Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.mft
File:                     YYL6MljC0s6hWExW8CYlwD_ysNU.mft (raw, json)
Hash identifier:          b2tpNyd4kj1yc0t0ch1DQNmTUELo7Js32h2a3v9DqYU=
Subject key identifier:   7B:F2:21:31:13:4C:0C:7B:CE:D8:53:D5:C3:08:D9:1C:23:CF:37:04
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Certificate issuer:       /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial:       018B8ED55856F17A0242D7BF1C8738860552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.mft
Manifest number:          08F9
Signing time:             Thu 02 Nov 2023 07:00:28 +0000
Manifest this update:     Thu 02 Nov 2023 07:00:28 +0000
Manifest next update:     Fri 03 Nov 2023 07:00:28 +0000
Files and hashes:         1: CzNq3vHsFjHVkChEscAvKZYxrT8.roa (hash: JBf2heolloZCnpkVyQyLHxZYPovrgYpoW8s/JPgMZcc=)
                          2: IsqB2k5cl3ar_8-wVC6VU7Z3oIE.roa (hash: /EW0Qnvx3RCQ02zv0BYwmAG8JgYiogOMjipnppR9dXc=)
                          3: RiWp8cXOVw6fQ2HiGlbeaYXWCmA.roa (hash: uER0do+pJcAzpwLOOvLNuY2qy1gAMosfhvUi735ttC4=)
                          4: U1DYy6n7RAPuCPqGlrJOe-OJr3E.roa (hash: xDUWMNy0bpPJFVPQyHt9GRjkrBanhPADHFk9UyTBNfg=)
                          5: YYL6MljC0s6hWExW8CYlwD_ysNU.crl (hash: laq5AnTFxU0c8HsoyRyLPfQINDjCE/iJNUr2LlnEX/w=)
                          6: hPuz1D2HnYM1gjvzUAzDpFOze7s.roa (hash: oix9IB3rVFu+E2V+cybf3TimyZBF2VdcpVVdBtPzrxQ=)
                          7: pR6Z9Pa2I-I17z0-qFrXzAeidM8.roa (hash: MHjlNX9NqiUaCjOpByszu+IS2cOPhS98fiMryiwSBRU=)
                          8: wtFlnQHQYrsql6GT-nf3JPXSndU.roa (hash: rIdtCNWGR0CJN6Nw97remOnp03r0FEpSgzK266TFpRs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8e:d5:58:56:f1:7a:02:42:d7:bf:1c:87:38:86:05:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
        Validity
            Not Before: Nov  2 07:00:28 2023 GMT
            Not After : Nov  3 07:00:28 2023 GMT
        Subject: CN=7bf22131134c0c7bced853d5c308d91c23cf3704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2e:45:96:de:4d:0d:c8:1f:9d:dc:71:be:ef:
                    22:38:d6:52:27:3e:0c:1c:4f:be:c2:85:d2:11:e9:
                    87:75:8e:76:0b:fd:35:71:5a:46:04:f7:95:1f:dc:
                    60:cd:76:2a:7d:c2:9d:17:fd:4d:5f:3a:28:6a:35:
                    52:76:dc:5f:d3:41:10:0c:6d:c1:8e:4b:a0:fe:08:
                    eb:0d:19:ec:05:0c:37:51:23:49:e7:78:6d:7e:1a:
                    08:50:f1:72:c5:3a:fb:e4:d1:c3:4b:af:a8:87:0d:
                    46:2a:b9:5e:f6:a9:1a:a4:27:40:db:23:96:ec:ab:
                    e2:d0:3f:9a:8d:d6:7b:ac:a6:1a:9d:94:da:a0:91:
                    84:40:e1:fa:b6:13:a5:f7:2e:de:a2:57:2a:86:e5:
                    62:64:89:29:4b:b0:0c:00:c5:fa:2c:85:9a:ab:5a:
                    b5:47:a1:4c:a9:3f:b6:b7:6c:54:94:da:f4:50:0f:
                    63:2b:5f:73:3e:85:d4:da:1c:6d:95:e0:ee:9b:06:
                    17:79:cd:20:e3:d7:b4:97:6f:6b:c9:52:66:6c:75:
                    c3:c7:49:88:ca:ad:33:a4:66:dc:eb:91:58:9b:5f:
                    86:af:16:b9:b7:2b:9b:58:42:4b:41:f7:99:86:31:
                    ff:f5:48:a9:67:24:51:84:d9:79:e0:eb:56:f9:7c:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F2:21:31:13:4C:0C:7B:CE:D8:53:D5:C3:08:D9:1C:23:CF:37:04
            X509v3 Authority Key Identifier:
                keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:2c:e5:32:d3:06:2b:a4:9d:64:c4:1b:b0:d8:d1:c3:78:
         0c:3a:59:c7:96:98:0d:e2:34:5b:58:a7:22:7c:b2:24:d7:e4:
         4f:07:d6:ff:08:1d:b4:55:69:64:2b:64:7f:da:76:8a:61:48:
         d9:3a:85:75:ab:b1:32:7a:cd:2c:85:63:d5:59:8d:4a:c4:45:
         85:fd:55:13:17:09:84:d7:f1:05:e9:bd:80:09:d7:33:bb:08:
         33:26:52:ed:38:59:df:19:ec:bc:a2:cc:c6:34:66:f2:5b:35:
         e9:c3:1d:29:24:63:c3:25:a0:0e:41:89:0c:2a:0c:a7:ae:f8:
         5a:74:8f:37:5d:58:78:00:87:df:04:c3:db:d4:62:38:f1:0f:
         0e:a5:90:1b:29:4a:bd:a3:f7:38:2d:58:74:18:e6:2f:8e:d7:
         57:11:51:91:ad:0f:f4:32:1c:72:7b:39:e1:52:cd:ba:05:a9:
         ba:ae:69:96:55:5a:48:d0:00:8c:9a:bc:f5:18:64:04:48:31:
         7e:ab:5d:0e:5e:f3:cf:a5:3a:53:84:39:cc:48:0c:90:58:96:
         fb:ba:b3:3c:5c:1b:de:10:b7:cc:47:e0:2f:b3:4d:ce:16:16:
         03:3c:07:2b:c2:37:e1:1b:24:52:e5:c4:92:7c:1d:84:1b:71:
         c8:51:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----