Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.mft
File:                     AvgcN-ntJNCyDpTBhpDoiuSzEco.mft (raw, json)
Hash identifier:          6imTng6nB22r3B4TP4r6Aoe9LhACb3zOfbnrzyVz2NY=
Subject key identifier:   9B:94:5F:53:3B:2F:14:6A:4E:03:65:DD:A5:E8:44:38:36:C7:44:65
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Certificate issuer:       /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial:       0186C0559CFC5AFEB150C3821D34878E5F83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.mft
Manifest number:          0527
Signing time:             Wed 08 Mar 2023 08:28:01 +0000
Manifest this update:     Wed 08 Mar 2023 08:28:01 +0000
Manifest next update:     Thu 09 Mar 2023 08:28:01 +0000
Files and hashes:         1: AvgcN-ntJNCyDpTBhpDoiuSzEco.crl (hash: 23OzeBEq0tkl2jwoA7iGccPvnyYhvRmuSaadJjpoMOU=)
                          2: PUwPw3KSFyLWJo9myIwEPSrQKhU.roa (hash: FPQLMUuNob4U6IXg55ZIZ+BGxwV8Xx8teIuQaPIFvtU=)
                          3: vjdL_Br5Q1XcbzB11LZFu3Lw6p8.roa (hash: XkfWItMcZ5TVe7GXsG7KFlyvP/USQhyJ87BvYdyrL5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c0:55:9c:fc:5a:fe:b1:50:c3:82:1d:34:87:8e:5f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
        Validity
            Not Before: Mar  8 08:28:01 2023 GMT
            Not After : Mar  9 08:28:01 2023 GMT
        Subject: CN=9b945f533b2f146a4e0365dda5e8443836c74465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e1:18:01:58:c2:fe:66:7b:bd:83:52:f1:75:
                    95:ae:76:b2:6c:a0:77:64:73:2b:02:3a:f5:26:e7:
                    45:c9:46:7f:9d:2a:92:be:28:43:99:0c:82:e4:9c:
                    93:ef:99:56:3c:6e:49:04:e7:2a:12:dd:00:c5:f0:
                    cd:23:e5:2d:4e:63:a6:7e:86:3f:3b:6c:9d:9a:29:
                    ca:3a:98:5c:08:59:25:0a:82:8f:bd:50:de:89:d1:
                    f1:7d:ae:2a:e3:45:00:a1:80:ca:6b:e2:1f:ad:e4:
                    f7:5d:fe:09:64:f0:d1:90:a0:c4:ec:8c:04:9c:f1:
                    38:83:83:df:d2:83:d5:44:f1:58:e8:b4:56:d3:ee:
                    25:76:d0:c3:42:c5:fc:ee:fd:34:c2:25:e3:c7:b6:
                    d0:fa:17:21:a1:76:cc:8d:35:e8:e8:b4:67:25:24:
                    a8:24:08:1d:82:13:3d:58:b4:60:05:41:67:8a:72:
                    00:ab:a8:a8:bc:5c:46:7a:48:f6:32:08:ff:84:b4:
                    37:78:02:fd:c6:16:e8:a4:16:db:74:fc:c9:0e:5e:
                    f8:30:dc:b6:2f:5c:9a:29:c8:ee:5c:5e:44:8a:a3:
                    44:30:9a:81:bd:dd:33:68:f9:08:18:8c:e9:31:18:
                    fa:48:4d:3d:6a:be:ae:c2:48:e4:ea:57:4f:41:38:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:5F:53:3B:2F:14:6A:4E:03:65:DD:A5:E8:44:38:36:C7:44:65
            X509v3 Authority Key Identifier:
                keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:4b:b6:3f:62:ce:32:aa:87:8c:c1:1c:d7:ed:c3:7e:b0:
         99:5f:8b:c8:92:60:e9:1d:cb:96:38:2c:e3:54:37:a0:fe:16:
         b9:18:44:ae:06:73:0a:87:ad:f8:c1:ff:3a:a0:85:0f:b8:7b:
         36:d5:94:3a:02:11:39:c4:5a:7b:68:a4:02:8f:f6:f5:c1:cb:
         29:70:3d:df:29:5a:84:e9:2d:7f:b8:92:e0:40:29:20:e2:2d:
         71:4c:72:96:35:e3:9e:78:d9:d6:55:c8:6f:68:43:f9:a0:aa:
         82:82:4f:16:a5:c9:11:ac:f7:5c:ba:90:a8:d3:03:a4:77:05:
         11:81:39:1d:5f:fc:87:78:75:f4:b9:27:e7:09:10:80:7b:d0:
         40:36:49:f5:43:1e:96:d9:c6:7e:1f:79:bf:23:be:7e:0a:18:
         8a:b1:8a:4c:46:59:73:2f:1f:56:49:ba:4c:ac:f3:3c:2a:01:
         17:8c:fe:d9:34:01:9e:ee:32:0f:5e:9c:67:d1:73:5b:8f:d8:
         4c:9c:33:8c:62:4e:08:12:1a:81:5c:52:8e:1e:f7:49:26:29:
         ec:75:7a:7b:5d:11:e0:bb:4e:e6:c9:72:2b:66:cb:d3:08:45:
         e4:1d:93:bb:c7:1b:76:15:0e:8a:7b:34:87:37:23:9e:d2:ad:
         9a:ea:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----