Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/znibsBTNPIvV8Rn8BGVLAcCyUhc.mft
File:                     znibsBTNPIvV8Rn8BGVLAcCyUhc.mft (raw, json)
Hash identifier:          CW6G8HjB/dZRAIyrn9T7DpEpRSn0wHUfiX4XRAT0TQY=
Subject key identifier:   37:0B:45:D8:1C:5B:C5:3A:50:55:DF:A2:9E:EB:FA:11:6A:B6:C1:4F
Authority key identifier: CE:78:9B:B0:14:CD:3C:8B:D5:F1:19:FC:04:65:4B:01:C0:B2:52:17
Certificate issuer:       /CN=ce789bb014cd3c8bd5f119fc04654b01c0b25217
Certificate serial:       018451D07C49D09CCC74FB2A2683FC7E22FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znibsBTNPIvV8Rn8BGVLAcCyUhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/znibsBTNPIvV8Rn8BGVLAcCyUhc.mft
Manifest number:          0872
Signing time:             Mon 07 Nov 2022 11:18:48 +0000
Manifest this update:     Mon 07 Nov 2022 11:18:48 +0000
Manifest next update:     Tue 08 Nov 2022 11:18:48 +0000
Files and hashes:         1: 53Ev0x5Ynb8uo82HVq5vLtZ-JTQ.roa (hash: LCMKVRo/wOm9m2U7CYa2Y30CRv/bNzgoLfbhu0rnKGY=)
                          2: DdLoSh759OS3AYeL8gkdkt-eJF8.roa (hash: +l+t/XcLn+FUwMEmZ7K6g0D2Jce4Jv6Z3TSEnZBYtr8=)
                          3: IZO7mauKxcnxl6CzUGVMgypA7ss.roa (hash: 3lAYkuk14/8d7C/0z+J1Q1DbUXenJVtnWupPg59X624=)
                          4: YwkCEWbwJ225LWbP8H_2Q6PLp80.roa (hash: 4d+E8unGkiSBWdRIACd4R3dIZQzZ+7NypB01nHV20XU=)
                          5: znibsBTNPIvV8Rn8BGVLAcCyUhc.crl (hash: +oFaYmP7nWlhDqqKdfYHyX05O8g9N4PbobQgobmzlgU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:51:d0:7c:49:d0:9c:cc:74:fb:2a:26:83:fc:7e:22:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce789bb014cd3c8bd5f119fc04654b01c0b25217
        Validity
            Not Before: Nov  7 11:18:48 2022 GMT
            Not After : Nov  8 11:18:48 2022 GMT
        Subject: CN=370b45d81c5bc53a5055dfa29eebfa116ab6c14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:15:21:8c:5f:0f:d2:a2:2c:31:6d:de:92:
                    8b:29:bf:ef:2a:e1:3d:ee:aa:a7:51:5a:f5:cb:5d:
                    f5:5f:77:38:d7:4f:26:50:cb:8d:05:4c:e1:41:4d:
                    12:24:58:a4:7d:da:8a:1b:56:af:75:06:94:13:b7:
                    b7:a7:87:ab:0c:b2:da:bd:f0:70:3f:1a:21:fc:2a:
                    d8:4f:a6:b6:32:14:5c:8b:0d:22:5a:25:48:0a:b8:
                    aa:64:98:03:2b:4b:7a:2c:49:d2:d9:9f:a3:41:5e:
                    3d:16:cb:95:e3:3a:96:f7:53:e0:b0:d7:bf:dc:02:
                    dc:10:82:64:7f:07:12:ee:4d:84:9b:bf:43:b2:30:
                    74:74:aa:69:0e:01:c0:76:14:3b:67:4d:62:a3:8d:
                    d7:5f:e7:7c:6b:71:83:2b:f1:f8:13:57:2f:aa:cf:
                    c5:47:e3:2a:6b:70:33:d0:7b:41:1c:3e:e1:e4:ad:
                    1a:57:54:e7:8e:69:5b:2b:ea:c5:db:ce:9d:60:40:
                    9e:c7:9a:c6:aa:fe:33:90:c9:f2:1f:25:fd:3b:90:
                    59:1d:35:f5:01:17:e0:44:0a:45:7b:cd:8e:5a:eb:
                    6c:80:90:05:f0:a8:fe:20:99:4d:f3:2d:74:97:07:
                    cb:f8:f5:d8:9b:b7:c2:71:2c:6e:d7:d2:9b:f4:ce:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0B:45:D8:1C:5B:C5:3A:50:55:DF:A2:9E:EB:FA:11:6A:B6:C1:4F
            X509v3 Authority Key Identifier:
                keyid:CE:78:9B:B0:14:CD:3C:8B:D5:F1:19:FC:04:65:4B:01:C0:B2:52:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znibsBTNPIvV8Rn8BGVLAcCyUhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/znibsBTNPIvV8Rn8BGVLAcCyUhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/znibsBTNPIvV8Rn8BGVLAcCyUhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:0d:06:5c:45:1f:47:a0:2a:d9:6c:b7:67:b1:18:26:e2:
         77:e5:24:35:8b:98:47:6d:26:eb:f1:1d:f7:fa:1d:16:9a:5a:
         2c:f3:b3:2b:c5:59:5d:0d:dc:e0:58:cd:5e:5d:b0:f9:ab:ee:
         e2:e3:ef:7f:20:8e:de:eb:0f:95:f4:a0:70:2b:11:53:86:1c:
         e9:c1:35:22:84:fb:51:b5:97:74:e2:01:34:a8:eb:e6:b4:8a:
         f7:ff:eb:26:50:a5:94:e4:f2:c1:cb:96:09:34:e1:17:bb:3c:
         24:40:ad:18:c1:99:45:d2:83:c0:c1:2d:93:b1:e2:e0:0c:8c:
         35:da:b7:cb:d4:bc:3d:65:4a:09:01:b9:eb:7c:70:6e:15:da:
         86:2f:cb:fc:ac:63:10:82:79:2c:87:4c:d6:b1:1b:e8:e3:65:
         75:b1:48:27:ce:32:30:db:c1:22:96:90:15:1e:32:10:bf:7e:
         c2:4f:e6:80:5d:9b:f1:9d:cc:aa:7a:20:d9:f4:ca:22:15:79:
         0b:27:32:18:e6:6a:cb:ea:ac:01:8e:91:36:b9:ed:83:22:17:
         c4:7d:8f:ce:e9:75:69:f2:70:91:19:17:e9:48:b3:83:f1:eb:
         1f:54:9e:0b:ec:90:75:cc:5c:b7:b1:3a:b6:c2:9e:ce:75:09:
         28:e3:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----