Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.mft
File:                     weiWo3qDmfrr9AA1vw9KlZz6W_I.mft (raw, json)
Hash identifier:          03KQV/V8C0a3H1XZqzXU3VogTlr73WXjGJssRQyKcOE=
Subject key identifier:   20:60:AE:E1:F6:26:B4:73:73:7F:38:AE:0B:ED:1F:1E:90:F9:12:AD
Authority key identifier: C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2
Certificate issuer:       /CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
Certificate serial:       0187A1B09860837D09767D8F8504D9734BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.mft
Manifest number:          0D3D
Signing time:             Fri 21 Apr 2023 02:41:57 +0000
Manifest this update:     Fri 21 Apr 2023 02:41:57 +0000
Manifest next update:     Sat 22 Apr 2023 02:41:57 +0000
Files and hashes:         1: 0-Y2xJ5hD-19MyMmD340AOdo6iE.roa (hash: zRQ5qyP2BCKl4Mh7Nlese2zW80ySVY80hfw+Dl+QQbw=)
                          2: gx-EsjwwUcBmk_SS5l-cZxlpZKM.roa (hash: nNAWkikHCh4ZUwGjlNR7HWF9QGWyDCxli6RtRQs1mHA=)
                          3: weiWo3qDmfrr9AA1vw9KlZz6W_I.crl (hash: tlCYrHCcGFpH8dMZRTAONip2pq4LMn9lLJNOT+31Y+M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a1:b0:98:60:83:7d:09:76:7d:8f:85:04:d9:73:4b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
        Validity
            Not Before: Apr 21 02:41:57 2023 GMT
            Not After : Apr 22 02:41:57 2023 GMT
        Subject: CN=2060aee1f626b473737f38ae0bed1f1e90f912ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:53:25:65:c5:2c:a2:c3:60:f3:97:d4:bb:
                    dd:f4:9b:3c:1d:69:04:15:14:25:27:b4:c6:f6:17:
                    34:2b:ac:a3:8b:77:f2:c9:38:ea:8d:00:43:31:86:
                    64:c7:20:4b:70:65:ea:77:a9:c7:ca:f2:d9:97:fd:
                    69:71:84:44:d1:e4:f9:37:52:d9:1c:40:92:08:4d:
                    74:74:7f:1d:c1:6d:9f:f6:88:cc:63:5b:fa:d2:c0:
                    61:e7:39:96:61:2e:18:76:bf:ee:2b:b6:e5:20:08:
                    2b:8f:2a:10:e7:6e:ff:ce:97:49:7b:53:e3:6d:28:
                    6c:63:04:a8:99:15:84:f1:bc:56:f1:1b:e5:23:5d:
                    63:48:80:0f:37:5f:d4:28:25:94:9d:df:9b:10:70:
                    f8:09:7e:1d:a1:94:43:5c:15:ad:f7:47:2c:e2:06:
                    e9:ac:6f:e9:52:62:f9:e7:4c:56:12:c1:80:9a:da:
                    6b:ea:c2:81:c3:97:5a:3b:b1:36:dc:1a:8a:42:26:
                    da:b9:20:8b:11:33:ef:67:24:e8:31:23:99:f6:0f:
                    24:dc:01:1d:17:d6:f8:38:d8:f0:a5:09:21:3a:a0:
                    37:c1:b0:c5:86:c4:9a:6d:c4:e8:cd:44:59:7a:6e:
                    04:1e:38:a7:21:28:c9:7c:8f:3c:26:43:35:8a:d9:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:60:AE:E1:F6:26:B4:73:73:7F:38:AE:0B:ED:1F:1E:90:F9:12:AD
            X509v3 Authority Key Identifier:
                keyid:C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:e7:47:96:a3:fb:dc:af:2a:1f:a5:d3:39:79:07:93:6d:
         a8:e7:d8:ba:23:05:ad:dc:53:ec:49:ee:0c:34:2e:43:28:3c:
         86:02:2a:e8:37:22:7c:ea:96:66:40:b0:55:19:46:4e:b7:4c:
         e3:23:ac:1e:a2:43:86:0d:28:02:fa:ed:7b:10:11:59:b0:72:
         bc:6f:38:b3:ee:35:03:e9:3a:2f:2b:51:a3:06:64:04:e3:3f:
         c1:e1:aa:b9:f8:ee:73:32:fd:3a:ff:4a:dd:50:c4:43:23:36:
         53:06:45:39:17:ed:30:e0:9e:b8:f5:c6:57:e7:48:58:9d:1a:
         0b:1f:4e:5b:4a:c1:dd:e2:28:9e:ce:58:1c:b7:08:3d:c1:c1:
         9b:0c:86:bf:f0:b6:7e:0a:09:89:cd:33:78:fe:96:0e:ce:ec:
         84:35:a8:9b:58:08:b8:b0:5e:8e:ab:fa:bb:89:d2:65:34:d5:
         c0:c2:b0:f9:1f:ca:e2:bb:10:a8:b6:df:39:3e:a8:b9:4c:18:
         27:e5:7b:93:12:b2:d1:a0:96:c3:8b:29:ba:ad:5a:bf:13:2d:
         b3:28:a8:c3:a5:a1:fb:b8:ff:88:2c:39:38:85:22:e9:00:7e:
         02:68:26:08:c0:18:de:5c:f5:81:6d:ea:29:c5:9f:85:1f:3c:
         d3:5d:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----