Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/w_HC09nkY0HQon8FWErRsPy6PkA.mft
File:                     w_HC09nkY0HQon8FWErRsPy6PkA.mft (raw, json)
Hash identifier:          Z/uoQvyesRL4THuC9PAEKSIlKfAA8yNgvdPSqYNRS8M=
Subject key identifier:   F1:36:77:6A:92:D7:F9:C8:EE:3A:19:0D:B1:E4:83:F2:93:0A:EB:A1
Authority key identifier: C3:F1:C2:D3:D9:E4:63:41:D0:A2:7F:05:58:4A:D1:B0:FC:BA:3E:40
Certificate issuer:       /CN=c3f1c2d3d9e46341d0a27f05584ad1b0fcba3e40
Certificate serial:       018235C80219D658900BC4A6F440E1AE950B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_HC09nkY0HQon8FWErRsPy6PkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/w_HC09nkY0HQon8FWErRsPy6PkA.mft
Manifest number:          0A24
Signing time:             Mon 25 Jul 2022 14:34:36 +0000
Manifest this update:     Mon 25 Jul 2022 14:34:36 +0000
Manifest next update:     Tue 26 Jul 2022 14:34:36 +0000
Files and hashes:         1: QS9aTUJnGNQf0YKWybMaxNmYR8o.roa (hash: HLQAnQ5BP7X6GZQjlWvbn+tPs9Bu7x1shaeYtv2W3L4=)
                          2: w_HC09nkY0HQon8FWErRsPy6PkA.crl (hash: u6IZmjYpatr3OQTxeWh7dnWJ74/zZQTbE7iq5MEeFOM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:35:c8:02:19:d6:58:90:0b:c4:a6:f4:40:e1:ae:95:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3f1c2d3d9e46341d0a27f05584ad1b0fcba3e40
        Validity
            Not Before: Jul 25 14:34:36 2022 GMT
            Not After : Jul 26 14:34:36 2022 GMT
        Subject: CN=f136776a92d7f9c8ee3a190db1e483f2930aeba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fe:06:4d:4f:6a:f2:ee:65:6f:9e:a5:6f:af:
                    e3:45:e7:fa:79:6f:6a:c2:71:d9:10:cc:e7:14:4f:
                    f5:6e:d1:90:01:db:8f:41:f5:46:6c:10:1f:f3:1f:
                    dc:33:98:03:f6:c9:2c:33:f2:79:05:14:7f:f9:8d:
                    a8:d8:21:f9:df:83:eb:19:94:81:f6:a6:1b:1b:5b:
                    17:19:7f:2a:76:59:db:dd:0d:5f:b6:4e:cb:99:ea:
                    8f:3f:7f:42:b3:95:c1:ec:4d:34:82:be:fd:ff:dd:
                    b6:22:ec:94:a8:a7:f5:ac:47:40:6e:bf:55:16:23:
                    b9:67:09:bd:0a:c8:d9:81:f5:a1:bc:87:5b:bc:06:
                    c4:d1:64:1e:7f:0d:74:99:7b:c1:9c:ca:1a:f8:3e:
                    c4:bd:25:57:89:5f:94:39:ba:58:e9:9e:6b:b0:1c:
                    5e:09:49:79:00:55:21:04:2c:51:8f:78:d7:67:5f:
                    21:ab:b6:58:c6:be:ad:df:20:a4:42:30:dd:06:b7:
                    9c:8c:ea:ea:98:6e:98:47:e5:ce:d8:49:93:f1:5c:
                    44:6b:18:ab:fb:cf:43:60:8c:2d:c9:23:c4:a4:66:
                    b3:bc:40:cf:6b:72:d4:10:81:d6:27:1e:f1:e2:91:
                    a6:7b:da:39:0f:98:8b:f8:e6:fe:6d:cc:27:f6:23:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:36:77:6A:92:D7:F9:C8:EE:3A:19:0D:B1:E4:83:F2:93:0A:EB:A1
            X509v3 Authority Key Identifier:
                keyid:C3:F1:C2:D3:D9:E4:63:41:D0:A2:7F:05:58:4A:D1:B0:FC:BA:3E:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_HC09nkY0HQon8FWErRsPy6PkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/w_HC09nkY0HQon8FWErRsPy6PkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/w_HC09nkY0HQon8FWErRsPy6PkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:65:7b:30:71:77:85:d9:03:a0:f0:ea:c0:e6:74:e9:c2:64:
         e3:d1:d7:5b:5b:23:b3:a9:21:52:ff:52:56:92:31:7f:19:98:
         02:6a:b7:5e:82:97:2f:4b:b5:7c:4f:bb:47:b3:1a:39:96:4d:
         d7:3b:c2:10:e2:7f:89:ed:8b:d6:72:13:81:d8:4e:c9:53:61:
         36:02:b9:96:b6:1a:56:0e:b2:0a:cf:83:63:fe:c9:a2:df:46:
         14:12:fd:0e:ab:84:d8:70:e0:c6:d2:23:67:2c:9b:86:f5:80:
         8c:37:7f:bf:19:36:a0:ad:15:c7:0b:88:19:38:55:7c:97:d7:
         9b:12:82:96:21:d0:2e:69:86:ab:09:b5:3d:7a:d8:d4:2a:92:
         0e:fd:41:0a:6b:04:5d:95:4f:e7:1e:14:61:7b:71:69:8e:0c:
         2e:c5:83:3c:b7:15:9e:29:63:df:71:30:7a:de:a8:53:ec:88:
         13:90:4d:d3:e8:00:25:fa:96:41:f2:94:97:ae:16:bd:5a:51:
         7f:57:79:25:7b:5b:93:09:86:61:23:2b:17:09:86:80:8d:60:
         8e:3b:b4:ef:4a:6f:7c:cc:10:f9:43:3f:6a:8a:10:f3:53:1c:
         fc:43:31:a5:f2:aa:b2:d5:7c:23:dd:9b:89:37:ed:4f:04:00:
         6b:ed:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----