Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/848966-ea61-4644-bbc2-9b2bc9907d46/1/AYtF7Uwh_Y3OlPE01xOuo8YnXGk.mft
File:                     AYtF7Uwh_Y3OlPE01xOuo8YnXGk.mft (raw, json)
Hash identifier:          X+G1k5oNaqAGMQc+CVX0a+sKVHlK6DBXMlKqZnG4IS4=
Subject key identifier:   D8:0A:8F:45:CB:1A:91:37:98:F6:2A:27:30:D6:7A:9C:36:9C:6D:BC
Authority key identifier: 01:8B:45:ED:4C:21:FD:8D:CE:94:F1:34:D7:13:AE:A3:C6:27:5C:69
Certificate issuer:       /CN=018b45ed4c21fd8dce94f134d713aea3c6275c69
Certificate serial:       018B7E8675EEC9361032C16BF0D30107FE43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYtF7Uwh_Y3OlPE01xOuo8YnXGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/848966-ea61-4644-bbc2-9b2bc9907d46/1/AYtF7Uwh_Y3OlPE01xOuo8YnXGk.mft
Manifest number:          06AB
Signing time:             Mon 30 Oct 2023 03:00:22 +0000
Manifest this update:     Mon 30 Oct 2023 03:00:22 +0000
Manifest next update:     Tue 31 Oct 2023 03:00:22 +0000
Files and hashes:         1: AV28v3kjwjBzCBKDAtI5r7U9SwY.roa (hash: 8+sjT9G07Bf3extcGkfsHvWwdHrjyUKvRuZ/Ejjokvs=)
                          2: AYtF7Uwh_Y3OlPE01xOuo8YnXGk.crl (hash: UvnWgsAVkrvato+KV2OXibScYnOu02k6SP3ldr1DDuk=)
                          3: XREtnVcoYMaqlMOI9PLUyJG1tEU.roa (hash: QP2Vbo5iFmogBbVRl4zefvjShTEqN2fqV0DzHMqPL0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7e:86:75:ee:c9:36:10:32:c1:6b:f0:d3:01:07:fe:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018b45ed4c21fd8dce94f134d713aea3c6275c69
        Validity
            Not Before: Oct 30 03:00:22 2023 GMT
            Not After : Oct 31 03:00:22 2023 GMT
        Subject: CN=d80a8f45cb1a913798f62a2730d67a9c369c6dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:1d:13:1e:61:23:6d:a4:c0:96:e9:ab:31:
                    d6:f4:6f:6d:7c:bb:92:81:83:d7:e3:41:ba:f0:b6:
                    85:e8:b4:bf:01:0a:53:d2:4a:95:a5:d3:e7:f8:84:
                    13:2f:44:52:6d:f6:2c:fa:60:d6:4b:4c:9c:0b:25:
                    83:15:eb:b8:14:00:dd:97:d2:f7:26:95:2e:5d:c6:
                    50:5b:dc:f3:f0:52:7a:49:9e:15:82:61:da:bc:21:
                    0e:73:d7:1d:55:2f:0f:73:7e:61:64:66:77:f8:35:
                    99:33:53:0d:68:b9:a6:62:ad:86:e3:02:e0:ff:e1:
                    40:7e:32:55:04:b2:ac:cd:e7:0b:90:ca:00:5a:79:
                    a0:0b:55:b9:14:0d:a5:73:28:7f:c2:de:5b:20:26:
                    c7:4a:28:3c:b5:26:03:03:9f:f7:d8:a7:61:a3:37:
                    d4:c1:22:4d:15:62:2e:f5:47:a6:39:80:f1:e4:35:
                    5b:9b:b8:0b:13:f6:71:71:4f:59:7a:a1:2f:73:69:
                    de:79:08:f7:fe:0c:c3:06:f5:67:4f:6d:81:86:48:
                    8d:59:61:0c:e4:5f:09:95:3a:2a:8d:e7:a3:d0:c6:
                    72:6c:a6:89:03:27:b0:13:80:e6:17:d2:66:b6:36:
                    8f:77:c6:d0:08:30:8a:4d:ea:1e:10:79:91:3f:f3:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:8F:45:CB:1A:91:37:98:F6:2A:27:30:D6:7A:9C:36:9C:6D:BC
            X509v3 Authority Key Identifier:
                keyid:01:8B:45:ED:4C:21:FD:8D:CE:94:F1:34:D7:13:AE:A3:C6:27:5C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYtF7Uwh_Y3OlPE01xOuo8YnXGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/848966-ea61-4644-bbc2-9b2bc9907d46/1/AYtF7Uwh_Y3OlPE01xOuo8YnXGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/848966-ea61-4644-bbc2-9b2bc9907d46/1/AYtF7Uwh_Y3OlPE01xOuo8YnXGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:65:8c:dd:43:cc:6c:3a:91:7a:51:7a:88:3e:1b:fe:8b:
         79:35:9b:49:1b:07:ee:bf:32:da:39:3f:68:85:55:a1:6c:a9:
         81:87:9c:6b:68:91:b2:d5:ac:ef:15:29:9e:2c:76:cc:0c:63:
         4b:92:2b:40:89:bb:ec:6c:c7:7e:59:02:da:1f:d2:75:bd:48:
         ea:76:36:ae:ad:3f:39:36:40:5b:44:3e:36:f9:30:65:31:f1:
         ec:49:c5:be:a3:e3:70:9e:21:70:49:49:a9:f0:65:36:e6:f9:
         a2:87:01:c4:39:e7:eb:01:87:36:a5:76:ac:cf:e4:80:77:33:
         2d:3e:12:63:91:6d:b6:f1:02:89:14:2b:7a:6b:7f:29:91:48:
         9d:df:d8:0d:7c:1f:b7:c7:54:6d:3e:20:a7:b0:39:9c:d0:38:
         03:fc:9f:a4:7a:a0:d3:69:6d:c9:aa:16:4a:28:83:2b:23:52:
         53:63:e0:51:ee:2b:26:e2:05:f7:07:67:5a:0a:4d:31:da:61:
         fc:ba:d9:9e:64:4f:d0:b0:c9:68:07:d8:49:95:61:e0:e7:31:
         53:a0:fd:cc:10:cc:b2:86:e7:40:76:72:7b:45:af:34:19:f8:
         9e:91:2b:cc:bb:31:97:fe:2a:da:d5:e8:6a:95:b5:ec:05:bf:
         7c:98:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----