Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/xaABqG0UrXF7-SRxlpDZF8Wn-VI.mft
File:                     xaABqG0UrXF7-SRxlpDZF8Wn-VI.mft (raw, json)
Hash identifier:          jLOHifUmIdUnPeEmCjB9SZykzV/p6JLnNA0BM4+tKqE=
Subject key identifier:   06:5D:0D:90:66:5F:1D:20:CB:53:78:03:3F:E2:7B:19:F8:8F:8D:1E
Authority key identifier: C5:A0:01:A8:6D:14:AD:71:7B:F9:24:71:96:90:D9:17:C5:A7:F9:52
Certificate issuer:       /CN=c5a001a86d14ad717bf924719690d917c5a7f952
Certificate serial:       0185295C2E02D5F177D4605F54E6D384250A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xaABqG0UrXF7-SRxlpDZF8Wn-VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/xaABqG0UrXF7-SRxlpDZF8Wn-VI.mft
Manifest number:          0434
Signing time:             Mon 19 Dec 2022 07:49:44 +0000
Manifest this update:     Mon 19 Dec 2022 07:49:44 +0000
Manifest next update:     Tue 20 Dec 2022 07:49:44 +0000
Files and hashes:         1: CLWnV9F3_EAHjJwZm0IHghJMv7s.roa (hash: pgfSpUoKXknvwoxqdkJkDJRPKxqvVEuZR3NaF7Bf9HA=)
                          2: uA_cK5_9bcy0ksBej8JGN0Bdh0I.roa (hash: Cc9q5DXl2JIh9WrYyuQ9UP5TYwtuMvcgoa8vktoefiw=)
                          3: xaABqG0UrXF7-SRxlpDZF8Wn-VI.crl (hash: fvVKvCKfV8jp4XzKyLZxCDNXIi2UX0MQw95w9Mjrecs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:5c:2e:02:d5:f1:77:d4:60:5f:54:e6:d3:84:25:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a001a86d14ad717bf924719690d917c5a7f952
        Validity
            Not Before: Dec 19 07:49:44 2022 GMT
            Not After : Dec 20 07:49:44 2022 GMT
        Subject: CN=065d0d90665f1d20cb5378033fe27b19f88f8d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:66:8b:8d:dc:98:94:d8:85:0d:12:c3:9b:
                    0c:12:a7:49:f8:54:dd:49:2c:1f:3f:bb:41:4a:de:
                    7d:bc:72:ad:d5:6a:41:3f:09:0c:30:fc:db:ea:09:
                    2b:6d:56:8d:9d:54:87:bb:e9:7d:6d:43:44:d5:8e:
                    e5:00:ec:4d:d6:eb:c8:9f:2a:4b:b7:c2:84:a4:a5:
                    91:9f:5b:fd:be:58:cc:4f:29:cb:47:22:36:cc:2f:
                    eb:87:eb:a8:54:64:b9:f1:f0:13:f1:a6:f4:47:13:
                    45:82:87:6f:a9:a9:6f:b2:10:b8:e1:1a:7d:46:bf:
                    6f:d5:ac:b7:b6:bf:89:0d:f2:67:c8:b2:0d:93:29:
                    80:f1:25:0b:87:fe:49:40:f6:c5:f1:d7:20:7f:c0:
                    25:dc:66:c2:5d:bd:e5:5e:37:ae:5f:64:d5:a1:74:
                    77:4c:82:4d:72:29:1b:3f:28:b3:48:80:2d:71:43:
                    49:6d:5c:0b:8d:de:9a:33:77:5d:28:00:e9:f9:78:
                    c1:5f:67:a8:5c:6e:38:13:d7:d7:0d:cb:99:09:6a:
                    90:70:9e:5e:8c:c7:9e:cd:ff:88:09:5b:e8:3a:0a:
                    87:a7:29:44:6a:2c:b9:76:4f:e4:a9:7b:5d:e2:c8:
                    0d:6a:10:5e:34:6c:92:9c:f5:82:f2:6b:69:c1:82:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5D:0D:90:66:5F:1D:20:CB:53:78:03:3F:E2:7B:19:F8:8F:8D:1E
            X509v3 Authority Key Identifier:
                keyid:C5:A0:01:A8:6D:14:AD:71:7B:F9:24:71:96:90:D9:17:C5:A7:F9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaABqG0UrXF7-SRxlpDZF8Wn-VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/xaABqG0UrXF7-SRxlpDZF8Wn-VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/xaABqG0UrXF7-SRxlpDZF8Wn-VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:bb:79:32:d8:9e:f8:f2:02:91:d4:45:de:27:55:00:4d:
         94:95:79:90:37:07:3b:30:00:b3:e9:b6:af:f1:47:85:af:6a:
         9a:9f:0a:8b:60:48:cd:81:72:b2:8f:29:72:a0:8f:4d:a3:a5:
         00:ba:d3:a0:83:bd:f3:34:a7:71:3e:96:eb:1f:ea:84:9d:97:
         35:c8:8c:89:a3:50:e7:41:fe:fc:ef:8f:49:9d:6a:c2:a8:8a:
         38:dc:f9:e6:9d:8d:19:7c:fd:6f:95:68:4f:c8:33:18:61:4f:
         dc:3c:91:df:e9:0f:41:74:7a:d1:be:95:a0:07:58:e0:0a:dc:
         7d:4a:b1:29:54:e7:b4:4f:41:31:eb:fb:74:d5:57:c5:77:df:
         8d:41:bb:40:11:63:2e:a5:94:0b:43:6d:50:1e:c7:b0:59:31:
         d4:cc:6e:66:60:d1:17:dd:99:65:2c:56:d3:e3:97:a2:21:d8:
         02:9e:19:9e:45:94:aa:3d:de:9e:f4:f3:ee:a0:a9:b2:91:92:
         1a:5a:e5:8f:a2:81:d5:a0:0d:f8:e8:ed:75:8f:1d:ad:45:05:
         df:f3:28:8a:e7:bb:6b:75:e2:f5:0c:10:e5:a5:13:70:79:ba:
         36:58:2c:f3:bd:35:9d:04:30:e1:7f:3c:a0:20:5e:74:79:ef:
         32:90:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----