Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/be7cIhBndRK51yiokcHyRR09Rqo.mft
File:                     be7cIhBndRK51yiokcHyRR09Rqo.mft (raw, json)
Hash identifier:          a9COZdkSN3g+lNhi2QXIZkbPdk0u7UX/q3znFbHL/XI=
Subject key identifier:   5F:A9:11:45:FE:46:29:36:6E:2B:00:05:66:0D:B2:A3:83:46:18:BE
Authority key identifier: 6D:EE:DC:22:10:67:75:12:B9:D7:28:A8:91:C1:F2:45:1D:3D:46:AA
Certificate issuer:       /CN=6deedc2210677512b9d728a891c1f2451d3d46aa
Certificate serial:       0187045B77CF500C281F8051B3C47E7341D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/be7cIhBndRK51yiokcHyRR09Rqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/be7cIhBndRK51yiokcHyRR09Rqo.mft
Manifest number:          05CC
Signing time:             Tue 21 Mar 2023 13:28:35 +0000
Manifest this update:     Tue 21 Mar 2023 13:28:35 +0000
Manifest next update:     Wed 22 Mar 2023 13:28:35 +0000
Files and hashes:         1: 5O4McuCZ_AJ1vsHDP6oYy9CrMQ0.roa (hash: /NmbNVHlwCq/XajOy22ooCW0p9L+tUQwncBhKMkyIkA=)
                          2: MMDMpiuU8AUgibR_W7zLWcjDVno.roa (hash: 2HIjzT981GTzCdCEIwgSHh4x+JtEwdYhzyi9304sgcI=)
                          3: be7cIhBndRK51yiokcHyRR09Rqo.crl (hash: onfAIrJuKKxtFl+NUb4HC3a35rf7RW3xvIVVGHteoFI=)
                          4: suUfuxegTpg0NCc-BZh_lxYQBWY.roa (hash: jts+sPF075KvOAWBNozmmLqduaG9gl8j7iYQMbGDL2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:04:5b:77:cf:50:0c:28:1f:80:51:b3:c4:7e:73:41:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6deedc2210677512b9d728a891c1f2451d3d46aa
        Validity
            Not Before: Mar 21 13:28:35 2023 GMT
            Not After : Mar 22 13:28:35 2023 GMT
        Subject: CN=5fa91145fe4629366e2b0005660db2a3834618be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:51:49:96:9c:38:38:f4:69:1e:83:5f:86:
                    a2:4b:d6:71:37:64:48:e4:de:95:4f:0e:bd:41:90:
                    fe:64:d7:c2:1c:85:45:7d:ac:96:97:17:c9:79:b1:
                    07:69:ca:00:d2:81:a3:91:67:b6:75:6a:30:2d:80:
                    d8:20:1f:49:be:4b:87:ce:75:13:43:99:b0:80:55:
                    76:5a:57:ce:e2:24:9b:87:ab:c3:b9:d3:da:21:d4:
                    e4:2e:46:82:72:22:36:30:73:88:e8:c1:cd:c9:eb:
                    60:27:1a:06:fc:8d:22:cd:78:2c:4b:38:0d:69:80:
                    16:78:4e:ee:7a:e3:8d:6c:9e:61:c9:ec:b4:06:8c:
                    09:87:43:c4:57:2c:6f:8d:ab:50:f4:09:39:b1:6c:
                    56:48:2d:de:f8:4b:13:fd:5a:42:57:28:33:91:53:
                    0b:ee:29:23:59:3d:94:82:0a:eb:9d:b1:64:b4:7a:
                    4d:c5:ea:53:88:dc:37:fb:0a:41:19:11:da:62:58:
                    a3:17:e5:01:47:e4:f7:23:0b:fa:35:4c:28:a2:12:
                    c4:57:eb:39:b6:89:45:f3:8f:f8:f2:7f:1a:e6:66:
                    fb:e5:bf:20:f4:41:2a:29:3f:cc:8a:a3:14:b1:c6:
                    40:8e:b8:c2:eb:da:92:84:4d:28:4f:4a:9a:ee:04:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A9:11:45:FE:46:29:36:6E:2B:00:05:66:0D:B2:A3:83:46:18:BE
            X509v3 Authority Key Identifier:
                keyid:6D:EE:DC:22:10:67:75:12:B9:D7:28:A8:91:C1:F2:45:1D:3D:46:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7cIhBndRK51yiokcHyRR09Rqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/be7cIhBndRK51yiokcHyRR09Rqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/be7cIhBndRK51yiokcHyRR09Rqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:eb:11:37:3e:76:e5:94:96:65:94:b6:41:c8:4a:24:53:
         47:8b:80:21:4c:08:43:46:6a:cf:15:11:ec:4b:75:54:50:d3:
         31:ec:a9:1b:32:8a:e1:06:21:40:a9:8c:6e:a1:3c:b4:c4:97:
         be:02:52:d5:06:5c:ed:0e:36:2e:2d:4c:1e:62:03:64:b0:85:
         43:03:be:cd:d0:d6:78:05:8d:4c:50:3b:d2:4c:53:83:52:35:
         8d:69:4b:4b:2c:2b:18:8b:17:b2:f7:f3:5c:3d:f8:bb:69:eb:
         ce:4b:37:96:27:3b:0f:4b:34:cf:8c:44:bc:88:25:bf:91:45:
         c1:4d:67:d5:ad:03:4b:a5:4a:ab:36:76:bf:3d:1d:e2:10:ff:
         a8:a3:08:82:27:b9:b1:3d:bd:f1:29:7a:4f:13:aa:dc:71:8d:
         83:31:d4:5d:df:e0:b6:5a:18:4a:c6:b0:59:d2:23:45:21:45:
         36:1b:56:a7:da:f3:47:11:cd:58:1b:fd:45:91:5b:fe:35:8e:
         3e:00:0e:5b:25:d4:f3:8f:6b:aa:b9:54:67:82:25:56:97:dd:
         fa:10:3a:ec:e6:6b:8d:03:9f:4e:57:60:6c:7c:06:9a:3d:2d:
         66:ed:0f:a2:03:5d:0c:aa:17:f7:ed:0e:98:e6:2c:a3:ce:c8:
         26:bd:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----