Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.mft
File:                     DTAa1g5_Yz7hdEl12PsVdjfyBy8.mft (raw, json)
Hash identifier:          sgRdngX3Lkj1vlQ6iQtitsZqSWKWby4/yAHBUnvLWvE=
Subject key identifier:   2C:8C:50:25:8B:25:E1:33:32:5F:56:D5:0F:75:03:D6:7D:CB:7E:FA
Authority key identifier: 0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
Certificate issuer:       /CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Certificate serial:       0186B9A5D504276D73EF6A1CB144B0A7D3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.mft
Manifest number:          0CB8
Signing time:             Tue 07 Mar 2023 01:18:18 +0000
Manifest this update:     Tue 07 Mar 2023 01:18:18 +0000
Manifest next update:     Wed 08 Mar 2023 01:18:18 +0000
Files and hashes:         1: DTAa1g5_Yz7hdEl12PsVdjfyBy8.crl (hash: arldA9es1qsLRZZoAkbLqa6WlggRl28FGWPIqkvjtqA=)
                          2: F6h_nGhci3gPOQFFBhds-cWbduU.roa (hash: 9Pt+nmPcCtZCmr7RGL3u2y4VeMq5ByTFU944rSdL6Ms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b9:a5:d5:04:27:6d:73:ef:6a:1c:b1:44:b0:a7:d3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d301ad60e7f633ee1744975d8fb157637f2072f
        Validity
            Not Before: Mar  7 01:18:18 2023 GMT
            Not After : Mar  8 01:18:18 2023 GMT
        Subject: CN=2c8c50258b25e133325f56d50f7503d67dcb7efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:b8:77:2e:be:f8:7a:53:c5:97:92:d4:dd:
                    63:c6:40:19:f5:7e:02:c9:47:24:f1:25:fa:7a:e7:
                    28:50:d5:2b:f6:20:f8:55:49:2a:f9:56:f1:d3:08:
                    25:ef:be:82:af:f4:e0:97:97:61:45:f3:39:01:fd:
                    5c:1e:bc:87:b3:1f:44:3c:42:d5:9b:aa:e4:71:8b:
                    8b:08:67:71:f7:c3:71:01:12:5c:d3:f2:89:f9:56:
                    1a:ae:9c:3f:1d:84:5a:ff:8b:5b:1b:de:68:95:74:
                    a6:46:32:f2:b9:dc:8a:fe:f4:27:ee:a5:eb:16:a6:
                    9e:91:c1:a0:6e:50:4c:12:f8:38:81:ea:03:1c:47:
                    a1:e0:2f:72:8b:ad:27:0b:a8:cc:02:53:24:00:c2:
                    a0:ab:0b:41:07:c2:9d:dd:af:06:54:41:d6:88:b3:
                    f7:0b:8b:50:63:f5:a4:6b:22:49:d3:2a:78:fa:c4:
                    01:2f:5a:5f:bd:97:c2:bd:3a:7a:13:54:5c:b0:f9:
                    27:41:eb:e7:4b:84:f6:b1:48:91:33:80:4b:06:bb:
                    e0:45:3f:c9:3c:a9:0b:58:f6:f9:e0:a3:7e:b1:b6:
                    2b:cb:0c:ec:a0:49:d2:a5:3d:9d:94:e0:e2:98:ba:
                    9b:47:23:a5:47:c1:cf:f6:9a:18:95:24:ca:e3:2d:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:50:25:8B:25:E1:33:32:5F:56:D5:0F:75:03:D6:7D:CB:7E:FA
            X509v3 Authority Key Identifier:
                keyid:0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:30:d9:22:38:f5:41:d1:fc:62:d9:e5:10:fd:67:12:08:34:
         9e:b8:d7:e6:ab:cf:8a:1c:46:f9:32:2c:54:cd:7c:ca:9a:12:
         a1:20:64:98:62:80:38:ff:c5:33:67:ea:d5:e6:77:29:4b:01:
         23:ea:49:41:34:f0:51:b0:6c:8a:d8:3c:43:da:9f:47:a0:bd:
         fb:c7:4a:34:f4:8b:5b:15:a1:35:d7:ac:75:42:d2:dc:0f:53:
         e9:a5:6d:4c:7b:d5:7f:26:eb:bb:13:35:42:e1:6a:5d:02:96:
         d5:35:cd:31:36:99:61:b9:e3:7f:72:a7:b2:63:a6:40:1f:94:
         8b:c4:70:78:ea:e7:4d:34:61:8d:f9:03:eb:2a:e6:82:ba:74:
         66:5c:a2:1a:ea:2e:8a:89:c4:06:ce:ef:e8:92:5b:5a:60:dc:
         81:a8:5e:c8:84:52:44:bb:61:fa:4d:d6:b2:c4:d1:58:78:b7:
         e4:3a:68:b1:34:a7:c3:5c:69:8c:da:94:f0:03:9d:bd:92:f6:
         4c:59:71:8f:d9:7f:39:d6:e3:50:dd:19:41:d5:96:58:0b:45:
         2d:31:a3:16:48:f4:48:dd:a0:28:2c:ef:00:42:65:63:da:69:
         f5:5d:3e:f2:32:56:cb:fa:e6:38:70:79:cb:4b:f4:c2:60:43:
         8a:5f:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----