Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/P9vJFg6S2WepG0LEGSyKgQ8kbVk.mft
File:                     P9vJFg6S2WepG0LEGSyKgQ8kbVk.mft (raw, json)
Hash identifier:          BXzfy2EguPt9y/+5vf+c2nykZs7Q8lWNkBQWjiwiwac=
Subject key identifier:   8F:E4:C3:CE:E4:B4:C3:06:5F:79:CC:9B:79:71:00:B6:AA:93:34:96
Authority key identifier: 3F:DB:C9:16:0E:92:D9:67:A9:1B:42:C4:19:2C:8A:81:0F:24:6D:59
Certificate issuer:       /CN=3fdbc9160e92d967a91b42c4192c8a810f246d59
Certificate serial:       0187265AA3218E8CAA5BF0615CD881F0A8BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9vJFg6S2WepG0LEGSyKgQ8kbVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/P9vJFg6S2WepG0LEGSyKgQ8kbVk.mft
Manifest number:          0B1D
Signing time:             Tue 28 Mar 2023 03:54:46 +0000
Manifest this update:     Tue 28 Mar 2023 03:54:46 +0000
Manifest next update:     Wed 29 Mar 2023 03:54:46 +0000
Files and hashes:         1: P9vJFg6S2WepG0LEGSyKgQ8kbVk.crl (hash: TxWCUxJmcQ2+wTUOsuTZ10ID/gRXbmp0uneYAWOrE2k=)
                          2: ZSK0VY9QWEMRQ6J5eNoiACVCoLM.roa (hash: R98zTr/Ww9YygIZgGC8mSu0yVRCUgqdi2HhFKl4a6ag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:26:5a:a3:21:8e:8c:aa:5b:f0:61:5c:d8:81:f0:a8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fdbc9160e92d967a91b42c4192c8a810f246d59
        Validity
            Not Before: Mar 28 03:54:46 2023 GMT
            Not After : Mar 29 03:54:46 2023 GMT
        Subject: CN=8fe4c3cee4b4c3065f79cc9b797100b6aa933496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:a9:ad:7a:01:6b:78:e5:fc:96:25:a9:1c:
                    ec:c5:31:df:f6:74:b2:e4:a3:2a:13:cf:60:29:52:
                    a7:47:5a:1b:ec:cb:e2:a8:eb:52:b2:32:90:77:50:
                    55:c3:70:cd:c4:f2:cd:66:e4:ab:7b:d3:69:14:ad:
                    c3:8a:b2:a9:db:85:f5:f1:d3:5a:2b:e4:e9:a0:6f:
                    a0:5c:ca:b3:ae:6a:dd:8c:6b:98:06:6c:be:8b:c0:
                    bd:02:3a:52:8f:f1:73:24:2b:13:41:3f:61:a7:08:
                    80:df:1f:b9:49:0f:d1:ff:ee:7d:35:b4:65:d4:22:
                    fd:12:54:ba:92:1b:a9:4c:55:59:e2:6c:14:16:fc:
                    1b:6f:68:d1:46:ed:82:04:85:c5:27:1d:8c:02:37:
                    98:1e:ae:86:9f:5c:14:6d:4c:1d:4a:e8:02:ec:32:
                    c8:6e:dc:24:d3:59:8b:34:2b:cc:05:d1:09:07:54:
                    67:ef:62:d7:0d:d4:1a:ed:01:13:9e:d4:17:fa:49:
                    ae:97:1d:dd:65:52:e9:25:ad:40:91:fd:eb:50:4e:
                    24:d4:72:ea:19:39:22:be:db:1a:80:2f:f9:74:4a:
                    7e:fd:d2:0b:85:11:31:9c:b2:31:17:c8:ac:33:1e:
                    be:af:95:b6:03:4d:a1:14:4c:f1:c4:b5:e4:87:f9:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:C3:CE:E4:B4:C3:06:5F:79:CC:9B:79:71:00:B6:AA:93:34:96
            X509v3 Authority Key Identifier:
                keyid:3F:DB:C9:16:0E:92:D9:67:A9:1B:42:C4:19:2C:8A:81:0F:24:6D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9vJFg6S2WepG0LEGSyKgQ8kbVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/P9vJFg6S2WepG0LEGSyKgQ8kbVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/P9vJFg6S2WepG0LEGSyKgQ8kbVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:16:88:00:4b:81:2c:d0:46:90:98:e0:4f:b9:0f:61:c8:
         8a:df:16:37:1d:37:11:de:f5:a5:a4:18:86:c2:97:93:db:4a:
         2a:75:de:49:ca:94:4a:01:f4:07:71:1b:73:74:11:f7:3b:2c:
         d8:8f:8b:1a:84:ce:e4:c4:dc:58:10:9e:d1:91:cd:db:57:9c:
         60:7c:11:7b:b1:a1:0b:47:9c:62:05:a8:9d:9a:2b:d8:a1:26:
         9b:b5:99:bb:84:d4:88:d2:2a:12:c4:e2:95:f8:45:35:33:81:
         a4:b6:68:bc:8c:d1:77:2e:be:7a:85:6c:87:45:58:02:45:f6:
         cd:5d:fe:b8:3d:ca:36:b0:4d:ee:7c:12:9f:7d:c3:60:3d:5b:
         cf:36:1f:9f:a1:7f:72:3e:d3:20:eb:7e:92:b0:5e:03:9d:d5:
         70:33:23:68:a3:c5:ca:4e:63:b0:3a:3e:c7:9c:12:83:c5:4a:
         9c:4a:58:69:9b:1b:1b:47:77:f3:53:c0:c4:63:3f:0e:9c:87:
         96:7e:df:6d:98:e6:15:27:57:1f:27:52:3d:a2:bd:bc:5a:5a:
         7d:a3:6b:04:bb:83:ff:05:c5:95:01:84:66:a5:94:03:10:f3:
         43:86:3a:06:50:68:f0:82:4a:e7:72:d7:5f:a9:fa:19:4e:81:
         28:e2:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----