Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft
File:                     YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft (raw, json)
Hash identifier:          /ExzPiPZTNyzz8/Ii0NCvX9iNNn6Vky15JjqShNgtkQ=
Subject key identifier:   6C:FB:05:CE:B5:8D:9E:AC:B6:38:5A:F5:B9:7D:49:DE:12:6A:81:E4
Authority key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Certificate issuer:       /CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Certificate serial:       018C8C77A7FC7276DEDFE32B83AAF43D7F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft
Manifest number:          0FED
Signing time:             Thu 21 Dec 2023 13:01:41 +0000
Manifest this update:     Thu 21 Dec 2023 13:01:41 +0000
Manifest next update:     Fri 22 Dec 2023 13:01:41 +0000
Files and hashes:         1: 6o5ziaCqPYUgesFhqsVIRscUMq4.roa (hash: 8+18cMZ5zZgOEAvwOmImjlw/TciUDrapDRuXqtth95I=)
                          2: OzhygOuF9d4cEmcItZhlJcXhayg.roa (hash: Q/pwXUpHjGbPpE1zhLVZ95X1xE9OthCqX0RXfHgQP14=)
                          3: YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl (hash: xcUbsAkyN4oF10zXo41aD+EtXdXkN6paIveUZltRoSM=)
                          4: iVMFJ6mZbVV-sc4fA6ffqIwKPT0.roa (hash: z43gPKGcxdxQrjef29vA0RCLn2AYtEtJDTBLsSmM/As=)
                          5: nnxcgt04kH1RTUfycq2nkpNB8Jo.roa (hash: lIQYviT6YcojHZlHYWjq82fcuKAH2SBa053jQZ7lWUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8c:77:a7:fc:72:76:de:df:e3:2b:83:aa:f4:3d:7f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
        Validity
            Not Before: Dec 21 13:01:41 2023 GMT
            Not After : Dec 22 13:01:41 2023 GMT
        Subject: CN=6cfb05ceb58d9eacb6385af5b97d49de126a81e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:f0:86:d3:f5:a9:48:46:9e:3e:89:cf:06:
                    7e:b9:f2:5f:b1:1e:7f:ef:49:31:c4:ec:f4:4c:66:
                    7d:e2:70:65:7b:e5:b1:40:65:d7:42:f4:eb:84:d9:
                    e6:39:32:82:9c:51:cb:8b:fe:d7:bb:e3:2c:9a:58:
                    3d:f3:df:f0:28:b8:5d:0e:58:ce:6e:06:54:49:a5:
                    98:0e:23:17:38:45:e9:5e:4e:04:37:08:db:25:ef:
                    e0:ed:d2:e4:5b:01:d7:14:93:ea:14:d1:4d:4d:4a:
                    e9:d5:27:b5:47:d8:6e:b5:10:71:e7:ce:0b:6d:15:
                    1c:7d:cc:ab:00:0b:95:89:62:6f:38:3e:80:d1:5c:
                    23:b3:ed:a0:e8:ef:5f:34:9a:ec:f6:1d:84:08:5e:
                    fa:d2:38:2b:38:e9:cd:52:ce:a2:11:e6:79:73:9d:
                    f2:5a:cc:08:a7:e9:74:0e:01:83:54:fb:73:07:26:
                    70:d0:d3:e0:71:b9:96:ac:73:f1:9e:ec:b6:38:37:
                    35:3d:55:73:f1:10:c4:d1:a8:26:f0:22:22:a9:c4:
                    df:db:4e:6a:36:c0:47:4a:6c:16:c1:e1:25:ba:41:
                    66:6d:97:fd:c3:76:7c:c2:f1:d9:27:ce:a8:84:43:
                    d0:3b:34:b1:67:64:4d:bd:df:36:be:22:25:21:3b:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FB:05:CE:B5:8D:9E:AC:B6:38:5A:F5:B9:7D:49:DE:12:6A:81:E4
            X509v3 Authority Key Identifier:
                keyid:60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:de:0f:3d:97:ad:fd:28:0c:a9:2d:b5:72:ba:c0:08:66:dc:
         75:39:b0:06:51:6b:2e:b6:57:50:34:12:02:8d:31:66:75:11:
         33:9a:4e:92:cd:0e:29:5b:e9:64:5d:bf:82:89:b6:91:8e:5c:
         a4:16:da:ce:a4:4f:94:7f:d8:d1:89:58:04:3e:fe:33:ae:a4:
         07:1c:9b:0b:d9:25:52:3a:c6:43:0b:34:2d:2a:9c:9a:db:01:
         94:7b:49:a8:09:95:91:a8:08:25:a4:4c:12:e2:67:7a:4a:8d:
         97:14:04:b1:02:d0:da:ee:79:44:4a:43:90:da:cb:97:81:cd:
         87:24:5f:d0:e5:57:7c:38:3b:0e:26:b4:bc:6f:d2:30:6b:41:
         a6:46:44:31:45:45:85:3f:fc:4b:4a:aa:b0:64:b9:d8:d5:16:
         6b:46:0d:7b:68:50:55:7d:dc:50:70:dd:fa:65:39:e6:11:bf:
         f6:a0:13:86:99:1b:41:92:76:00:4a:8c:0e:82:e0:51:f2:7e:
         e8:f9:d5:85:e9:bb:99:fa:1b:c2:1a:04:f3:44:4d:a4:e6:a8:
         1a:19:e8:71:69:47:0f:51:bc:3d:df:cb:09:b9:8f:e6:6f:5d:
         84:fb:39:5f:78:99:04:12:e4:19:79:5a:22:e2:f0:eb:66:d2:
         85:4d:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----