Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cd1a24-67b1-4b4e-931e-4994fa74dfdd/1/Y9W3dTdUluY9ee20K3189Au2wfg.mft
File:                     Y9W3dTdUluY9ee20K3189Au2wfg.mft (raw, json)
Hash identifier:          dvU/qVIQ2Lg+fztrjIGznSuFFGnTbEySEf61cuvG9G8=
Subject key identifier:   2E:A8:13:02:32:1A:C8:7E:87:40:39:C1:91:71:99:9B:92:43:FD:6B
Authority key identifier: 63:D5:B7:75:37:54:96:E6:3D:79:ED:B4:2B:7D:7C:F4:0B:B6:C1:F8
Certificate issuer:       /CN=63d5b775375496e63d79edb42b7d7cf40bb6c1f8
Certificate serial:       018731FEEE07AC2202CE1F3FC78F209F4190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9W3dTdUluY9ee20K3189Au2wfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cd1a24-67b1-4b4e-931e-4994fa74dfdd/1/Y9W3dTdUluY9ee20K3189Au2wfg.mft
Manifest number:          07F7
Signing time:             Thu 30 Mar 2023 10:10:03 +0000
Manifest this update:     Thu 30 Mar 2023 10:10:03 +0000
Manifest next update:     Fri 31 Mar 2023 10:10:03 +0000
Files and hashes:         1: Odiau0YuFlVlYX5WJ8Tcr9l4M7A.roa (hash: Bzm/edH7NYZNhmhH6Hir7fUAwADdMkKnvmPYXwJY0h4=)
                          2: Y9W3dTdUluY9ee20K3189Au2wfg.crl (hash: KH/A25cm403aSUHUYFNrGhgeY2LMFLCNiMsWvfaJf70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:31:fe:ee:07:ac:22:02:ce:1f:3f:c7:8f:20:9f:41:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d5b775375496e63d79edb42b7d7cf40bb6c1f8
        Validity
            Not Before: Mar 30 10:10:03 2023 GMT
            Not After : Mar 31 10:10:03 2023 GMT
        Subject: CN=2ea81302321ac87e874039c19171999b9243fd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:44:d4:f8:11:d7:3f:4e:dc:9a:6e:64:72:
                    91:90:69:e7:3c:c4:b6:d2:f1:0e:07:ae:e1:17:f8:
                    11:aa:a3:95:cf:ab:7c:a8:27:1c:bc:11:66:bc:3e:
                    76:cf:51:9f:05:59:0b:b9:32:e8:e2:48:a9:69:68:
                    73:bf:69:17:6e:04:ff:bf:07:be:11:3b:e3:48:9a:
                    c1:81:a6:1a:b4:f6:48:0b:64:c0:d4:60:95:ae:d5:
                    b8:c4:4f:b6:ec:26:8d:22:fd:2f:af:93:40:12:a5:
                    c5:db:32:72:f2:4e:a9:d4:72:9a:6f:f7:14:41:f5:
                    7c:95:34:2b:61:ae:d6:f4:dc:1f:c8:1d:8f:ab:26:
                    0d:31:83:f4:e7:69:32:30:3c:96:b8:de:0b:0d:9d:
                    3f:28:03:9e:8b:a5:a9:7c:c9:b5:95:51:41:e5:22:
                    3c:2f:16:8e:05:9c:06:ef:c2:36:dd:b5:6b:80:53:
                    33:4b:e0:e0:5a:d7:a9:3b:fd:bd:0a:2f:9a:69:c1:
                    49:c9:80:eb:f2:6e:a8:d2:8e:0f:1c:83:72:b9:eb:
                    62:93:57:4e:45:65:5f:43:e4:d5:2c:08:6c:0a:48:
                    ce:6b:bf:fe:a9:88:ec:1d:6f:4c:8c:b8:34:1d:81:
                    cf:ab:58:8a:d4:4b:02:aa:7c:ec:be:8e:52:d9:a9:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A8:13:02:32:1A:C8:7E:87:40:39:C1:91:71:99:9B:92:43:FD:6B
            X509v3 Authority Key Identifier:
                keyid:63:D5:B7:75:37:54:96:E6:3D:79:ED:B4:2B:7D:7C:F4:0B:B6:C1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W3dTdUluY9ee20K3189Au2wfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cd1a24-67b1-4b4e-931e-4994fa74dfdd/1/Y9W3dTdUluY9ee20K3189Au2wfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cd1a24-67b1-4b4e-931e-4994fa74dfdd/1/Y9W3dTdUluY9ee20K3189Au2wfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:25:8f:19:c3:52:8e:34:ba:2e:c6:c1:d0:e1:41:6f:dc:
         40:a8:c5:84:aa:97:d7:36:25:27:4e:fa:42:ae:34:74:b5:2d:
         9d:f3:be:8d:4c:2d:70:4b:f8:0c:d5:6c:a2:9e:63:6f:fb:71:
         b8:df:51:56:04:1b:04:bb:03:21:48:56:3e:ef:49:bd:18:0d:
         a4:fc:79:fe:74:52:4d:87:00:c6:cf:e6:36:16:fc:02:53:1d:
         71:ee:f8:ca:32:60:8c:c9:14:1f:d0:15:3f:9f:10:c5:26:cc:
         89:a5:c9:a0:bd:87:b8:ff:1c:68:ac:09:e1:ae:3f:4b:77:fb:
         b9:e3:b3:8c:c6:b4:e0:a8:a5:9c:2b:d5:aa:d3:56:55:99:68:
         4f:cf:a2:b8:3a:8c:d9:99:99:1f:6c:b9:87:a6:f7:70:61:64:
         94:73:1b:08:fa:09:e9:a2:71:8f:7f:43:4c:1c:14:44:bf:d7:
         dd:d8:01:db:bd:6f:fe:fb:47:ed:34:29:d8:70:18:67:ec:b2:
         3a:ac:b8:24:bc:47:44:95:01:a8:3b:e2:25:5a:f3:ba:2c:2d:
         cf:f3:c5:4e:b9:fa:94:e6:05:e5:fb:26:e4:2b:a4:34:f8:58:
         52:47:1d:44:e6:3d:ba:79:37:e5:7d:4a:99:b1:ed:e1:ef:29:
         e2:fe:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----