Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.mft
File:                     43nYPSKgvuuGyH4Vpstsab1CkD8.mft (raw, json)
Hash identifier:          H+F+1U1t18xUYlxshhZKJoO/TtLPoXgA6iB4oyECrYk=
Subject key identifier:   1E:9C:BA:65:B4:A5:F1:FB:60:B6:7D:05:07:94:8D:D9:B6:F3:EE:BC
Authority key identifier: E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
Certificate issuer:       /CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Certificate serial:       01831586632096AE02BF2983CA7A183DCDE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.mft
Manifest number:          038F
Signing time:             Wed 07 Sep 2022 01:17:52 +0000
Manifest this update:     Wed 07 Sep 2022 01:17:52 +0000
Manifest next update:     Thu 08 Sep 2022 01:17:52 +0000
Files and hashes:         1: 1HkF_17cTGLKbPvzvIvLjNIkji0.roa (hash: UNe5O4azG+YaFR5xOtNwGCeAsLCTYAR471jmQejrUcA=)
                          2: 43nYPSKgvuuGyH4Vpstsab1CkD8.crl (hash: PulkGI4sxESiTJpPFaCtR4RNtfmhXm7dfn066h4njYU=)
                          3: W_Db2OqYMcm60GaGQqlvevqwzkE.roa (hash: RL13Hw8Nmvf7UyLXuTC3gva9SDQegQbpKGnkDAPpRz4=)
                          4: jXJgZFJgds_btHcX4JUAMFNHoqs.roa (hash: lZ05pIJqSasZv6yqUobVz4l6AQWlN3DzvuS3oCyErls=)
                          5: sLec9S99vv9HgfULzKWwc9avPQQ.roa (hash: 7wgix64imnNeMK8+UMSHeSFKVzu+LeJXClZ+fY1eF1M=)
                          6: x53_PTbc3PTHOKlvb0g_VQsLPb8.roa (hash: evFCLBtXfyz+qyO1Ag8r6TtUxqWvLlG/TprUHEoDchk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:15:86:63:20:96:ae:02:bf:29:83:ca:7a:18:3d:cd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
        Validity
            Not Before: Sep  7 01:17:52 2022 GMT
            Not After : Sep  8 01:17:52 2022 GMT
        Subject: CN=1e9cba65b4a5f1fb60b67d0507948dd9b6f3eebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:db:db:39:25:53:a4:47:b8:60:1b:a7:7e:
                    d9:d6:e7:d0:4d:13:d6:28:11:04:1e:77:33:56:81:
                    3c:4f:89:00:18:e1:9d:68:c3:0e:c2:04:b0:79:da:
                    2c:ef:64:ce:73:90:64:fb:f9:da:d6:d2:d0:36:14:
                    17:3a:0e:5b:83:e0:92:a8:59:4d:f0:a2:bb:12:11:
                    bc:a3:f9:61:fc:11:17:5c:3b:c9:d8:93:b8:ed:7d:
                    23:5d:24:8d:d3:a7:fa:07:f8:76:1c:c6:29:81:53:
                    72:d6:20:a9:6f:60:e1:6d:d5:9f:ea:e1:61:89:70:
                    37:ae:81:b5:9f:a6:4f:3b:22:2e:cf:98:b5:df:b9:
                    93:80:45:67:35:90:71:97:3d:46:83:60:da:a9:b8:
                    86:42:75:21:a7:75:c9:6a:ae:14:c6:2e:b8:76:7d:
                    15:cf:6d:fe:fe:37:04:51:a0:1f:5d:8c:86:f2:00:
                    b5:b2:61:c3:50:0b:f2:a2:f5:04:46:57:9a:d9:de:
                    db:4b:b9:1c:e2:f4:bb:d3:d1:c7:18:eb:0a:a3:ce:
                    a0:5b:c3:b5:38:5c:2e:88:fe:a1:98:17:ed:59:ba:
                    26:38:1d:a9:b4:a8:a7:72:1e:8a:3b:76:86:8f:a7:
                    14:68:c5:c8:0c:2d:98:ff:00:95:2c:5f:59:71:53:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:BA:65:B4:A5:F1:FB:60:B6:7D:05:07:94:8D:D9:B6:F3:EE:BC
            X509v3 Authority Key Identifier:
                keyid:E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:72:10:ea:30:e8:87:6d:3a:3d:9c:e1:a2:e6:78:44:b0:10:
         10:20:90:4c:9b:b7:d8:2a:ce:b7:c0:f6:67:73:52:e6:c0:80:
         54:2b:1e:b4:29:77:54:d5:a0:ed:5d:49:f2:98:b3:76:e9:eb:
         e6:91:68:91:c9:ad:fb:5f:ff:27:08:87:ac:ff:5b:ae:99:ff:
         cf:26:cd:b2:7a:a5:ae:d7:ab:d7:6d:a9:d1:dd:ba:85:67:d1:
         fc:d6:59:7c:1b:d1:25:21:ed:8c:25:08:f7:ee:f6:d8:17:fe:
         0e:ac:12:bc:35:88:46:4d:ad:a7:e8:e3:67:7e:1b:67:2f:38:
         58:f2:52:46:82:84:5b:10:2b:ab:67:9f:0c:2a:7e:d0:01:94:
         ab:92:7b:a4:10:13:02:92:f1:aa:0a:0d:0c:1c:8e:93:65:77:
         11:b9:87:78:9e:a6:e7:27:05:e7:69:ad:b1:00:b4:b4:ff:fa:
         28:dd:88:82:99:f7:12:8c:40:94:65:37:ce:30:cc:2a:fc:cb:
         84:e5:26:1d:8c:d1:8e:f1:44:7e:78:30:0a:7c:29:2f:d7:c9:
         f6:71:44:45:a1:a7:60:04:b9:79:e0:5b:fc:67:f8:df:78:39:
         68:8b:e0:83:2e:c1:83:57:f7:8e:ad:f9:c0:ef:6f:c5:4d:aa:
         ab:7f:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----