:43:7f:7f:ac:10:b2:f8:fb:d6:a8:3d:77:15:99:5e:
         a9:96:6c:7d:6f:0f:a4:d2:ff:82:f7:35:e7:1a:64:e6:75:50:
         f5:94:7f:14:73:11:21:5a:5a:88:1e:40:6b:1a:d5:d9:cb:b0:
         01:4b:36:bc:ac:eb:58:93:3f:53:6e:25:1d:28:cb:37:b5:92:
         05:d2:d4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----