Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/nYRfQJqy_yyBR_wcmo0A3fEoYRc.mft
File:                     nYRfQJqy_yyBR_wcmo0A3fEoYRc.mft (raw, json)
Hash identifier:          9ePQQBlbHMb8uG9IeOfFU+2WyX5Tb2CLM/n/aWzkvCY=
Subject key identifier:   24:D0:60:1A:CF:81:99:49:DA:DD:80:80:9D:BB:63:97:D0:96:A7:E3
Authority key identifier: 9D:84:5F:40:9A:B2:FF:2C:81:47:FC:1C:9A:8D:00:DD:F1:28:61:17
Certificate issuer:       /CN=9d845f409ab2ff2c8147fc1c9a8d00ddf1286117
Certificate serial:       018727A41A88A45E9869FCAD1F18B24CB811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYRfQJqy_yyBR_wcmo0A3fEoYRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/nYRfQJqy_yyBR_wcmo0A3fEoYRc.mft
Manifest number:          047A
Signing time:             Tue 28 Mar 2023 09:54:38 +0000
Manifest this update:     Tue 28 Mar 2023 09:54:38 +0000
Manifest next update:     Wed 29 Mar 2023 09:54:38 +0000
Files and hashes:         1: nYRfQJqy_yyBR_wcmo0A3fEoYRc.crl (hash: nP7TMbzY1Xe4rq28qFeSPkgdV+k9kn7Ub3Tit4hQrwI=)
                          2: wTYC4zH5JgLGmmIL8cwuLN5qdF0.roa (hash: T1W7XAGubzubl1esutsHd7BVXV96IKHFs/uvU4Yqlj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:27:a4:1a:88:a4:5e:98:69:fc:ad:1f:18:b2:4c:b8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d845f409ab2ff2c8147fc1c9a8d00ddf1286117
        Validity
            Not Before: Mar 28 09:54:38 2023 GMT
            Not After : Mar 29 09:54:38 2023 GMT
        Subject: CN=24d0601acf819949dadd80809dbb6397d096a7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:ab:23:44:f7:ed:1a:66:fb:bb:32:a9:0c:
                    f0:76:45:b9:a4:65:1e:2e:67:f3:7b:5f:d9:ba:8f:
                    70:11:86:4f:23:a8:1c:93:e6:5b:8a:8c:b0:a7:34:
                    c1:89:8f:de:fa:57:40:81:75:18:49:10:33:3e:f1:
                    b4:59:09:28:7f:11:bd:82:13:69:04:6c:72:2b:1b:
                    a1:2a:b6:ae:59:8d:00:65:2d:b3:7d:ad:2b:92:37:
                    5b:86:b6:2f:32:61:e7:1e:29:9f:90:72:75:50:40:
                    98:a9:80:29:00:c8:b8:3c:21:db:58:67:08:34:e6:
                    1b:5e:32:50:49:b1:2c:01:dc:6f:e2:63:3c:ce:e7:
                    20:6d:52:e8:7c:d0:03:01:4b:39:a2:35:06:a7:d0:
                    09:39:77:f2:6f:f6:de:5d:0e:a0:19:5d:eb:78:ff:
                    90:16:45:47:e8:3e:3c:e1:53:65:1a:90:f0:cd:53:
                    c6:5f:47:ad:d3:d2:90:95:ff:39:9e:d1:1f:1b:fc:
                    e5:c8:35:94:8a:f5:55:6e:b0:41:fb:91:c2:ef:d4:
                    bd:d2:ad:5c:b4:55:34:a5:5b:94:5d:1e:de:56:12:
                    80:31:58:8d:27:d8:16:90:0b:b2:b9:e3:9e:4c:e4:
                    ae:4f:45:89:fe:9d:60:5a:2a:af:19:0a:ea:67:6b:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D0:60:1A:CF:81:99:49:DA:DD:80:80:9D:BB:63:97:D0:96:A7:E3
            X509v3 Authority Key Identifier:
                keyid:9D:84:5F:40:9A:B2:FF:2C:81:47:FC:1C:9A:8D:00:DD:F1:28:61:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYRfQJqy_yyBR_wcmo0A3fEoYRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/nYRfQJqy_yyBR_wcmo0A3fEoYRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/nYRfQJqy_yyBR_wcmo0A3fEoYRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b3:44:08:4a:e8:07:25:e2:b3:e5:4e:5e:df:78:e2:b6:67:
         93:82:e6:c0:4f:98:5b:5b:01:e8:1a:e9:07:98:9c:66:f8:2f:
         2d:d9:84:63:6e:94:ab:c0:5d:c9:3a:09:26:ad:bb:94:ea:9b:
         4b:fe:e7:bc:28:8d:d6:3b:c8:c6:9f:e0:2d:4a:e8:dc:58:bc:
         53:9a:ed:54:9b:bf:52:c0:92:bf:a5:4b:31:7e:7f:73:f4:94:
         96:3f:eb:7c:c1:97:12:76:ea:cb:c5:70:0c:d1:9f:cd:97:ef:
         86:67:03:5f:88:4f:72:1e:23:1c:bc:40:e3:a9:27:fa:90:64:
         fe:7d:5e:35:5d:c6:11:cc:33:ce:46:13:b7:6f:ab:9f:96:4a:
         8d:fc:24:a1:b2:4b:df:d6:25:af:43:bb:29:66:ac:9f:f0:49:
         d6:d8:3a:59:49:43:16:16:54:4e:82:d1:9e:54:45:6c:27:46:
         2b:3e:50:de:05:40:49:ad:7c:cb:10:a4:fa:62:4a:1a:e6:6e:
         cc:8a:f6:1d:0d:05:1e:b1:07:50:ec:61:dc:03:a5:5c:72:15:
         0c:9c:fe:fe:bb:9e:3e:e1:29:fd:3e:56:a7:b9:28:41:e8:b8:
         dc:18:69:c4:b1:1c:0b:11:11:76:9f:b7:d6:bf:32:f8:4d:b9:
         06:92:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----