Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/YO6jV1CJIrSb24PeaCcgKVXX240.mft
File:                     YO6jV1CJIrSb24PeaCcgKVXX240.mft (raw, json)
Hash identifier:          43o7iBT9+Pg426kCbOyfNyl+3GtTzAOmVwJtNhyh7p0=
Subject key identifier:   A7:EF:07:9A:B2:E8:9B:4A:FC:EF:EA:18:D7:65:F5:19:8E:49:2C:A4
Authority key identifier: 60:EE:A3:57:50:89:22:B4:9B:DB:83:DE:68:27:20:29:55:D7:DB:8D
Certificate issuer:       /CN=60eea357508922b49bdb83de6827202955d7db8d
Certificate serial:       01841D8F0428D4DB7BF99709F705969E7DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YO6jV1CJIrSb24PeaCcgKVXX240.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/YO6jV1CJIrSb24PeaCcgKVXX240.mft
Manifest number:          0995
Signing time:             Fri 28 Oct 2022 07:47:02 +0000
Manifest this update:     Fri 28 Oct 2022 07:47:02 +0000
Manifest next update:     Sat 29 Oct 2022 07:47:02 +0000
Files and hashes:         1: 8IHi3qAF6M_YZUH9bKZgMRhdjDA.roa (hash: xwl/E3UoYxi5Jfm9wJtBC0LoQQFx24KXiKM8/QFVBCs=)
                          2: BBuhGkRY-T6s-xpqGrQE8JC81kE.roa (hash: ViTAnc9Ad51sTo3NioAl4o8zik24DpJF7KYDkhMUoAA=)
                          3: YO6jV1CJIrSb24PeaCcgKVXX240.crl (hash: mSlr2v9ikaohQk9dWb6biMDNaoASbwreGmWkOCEft8k=)
                          4: Zpt6dc_bEnKBAoC4BLcsy9PBtk0.roa (hash: Ocf9aXp3sy3fqpKIB5rBr6KF1H91xq6am5f4iHlQ0BU=)
                          5: djM6BPvl6xZ7aQ0ZihfJx5ZLmnw.roa (hash: W7n+u008M5O3A333+yU+hnldw6uxFeHPc5DVQ4bRLLI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1d:8f:04:28:d4:db:7b:f9:97:09:f7:05:96:9e:7d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60eea357508922b49bdb83de6827202955d7db8d
        Validity
            Not Before: Oct 28 07:47:02 2022 GMT
            Not After : Oct 29 07:47:02 2022 GMT
        Subject: CN=a7ef079ab2e89b4afcefea18d765f5198e492ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ad:c4:0f:42:3d:1f:7f:9a:26:c5:0b:f4:bc:
                    30:34:da:c3:4f:50:63:c9:17:05:d6:7c:3f:c8:2f:
                    64:3e:0b:6c:bb:c9:e4:84:79:8f:d1:bc:f7:80:78:
                    f7:e0:8d:e0:0b:59:4a:83:c8:04:8f:91:28:a5:57:
                    57:fc:e1:fd:7a:4f:74:b8:69:f0:fe:94:41:ca:d0:
                    4b:8b:03:76:8b:ec:c9:07:42:8c:ea:bf:08:f6:a8:
                    86:41:f2:bc:80:ad:13:e8:82:2b:20:7e:99:f0:af:
                    44:e3:34:d0:50:6a:61:3d:42:a9:47:30:34:e4:fe:
                    3d:3f:0b:31:e3:b8:ad:e5:60:df:3d:2f:5a:d1:27:
                    8e:9a:f6:df:e6:d3:a9:a5:02:77:18:40:b2:4c:ff:
                    41:09:10:c7:0e:28:7d:e6:0b:c9:2c:2d:77:ca:38:
                    e9:c7:87:45:a6:d6:7a:ab:aa:57:bc:8f:71:56:7a:
                    d2:45:64:9d:a1:8b:14:2a:0f:bd:e5:0f:dd:82:61:
                    16:d1:41:11:23:fc:1d:22:1c:31:2e:1d:98:1e:16:
                    b6:f0:80:82:a9:b1:07:a3:43:75:23:a9:d5:70:4d:
                    03:d5:7a:57:4c:15:2c:38:9e:51:8f:59:ef:4f:54:
                    26:94:29:a3:06:26:d4:ab:30:2d:fe:f3:7f:92:c9:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EF:07:9A:B2:E8:9B:4A:FC:EF:EA:18:D7:65:F5:19:8E:49:2C:A4
            X509v3 Authority Key Identifier:
                keyid:60:EE:A3:57:50:89:22:B4:9B:DB:83:DE:68:27:20:29:55:D7:DB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO6jV1CJIrSb24PeaCcgKVXX240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/YO6jV1CJIrSb24PeaCcgKVXX240.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/YO6jV1CJIrSb24PeaCcgKVXX240.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:78:59:50:08:e9:6e:68:72:32:56:07:8c:69:6c:04:25:6a:
         df:d2:a8:7c:40:21:6f:7c:b8:c8:0b:72:a8:58:80:b1:00:f8:
         74:70:b6:c0:ba:0d:95:f7:dc:36:f2:6e:0d:05:47:b2:59:11:
         e5:8f:02:08:6b:48:44:41:7b:e3:38:6b:6e:f0:6b:5a:ce:4a:
         1b:db:9e:71:c0:5f:d7:e2:d8:58:53:08:d5:b6:37:41:97:42:
         f8:86:d8:41:1a:c2:b6:a8:d0:10:bd:40:65:d9:60:75:fa:da:
         1f:9d:4d:fd:85:f9:99:9a:b2:2c:95:bf:31:13:1c:c5:c0:60:
         ae:74:7e:da:ff:19:1e:57:7d:38:c4:d9:5a:e0:9a:c1:63:f0:
         76:cf:70:d3:89:b0:b1:ab:f0:fc:94:f1:ac:47:70:4a:98:dd:
         42:1f:0e:69:83:92:e5:97:e1:08:bf:c4:e2:ae:7c:a6:d3:46:
         82:2a:47:7e:82:cb:32:dc:19:c9:64:67:2e:c4:60:44:98:a6:
         61:07:bc:25:c2:b6:8e:49:59:e2:06:75:6d:a7:e6:98:92:2c:
         23:92:36:01:b8:fc:3d:20:4b:65:e2:f2:b0:8d:a0:7d:06:f1:
         70:ed:51:09:97:ff:69:64:25:ef:48:76:ff:9c:5c:bc:e1:c1:
         d8:09:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----