Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.mft
File:                     69b8UVjuPsIaQh1xgjTI2KM2H6Y.mft (raw, json)
Hash identifier:          e81rXM4hnTu5ns86de+GrTEHr6tBWHaL7kz9xqNbXag=
Subject key identifier:   89:7C:F4:16:0F:A0:F3:19:9A:82:4A:CE:B9:B4:D7:9A:9C:D2:98:CA
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Certificate issuer:       /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial:       01870BCC02E4A0A5384A210E0ECA7F535A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.mft
Manifest number:          0CE7
Signing time:             Thu 23 Mar 2023 00:08:51 +0000
Manifest this update:     Thu 23 Mar 2023 00:08:51 +0000
Manifest next update:     Fri 24 Mar 2023 00:08:51 +0000
Files and hashes:         1: 1TztD-_IZZiy5Ii8j7hPKyiR_YE.roa (hash: 7OFACht6eTZz1fYLOcpk1HoMkKy3H+CrPYuPxbwtUHk=)
                          2: 69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl (hash: c0MiYxy+crRNk22McAuoLfJA1qjJTXAW2M/4Y5Qt6P0=)
                          3: OMurwYA6YOKIncOPLLsxkXWOxX8.roa (hash: 2NTgYiWsqO5oUTWCX9LXt0M7qqX3o2QS1n2SDI4c6EE=)
                          4: Tvd8wdwDSvdSyDpsGCCRAnvc87A.roa (hash: /YsyBDfP+QR+rx4BLGPGCCOuSTNVCMBs1BcXU3GQRnE=)
                          5: pUnFqc84gx-IheBp8mtbN5vQjOg.roa (hash: 5m5Vn+FTH1VGJ6qKHAl8KzrjAbiiJykOi8njS/pudtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0b:cc:02:e4:a0:a5:38:4a:21:0e:0e:ca:7f:53:5a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
        Validity
            Not Before: Mar 23 00:08:51 2023 GMT
            Not After : Mar 24 00:08:51 2023 GMT
        Subject: CN=897cf4160fa0f3199a824aceb9b4d79a9cd298ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:d5:96:e5:62:d6:17:38:b1:74:48:93:b3:
                    74:cb:bb:da:9d:61:94:c4:38:d6:49:4d:a3:f0:f1:
                    94:a4:6e:21:90:a5:50:ea:31:4a:8b:54:cc:05:d6:
                    27:16:53:e6:7b:93:fd:7e:3b:2f:a7:75:43:1e:13:
                    e8:40:10:00:6b:17:f4:36:2f:97:e4:9f:ff:61:7e:
                    9c:6d:72:c5:0c:3e:66:e0:ef:5e:aa:49:7a:d9:0d:
                    d0:03:b1:07:5d:68:82:1b:9a:1d:e4:e4:bd:76:e4:
                    fa:69:47:ca:af:de:ec:53:6c:c6:6a:9f:a1:76:f5:
                    e9:39:d9:ae:cf:6c:ad:e3:3d:d3:18:c6:e7:8f:01:
                    5f:31:79:7d:9f:45:ad:c1:14:77:75:4e:82:25:65:
                    89:ce:31:0e:43:e4:9d:a5:de:6e:d5:aa:e9:30:1c:
                    9a:47:8c:2a:fa:35:2d:3a:e4:5a:c1:7d:87:2b:8c:
                    d6:6d:d6:6e:92:29:56:cc:69:9b:d3:e2:17:e3:c9:
                    83:f1:ab:a0:d7:42:21:3c:c7:3f:f9:81:0b:d2:3a:
                    d5:98:68:08:75:b8:61:c1:73:84:a8:28:47:83:5f:
                    eb:7f:56:05:3e:52:51:42:9c:cc:6a:93:ad:b3:31:
                    02:19:fd:57:d6:8c:07:fd:f6:4f:e9:7b:3d:6c:c4:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7C:F4:16:0F:A0:F3:19:9A:82:4A:CE:B9:B4:D7:9A:9C:D2:98:CA
            X509v3 Authority Key Identifier:
                keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b1:a0:a0:b6:5f:5c:ed:51:e6:da:b4:19:c2:f5:f9:77:45:
         0e:dc:d1:1c:59:93:9c:c7:4e:ff:52:1d:9b:df:2e:8d:5f:12:
         bb:d6:7c:41:a2:95:2f:6d:59:d8:7e:71:a6:69:9f:24:52:68:
         70:cb:56:ce:1a:b5:8a:38:d4:97:42:b2:7b:1a:84:2d:5d:8f:
         24:06:af:52:ba:ba:45:05:9b:2d:7a:ef:07:8a:3e:9a:a9:d4:
         47:cd:d8:ad:d9:fa:d8:5d:1a:68:8d:2b:48:ca:45:3c:e4:91:
         d4:4e:f1:63:eb:0f:f8:7f:96:10:4c:35:aa:7d:25:5e:bd:2e:
         ea:d9:25:a1:f8:73:d9:2e:7f:1f:e2:e1:13:31:7c:2b:97:ba:
         e0:91:d7:f8:f1:32:b7:05:ad:c1:e9:f1:d6:a0:08:96:db:9b:
         a7:ed:21:2b:56:57:88:29:02:a8:c4:f0:65:64:68:88:71:9e:
         f4:fb:ef:79:bd:c0:df:df:c1:89:2d:37:e0:56:68:d3:03:d4:
         ca:95:b1:2b:21:73:56:09:15:07:da:e5:08:22:f2:e4:47:15:
         e9:7c:90:de:f7:bf:8a:98:a6:20:af:1b:43:86:1e:8f:b0:87:
         0f:d4:48:63:87:e2:3c:fc:b0:d7:6c:ff:3a:63:83:51:c6:b0:
         ff:a7:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----