Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.mft
File:                     CSm6IDrGP6KXHkEHD3hCw3YVKcQ.mft (raw, json)
Hash identifier:          5eOTG2ZsZ709hfTSruKlg5YGz2uv4f/XP6wmD5dLk/4=
Subject key identifier:   32:E8:06:9F:66:AF:DA:F3:05:09:03:5B:A3:DE:E6:4A:BF:C3:C9:77
Authority key identifier: 09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
Certificate issuer:       /CN=0929ba203ac63fa2971e41070f7842c3761529c4
Certificate serial:       018537C9029032F21899599D63F285EFB13C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.mft
Manifest number:          0A0E
Signing time:             Thu 22 Dec 2022 03:03:18 +0000
Manifest this update:     Thu 22 Dec 2022 03:03:18 +0000
Manifest next update:     Fri 23 Dec 2022 03:03:18 +0000
Files and hashes:         1: 6cliHXMXKPB0lLRhar1JrSFdgkM.roa (hash: VcCtDuY6IvTTLUDIWbDYxGo1+38/B1+Quoc11NqVohE=)
                          2: 6iiYrL02kaOw9xJ8FpmPLo8v6XU.roa (hash: 3j6ZnlxMSc4trBd0AbVQMEVb+eHj7bcOUORqPGVVKRE=)
                          3: CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl (hash: DcUfnYvzozRvcRb1Ud3SEpXQVIN6R8y0kUWV12Zxg+c=)
                          4: bI1mwl0xHSWykF8zLmufXAn6Xjw.roa (hash: A+D4s1sXlOzHW69wqPWD1kAYUZ0+jY3My7FwImk8K/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:37:c9:02:90:32:f2:18:99:59:9d:63:f2:85:ef:b1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0929ba203ac63fa2971e41070f7842c3761529c4
        Validity
            Not Before: Dec 22 03:03:18 2022 GMT
            Not After : Dec 23 03:03:18 2022 GMT
        Subject: CN=32e8069f66afdaf30509035ba3dee64abfc3c977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:98:8a:21:a8:f7:7e:e5:41:2f:ae:47:65:
                    5e:0b:1c:a1:3a:ac:6c:f1:6d:b1:ac:94:c1:2c:9e:
                    e8:f9:a0:a9:dd:da:c1:b6:ce:a0:f2:a1:b9:48:15:
                    18:68:ee:3b:78:46:a5:62:8a:7f:c1:11:ac:86:81:
                    38:fd:e5:00:c8:d3:32:43:04:f7:92:e7:07:8c:27:
                    84:bc:9b:cd:97:1d:7d:4f:79:f8:72:71:08:0d:10:
                    a7:82:bc:9b:28:9a:69:47:c8:4e:3d:78:06:95:79:
                    e5:77:18:2a:8f:c8:ba:89:ff:97:0b:56:59:db:d2:
                    7f:23:c3:75:83:a6:e6:3a:40:e8:dd:10:34:a7:4c:
                    02:0b:02:31:cd:e6:25:e6:d4:d5:d4:fa:ed:1a:15:
                    cb:32:b1:c2:d2:e9:b1:26:2e:43:c2:2b:b5:2a:df:
                    68:ae:51:4a:97:5f:4f:01:79:d5:44:1d:d5:e7:a4:
                    85:3d:0a:17:ea:24:0e:0e:78:0a:b0:7b:c3:40:a7:
                    98:41:8a:21:54:a8:0c:83:02:ae:4e:c9:a3:20:09:
                    ec:52:8a:42:48:80:d3:79:71:a9:cc:03:78:3e:28:
                    6b:e2:5d:a7:61:6f:14:f2:e9:b7:5d:1e:b2:8f:a9:
                    78:e9:34:88:f4:10:c2:79:11:74:e9:11:aa:cc:f0:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E8:06:9F:66:AF:DA:F3:05:09:03:5B:A3:DE:E6:4A:BF:C3:C9:77
            X509v3 Authority Key Identifier:
                keyid:09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:13:a7:f0:08:bd:69:2d:58:3f:76:ed:2c:0b:eb:6a:71:
         74:db:f8:ca:aa:57:c9:52:21:d8:45:89:af:0d:4f:9f:d3:bd:
         31:9c:bf:65:fc:d9:f4:2a:b3:b4:6e:47:de:d1:96:57:62:bb:
         5f:d5:53:97:01:c6:30:1c:79:af:dd:1e:07:fd:14:8d:02:d3:
         3d:1c:62:1c:a9:94:b0:81:bc:f0:74:63:1c:10:fd:e7:0f:35:
         d3:b6:f7:c9:0c:05:fb:03:ea:08:0f:1b:0c:ed:52:a7:95:e7:
         2a:a3:34:7a:7c:81:7f:d0:b7:05:ff:e8:40:94:77:d0:8d:59:
         6a:32:60:93:a4:7c:8e:3f:36:10:5a:a6:b3:6f:81:2e:6a:3e:
         28:4d:4c:97:92:8e:c4:dd:a8:b3:e5:7a:f2:76:07:14:b2:a3:
         c3:43:8c:96:a8:40:68:e0:ae:c5:fc:6f:5b:01:05:9a:3d:0b:
         b4:1d:72:49:ee:2c:39:a2:ef:51:96:45:13:de:32:97:a2:57:
         7d:7e:5e:39:4b:6a:ca:8c:e5:8e:c8:a1:f0:5c:8a:57:a8:76:
         6c:3f:47:e4:aa:75:5a:72:22:06:33:8f:d5:be:35:05:80:e7:
         eb:ae:75:b9:40:19:6c:6a:4e:70:05:49:91:bd:ce:ac:26:3e:
         94:d8:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----