Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.mft
File:                     M1zRH9uvsDJTSuAiq7TI42mHimc.mft (raw, json)
Hash identifier:          KpYw60DzfH7tXbsBFArde4xH8kl0RyDPfICFIWQEUmQ=
Subject key identifier:   C5:5E:99:B5:B0:14:CF:D9:A1:B3:9E:3B:1D:9A:82:0F:A2:05:14:FD
Authority key identifier: 33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
Certificate issuer:       /CN=335cd11fdbafb032534ae022abb4c8e369878a67
Certificate serial:       018514058E17A189108A34B235573A4251A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.mft
Manifest number:          0694
Signing time:             Thu 15 Dec 2022 04:23:06 +0000
Manifest this update:     Thu 15 Dec 2022 04:23:06 +0000
Manifest next update:     Fri 16 Dec 2022 04:23:06 +0000
Files and hashes:         1: DgshKVuclPajtcWPMSGGy9cMhGA.roa (hash: A0HBCO19boyMMPxCHmv+qzReXXjA8Ul8e5MaQ49EpYM=)
                          2: M1zRH9uvsDJTSuAiq7TI42mHimc.crl (hash: xYPD75QVQ7HmgbeYlaFHNk0isxAiGTX1gJ6TNBATGcw=)
                          3: VAIiW6OdzzhtfJx5XIqjVOXiowc.roa (hash: +AvPe7uqqsCfojpY2nSXpm2LpDy6GwZgnMeXO7eNJ7A=)
                          4: v-eZN_J20HgfGiIadOG8D0dn2kg.roa (hash: sttGK+fvRbBSOIFT0RwGV6Bb8Rd5fEm3lEyFybFTgaQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:14:05:8e:17:a1:89:10:8a:34:b2:35:57:3a:42:51:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335cd11fdbafb032534ae022abb4c8e369878a67
        Validity
            Not Before: Dec 15 04:23:06 2022 GMT
            Not After : Dec 16 04:23:06 2022 GMT
        Subject: CN=c55e99b5b014cfd9a1b39e3b1d9a820fa20514fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:c8:1c:97:77:a3:73:ec:5c:ce:f6:d1:b4:
                    15:f2:3e:4a:89:f0:8e:d1:1e:dd:27:d4:80:8b:5c:
                    12:f9:69:52:ad:f2:e4:95:4e:25:f5:c5:79:3e:29:
                    b0:97:f5:c0:6a:31:9d:0a:04:14:2d:6b:22:c1:03:
                    05:2e:20:34:61:c4:4e:a6:5a:ec:0a:5e:d4:9c:70:
                    0f:07:97:7e:e1:fb:0b:4a:4d:a1:39:74:29:ea:91:
                    21:03:d6:42:7f:45:f8:3a:71:c5:66:ae:b1:17:57:
                    3b:93:d6:29:af:1d:37:4a:eb:62:44:7b:c7:79:c4:
                    8d:f4:3f:34:fa:8a:ba:92:18:51:87:d4:d2:f0:59:
                    2f:17:cd:17:6d:f7:f4:74:3d:ed:73:63:ba:84:f6:
                    ab:68:3a:bd:fb:63:11:b1:40:a0:31:71:20:77:31:
                    3c:a3:82:b1:c1:5c:44:f9:f1:bc:59:9c:14:9b:b2:
                    a3:84:9a:0b:8c:2d:f7:14:02:5b:29:ac:bf:22:7b:
                    19:72:43:bc:2c:42:30:f1:90:36:0d:01:89:28:b1:
                    4b:ff:00:65:36:90:3d:39:e4:86:c1:24:a7:3c:7e:
                    e3:c5:cb:86:58:dd:43:cd:47:36:58:70:f4:26:a4:
                    7f:d0:bd:f7:7d:5c:ce:32:00:22:43:83:2a:a5:04:
                    10:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5E:99:B5:B0:14:CF:D9:A1:B3:9E:3B:1D:9A:82:0F:A2:05:14:FD
            X509v3 Authority Key Identifier:
                keyid:33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:43:61:28:9d:42:49:c9:43:75:90:1f:dc:4c:c3:af:3c:36:
         2c:53:72:7e:14:22:b4:06:fa:3a:6a:b2:6d:67:47:db:01:d1:
         83:07:4e:32:42:8b:45:f5:07:00:1f:a8:7d:c0:85:b0:36:86:
         0d:e5:dd:e4:fe:16:d2:30:34:85:6d:16:2d:b1:72:73:de:ed:
         9f:ee:bc:2a:f2:6c:50:f2:7c:2c:93:df:07:ca:e7:52:02:ff:
         83:39:b2:84:53:66:3f:3a:4c:11:47:4a:fc:f3:6a:04:17:58:
         94:ab:dc:78:81:fe:d2:92:2c:21:59:10:63:39:c7:61:83:f5:
         f8:cc:79:c0:31:2c:f0:72:c8:cf:70:e4:b0:91:e9:88:8d:b9:
         78:a7:3d:aa:6d:32:80:f3:f8:d1:36:20:04:47:84:50:4b:31:
         b6:7d:af:54:0f:cb:f7:b3:f1:7d:56:86:2d:bc:9b:ab:f9:b4:
         3c:2f:24:62:91:93:92:f7:52:25:dc:7b:61:7d:1c:b4:f7:5c:
         88:f2:c0:5a:87:9f:f1:41:aa:fa:1f:93:65:86:a9:c3:b5:c3:
         e0:8d:5c:73:17:0a:2c:aa:74:23:97:72:19:7d:87:6a:dd:09:
         e3:2b:05:67:80:32:6d:71:27:ec:bd:d2:ed:30:f4:a6:a7:d9:
         22:4e:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----