Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/N-H6QBP6uF0yN7HDX6oOTvC5uBc.mft
File:                     N-H6QBP6uF0yN7HDX6oOTvC5uBc.mft (raw, json)
Hash identifier:          fOCxFJoVo/FEqWZxkb8E8etlF57KZYOftfehJXc5fmw=
Subject key identifier:   64:C3:87:33:98:28:E2:F7:F2:6E:F6:9E:2D:35:BF:92:97:AD:9A:94
Authority key identifier: 37:E1:FA:40:13:FA:B8:5D:32:37:B1:C3:5F:AA:0E:4E:F0:B9:B8:17
Certificate issuer:       /CN=37e1fa4013fab85d3237b1c35faa0e4ef0b9b817
Certificate serial:       018682D4B83EFC5C745A856A56B11E4AE11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-H6QBP6uF0yN7HDX6oOTvC5uBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/N-H6QBP6uF0yN7HDX6oOTvC5uBc.mft
Manifest number:          0B36
Signing time:             Fri 24 Feb 2023 09:50:24 +0000
Manifest this update:     Fri 24 Feb 2023 09:50:24 +0000
Manifest next update:     Sat 25 Feb 2023 09:50:24 +0000
Files and hashes:         1: N-H6QBP6uF0yN7HDX6oOTvC5uBc.crl (hash: RWuzNt8xp8ggdQyinOCon4DzCq+4BT777AB5jhw+tXs=)
                          2: iB9QwfNMrV8s1mJNQiD8nAv2S0Q.roa (hash: +t4Q3Dp5DahLkn4hj7BFB6r7NvpdDAIGnJ3kTkp3PJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:82:d4:b8:3e:fc:5c:74:5a:85:6a:56:b1:1e:4a:e1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e1fa4013fab85d3237b1c35faa0e4ef0b9b817
        Validity
            Not Before: Feb 24 09:50:24 2023 GMT
            Not After : Feb 25 09:50:24 2023 GMT
        Subject: CN=64c387339828e2f7f26ef69e2d35bf9297ad9a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:cc:83:40:fa:df:87:49:9b:de:78:25:21:
                    9a:6a:c3:ea:23:1c:3f:aa:82:35:1f:46:1a:b5:3d:
                    12:d4:bd:c0:ac:49:41:57:1c:f4:bd:04:af:e9:c4:
                    a8:50:28:ab:fb:35:cd:eb:61:f1:4e:3c:9e:5a:69:
                    7b:14:ce:48:60:13:b1:bc:53:d4:e3:9e:26:67:f4:
                    e5:87:67:74:04:a7:d2:33:47:10:ec:3c:2f:89:1e:
                    b8:96:e9:81:22:f2:5d:c5:c1:60:f9:5d:47:ce:27:
                    93:21:2d:1b:7b:3c:0c:21:83:f8:10:11:6f:97:3e:
                    7b:07:81:49:0f:ed:e3:59:eb:8f:99:18:a4:c2:e7:
                    21:4b:63:eb:f7:5d:60:a1:af:77:7e:00:db:3d:e2:
                    27:f3:a8:72:5c:12:de:74:4d:ba:a5:f4:9e:8d:95:
                    0c:14:b6:53:12:11:fb:fe:1a:a7:34:1d:20:cb:85:
                    37:b7:9b:83:35:01:d2:ba:fd:7c:07:65:f4:5e:b6:
                    fb:79:98:57:ce:1a:e1:94:fe:83:36:67:6d:c3:81:
                    83:33:9b:f0:ab:00:5e:cb:ab:66:de:38:a9:99:a7:
                    d6:94:0d:68:48:d9:a4:e6:6e:9b:70:9a:a2:3a:42:
                    29:96:28:cd:4b:a9:09:47:9e:5a:1e:ca:6a:62:e6:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C3:87:33:98:28:E2:F7:F2:6E:F6:9E:2D:35:BF:92:97:AD:9A:94
            X509v3 Authority Key Identifier:
                keyid:37:E1:FA:40:13:FA:B8:5D:32:37:B1:C3:5F:AA:0E:4E:F0:B9:B8:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-H6QBP6uF0yN7HDX6oOTvC5uBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/N-H6QBP6uF0yN7HDX6oOTvC5uBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/N-H6QBP6uF0yN7HDX6oOTvC5uBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:8a:47:8f:e7:22:74:a8:60:88:a1:13:d1:f0:c3:57:79:
         57:5e:ce:30:5a:6d:a0:f0:53:7f:fe:2e:00:54:58:5c:90:88:
         28:fd:2d:b3:be:60:a4:e2:28:a2:bb:0f:b6:aa:a4:6e:5d:2c:
         60:4b:3e:40:c5:21:b1:0b:81:f8:04:7b:3d:7a:32:aa:b8:58:
         6c:da:47:3d:0e:91:a3:2a:a9:32:06:97:48:7a:62:8e:f8:ff:
         14:ad:1f:54:96:b6:5d:3c:bb:8e:15:dd:3f:4d:15:bd:d1:7e:
         5f:7c:39:8b:bb:9f:34:9e:77:81:18:3f:7c:7e:8a:7f:ab:83:
         98:de:54:5c:33:d4:87:c5:27:19:d8:4c:96:6a:6b:a7:9b:f1:
         e8:35:ef:50:c5:72:9c:83:30:fc:7a:81:27:be:39:39:97:c1:
         1a:3d:7d:9e:60:1a:c1:c1:9a:89:68:10:97:6b:ad:59:7e:07:
         20:4f:6a:6a:39:80:f2:6d:5a:04:51:70:b3:a9:c8:ae:60:b7:
         26:d3:23:b2:15:5f:6a:82:b4:ec:70:a0:ca:b3:c5:0b:3a:22:
         74:bd:ce:51:74:56:46:af:c6:d1:70:55:d7:72:4d:de:8c:f7:
         a8:1a:41:19:e6:30:af:a9:5f:77:02:36:24:65:71:fc:54:b7:
         64:27:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----