Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.mft
File:                     vPwSxJnOscYSBGJTJvAO2ntSV9A.mft (raw, json)
Hash identifier:          UMME2DJxajt/rtFAe0OgS+cbt9QD81I2jEy9L4NspJM=
Subject key identifier:   E0:69:C7:45:AC:5E:A4:8E:3F:22:2B:8B:D0:CD:CC:F8:E1:70:FB:73
Authority key identifier: BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0
Certificate issuer:       /CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
Certificate serial:       018928F50361D0A054D40C9A916E3D65A2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.mft
Manifest number:          07F0
Signing time:             Thu 06 Jul 2023 02:08:12 +0000
Manifest this update:     Thu 06 Jul 2023 02:08:12 +0000
Manifest next update:     Fri 07 Jul 2023 02:08:12 +0000
Files and hashes:         1: mRYiXco0yzWOj8xgbAc1R5D1B_Y.roa (hash: QGQBzQw8tI7IQ0ysvVGKLEJwY9qLBMQI0p/WhF3JttY=)
                          2: vPwSxJnOscYSBGJTJvAO2ntSV9A.crl (hash: cvHk9SLO2aU//1/4mcLudRYkzTEJ1IbW3+/CscFcTi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:28:f5:03:61:d0:a0:54:d4:0c:9a:91:6e:3d:65:a2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
        Validity
            Not Before: Jul  6 02:08:12 2023 GMT
            Not After : Jul  7 02:08:12 2023 GMT
        Subject: CN=e069c745ac5ea48e3f222b8bd0cdccf8e170fb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:f6:92:1f:eb:94:f9:bf:3b:04:f5:e5:16:
                    98:3d:c3:7d:55:bb:f7:86:3e:b3:cd:a4:71:3b:82:
                    90:b5:91:30:95:d1:c7:0e:e2:e0:f2:d3:c8:2f:f9:
                    3d:73:ff:cb:46:76:77:a8:c7:39:ff:c3:8a:46:b3:
                    e0:96:31:34:76:13:b2:cb:e0:70:6d:3b:42:45:bf:
                    1d:63:19:ec:0a:ad:d1:62:7c:5a:90:82:93:09:3d:
                    f2:24:4b:a8:77:48:e0:eb:6f:9d:57:b9:ed:f7:72:
                    17:8a:ad:ed:4e:5c:42:dd:78:ec:bd:db:39:b6:d5:
                    c7:98:a1:03:a3:40:f4:86:e5:89:ad:ad:1d:6a:a8:
                    d8:aa:7d:9c:6d:19:90:0e:98:48:45:e0:dd:12:21:
                    6e:5d:35:67:f2:a0:b5:8b:7c:fb:c6:39:33:ff:3a:
                    7d:84:12:af:f7:ed:14:c8:af:8f:80:fc:60:68:b1:
                    5b:fb:ad:d8:2f:55:ca:db:1a:d7:4e:73:de:2a:3b:
                    7a:dd:d1:f6:f9:5c:46:7b:b0:77:eb:10:83:d8:e2:
                    cb:cd:af:91:a6:4d:f1:b6:4d:af:aa:37:cd:72:79:
                    8f:09:ae:ef:9e:7f:04:40:d9:46:3f:7c:38:fb:80:
                    49:7c:ed:f9:00:78:52:6b:30:d3:7c:92:d8:61:72:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:69:C7:45:AC:5E:A4:8E:3F:22:2B:8B:D0:CD:CC:F8:E1:70:FB:73
            X509v3 Authority Key Identifier:
                keyid:BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:12:03:be:b1:b9:1d:f1:fd:22:9c:69:c2:29:6b:95:52:1d:
         20:bd:e2:6a:e0:b6:a4:7b:29:bb:42:f3:da:f8:38:e4:12:30:
         e8:57:7d:c0:a3:76:ca:90:7a:06:b9:a5:cd:ae:8b:35:4b:c5:
         be:37:05:e0:81:bc:9d:cc:8f:e0:3d:8d:9c:4d:50:ed:a6:ee:
         0a:97:4d:89:24:75:a7:85:22:28:6c:5c:98:88:7a:43:99:e9:
         df:dc:16:06:48:db:f5:40:9c:12:fd:b5:47:45:6c:eb:71:21:
         5e:96:bf:86:26:6c:cd:2d:a1:fd:86:37:b2:5e:16:64:3a:5d:
         cd:5e:f2:8a:b8:ba:a0:ef:b3:fb:7f:72:88:6d:2b:ac:08:e0:
         cb:09:18:ac:61:ae:64:65:d3:28:ad:02:b1:df:8e:f3:fc:c3:
         7c:bc:2b:85:48:2d:75:1f:38:a5:e5:af:bc:a8:01:01:6f:0c:
         b0:a4:e2:47:cb:f0:be:ae:16:92:83:07:65:15:eb:be:42:4c:
         de:b7:73:b2:f0:3f:1a:e1:5f:c1:16:c6:b4:74:5f:df:60:0b:
         3e:c8:b2:dd:99:0d:72:bf:a4:5f:d3:f1:db:44:44:b9:b3:dc:
         97:4d:cc:41:77:ef:c6:6c:dc:51:ad:04:64:4a:94:64:73:73:
         4d:d0:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----