Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9c504b-dab7-4a4e-9e46-2ef414917c88/1/Ytz7hEof0JOm8R74YtORqt11aVI.mft
File:                     Ytz7hEof0JOm8R74YtORqt11aVI.mft (raw, json)
Hash identifier:          X/csm3/AdupMKPDboD7F4JFffC9V0IffcWIZ+JB2D3g=
Subject key identifier:   CF:C7:6A:02:C3:9F:91:7C:A4:94:9B:3E:C6:AF:38:02:4C:C8:2E:4F
Authority key identifier: 62:DC:FB:84:4A:1F:D0:93:A6:F1:1E:F8:62:D3:91:AA:DD:75:69:52
Certificate issuer:       /CN=62dcfb844a1fd093a6f11ef862d391aadd756952
Certificate serial:       0184F13E2A6D1CFC3CEA85CC70D1C0002B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytz7hEof0JOm8R74YtORqt11aVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9c504b-dab7-4a4e-9e46-2ef414917c88/1/Ytz7hEof0JOm8R74YtORqt11aVI.mft
Manifest number:          6B
Signing time:             Thu 08 Dec 2022 10:18:13 +0000
Manifest this update:     Thu 08 Dec 2022 10:18:13 +0000
Manifest next update:     Fri 09 Dec 2022 10:18:13 +0000
Files and hashes:         1: Iky5FF-Kh2XUYwyaLG30YtOTag8.roa (hash: //v/7ZRsT0Sizkgm1RMgIODna3xlWKJkAMzcq+RkkLc=)
                          2: Ytz7hEof0JOm8R74YtORqt11aVI.crl (hash: TD/laLB/E+bVDjbQyQLu5gL+T88Douxy6pfKRaV1x+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:3e:2a:6d:1c:fc:3c:ea:85:cc:70:d1:c0:00:2b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dcfb844a1fd093a6f11ef862d391aadd756952
        Validity
            Not Before: Dec  8 10:18:13 2022 GMT
            Not After : Dec  9 10:18:13 2022 GMT
        Subject: CN=cfc76a02c39f917ca4949b3ec6af38024cc82e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:2c:0c:60:cb:80:18:2e:8e:d5:86:fb:0a:
                    56:0b:05:47:40:2d:d1:13:57:1f:96:66:c1:1c:72:
                    2a:cd:88:fc:f8:64:12:1a:aa:f6:bb:ab:3a:b0:a6:
                    2a:8d:1d:dd:65:86:16:69:b1:5b:1d:c7:8c:5e:e3:
                    27:ff:ff:23:eb:07:b7:96:81:9c:7e:ec:f8:09:8f:
                    c3:fe:f5:80:26:94:e2:f4:a9:2c:d9:30:bb:54:d5:
                    39:18:83:e4:27:74:b9:3b:11:9e:df:2f:02:80:d3:
                    42:ab:6a:9d:5f:7c:57:c5:01:2a:87:25:1f:56:cf:
                    8a:2e:39:d4:a7:7a:90:82:4b:ce:0b:ed:3e:b0:16:
                    27:6b:d4:00:14:27:2e:ef:17:17:bc:b4:26:62:ac:
                    c4:5a:25:55:53:a6:1d:57:bc:6a:fe:db:70:ca:6e:
                    2d:fa:cd:c6:3b:67:e9:48:d3:00:b0:2e:be:44:2b:
                    96:73:c0:62:3f:60:ff:65:19:ad:71:47:bf:9c:d0:
                    3a:08:5c:09:37:e3:39:2f:a8:4d:8d:b0:a1:13:42:
                    d3:90:d7:1b:19:2a:dd:c1:30:61:fe:01:f9:fb:ce:
                    07:c8:6a:ce:63:4a:14:7a:6d:aa:8d:83:21:00:71:
                    f3:46:b9:1c:31:c0:1b:32:80:75:c3:b2:f0:67:db:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C7:6A:02:C3:9F:91:7C:A4:94:9B:3E:C6:AF:38:02:4C:C8:2E:4F
            X509v3 Authority Key Identifier:
                keyid:62:DC:FB:84:4A:1F:D0:93:A6:F1:1E:F8:62:D3:91:AA:DD:75:69:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytz7hEof0JOm8R74YtORqt11aVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9c504b-dab7-4a4e-9e46-2ef414917c88/1/Ytz7hEof0JOm8R74YtORqt11aVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9c504b-dab7-4a4e-9e46-2ef414917c88/1/Ytz7hEof0JOm8R74YtORqt11aVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a2:4f:f4:d5:b0:49:1a:6b:2d:f8:62:9f:f0:e4:71:9d:92:
         7e:2e:e7:72:94:cd:84:7e:8e:6c:3e:bd:46:1e:31:43:e7:99:
         2c:5c:3f:f8:9d:a0:06:92:5d:25:db:2a:de:34:d1:a5:85:05:
         ec:8f:8b:b7:48:a1:89:2e:78:9d:f2:9a:58:e8:2f:d3:7f:86:
         9b:b2:36:ee:ac:0b:24:8a:88:48:19:d5:0f:16:60:57:42:8f:
         d6:d3:da:24:5e:b4:1e:02:94:0d:b6:7e:32:b3:5e:a5:58:9d:
         e2:ef:75:19:32:6c:dc:a7:8d:9e:c7:05:d3:14:07:2f:14:66:
         4e:c1:5a:34:59:c5:d4:5d:18:ad:19:09:d4:73:85:96:7a:42:
         2e:82:3e:ce:f5:af:65:38:09:01:b3:2d:29:07:33:93:7e:e0:
         72:3e:16:5b:fe:d9:fc:bd:f5:cf:94:8a:45:78:00:87:dc:38:
         04:e0:70:a6:b9:93:5d:9a:41:a5:9e:51:ec:66:c8:4e:75:40:
         f7:0e:85:42:60:c4:55:7f:8f:29:7c:76:9f:7c:9d:59:d2:c1:
         ca:67:f9:f9:be:4b:28:af:ba:e7:a0:db:87:5b:c8:27:ac:68:
         c2:9c:51:a7:8b:66:d7:12:72:b6:c0:11:8c:d5:10:18:4f:c6:
         6c:41:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----