Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.mft
File:                     Cd2SrXcVAd4ovJzze5ZwsS8eIgg.mft (raw, json)
Hash identifier:          uwI7KyvItrxDVM0MnfkHAs5WZX0nTx2gvwvk2zOEeyw=
Subject key identifier:   60:F0:A5:06:DA:3F:4F:8B:1E:63:A8:1A:B7:58:C8:E4:44:84:5C:FB
Authority key identifier: 09:DD:92:AD:77:15:01:DE:28:BC:9C:F3:7B:96:70:B1:2F:1E:22:08
Certificate issuer:       /CN=09dd92ad771501de28bc9cf37b9670b12f1e2208
Certificate serial:       01874597ECEB163573CEF3F5B261568ECCA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.mft
Manifest number:          0AAA
Signing time:             Mon 03 Apr 2023 05:29:56 +0000
Manifest this update:     Mon 03 Apr 2023 05:29:56 +0000
Manifest next update:     Tue 04 Apr 2023 05:29:56 +0000
Files and hashes:         1: Cd2SrXcVAd4ovJzze5ZwsS8eIgg.crl (hash: Pu1GBls57VIe+ATy9VYYRsGpzGEnHaUoO+X45QE8ttc=)
                          2: HBTEcCGVNr2cwt8I8-hj197lIS8.roa (hash: Xqh6457AcLc0ON0hqHVMUKkiGhjWbtrB+71ptAUaapc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:45:97:ec:eb:16:35:73:ce:f3:f5:b2:61:56:8e:cc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09dd92ad771501de28bc9cf37b9670b12f1e2208
        Validity
            Not Before: Apr  3 05:29:56 2023 GMT
            Not After : Apr  4 05:29:56 2023 GMT
        Subject: CN=60f0a506da3f4f8b1e63a81ab758c8e444845cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:4c:03:02:e7:9c:04:9c:fb:ea:7b:84:40:
                    f6:48:f1:59:ba:ef:cb:73:ce:bd:e4:75:0b:72:86:
                    ca:06:f0:c3:52:70:86:c3:c8:50:5d:94:fd:0e:0c:
                    73:a1:36:b0:ff:72:9c:bc:8d:dc:d1:c4:0f:77:9e:
                    d7:62:a8:3b:92:36:d8:63:28:6d:6c:a5:dd:08:ea:
                    cc:68:da:41:6c:fa:a1:00:6b:4d:25:b1:e9:94:62:
                    1d:5a:8b:0c:d7:c3:9e:ef:dd:54:9e:e3:1e:1f:f9:
                    94:a2:b4:04:f3:fe:a9:aa:8e:f4:00:31:ca:a9:ee:
                    8b:34:9d:d5:15:02:ef:64:70:11:ab:8f:a4:38:59:
                    20:46:f1:59:35:89:11:a9:73:37:43:5f:07:06:2e:
                    11:2c:70:24:be:34:8f:5d:f3:2c:fc:04:bb:f3:c3:
                    47:17:28:f6:d5:2b:ca:54:9e:07:d6:41:e6:4a:61:
                    60:f9:1e:69:e0:b4:ca:9d:ff:1c:c0:78:1f:15:07:
                    e6:ce:cc:d2:c3:ce:da:7c:6d:18:f4:f1:b1:d9:1e:
                    15:68:8e:23:e6:6f:46:a5:81:9d:52:7f:03:b0:3d:
                    2e:38:af:43:08:e4:6f:a6:3c:f3:76:95:2f:d7:e8:
                    82:0e:67:87:06:ea:45:2c:d7:b1:e1:47:89:4c:25:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F0:A5:06:DA:3F:4F:8B:1E:63:A8:1A:B7:58:C8:E4:44:84:5C:FB
            X509v3 Authority Key Identifier:
                keyid:09:DD:92:AD:77:15:01:DE:28:BC:9C:F3:7B:96:70:B1:2F:1E:22:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:01:60:71:f9:1f:ae:c0:1e:58:d7:52:ba:a9:18:c0:11:5b:
         e5:77:f2:eb:31:e4:af:3a:31:b8:47:98:d3:32:6b:a5:d6:5e:
         db:4d:8f:b3:8f:48:1a:dc:48:a6:4c:78:43:48:37:0c:16:07:
         6a:b7:b0:d1:5b:42:09:49:af:b8:bc:79:7c:d9:71:d1:60:dc:
         bd:67:4f:48:3a:6f:dd:80:8e:50:4b:72:fe:60:92:ee:dc:ca:
         0f:5a:c9:3a:a7:ed:e5:37:32:f5:3b:e1:f2:ad:6c:b6:47:a0:
         e0:26:a4:b9:d7:90:6d:f9:d6:79:0f:d5:2f:33:e9:13:f2:c0:
         af:aa:15:e4:a3:08:1f:90:a0:e2:25:73:3e:74:f5:49:0b:72:
         39:6d:87:f8:0d:22:4b:89:a7:68:fe:bb:e0:da:c1:9f:af:6f:
         da:cf:83:e4:81:57:18:cf:74:e2:12:90:4f:8f:e0:35:95:b5:
         53:a7:66:d4:aa:f0:eb:cb:ea:76:c5:c6:b8:9e:db:a0:cc:b2:
         94:f0:23:e8:5a:60:63:fb:03:36:14:30:99:85:47:09:28:8d:
         a0:85:23:12:a3:9e:35:87:85:c8:6c:bd:3b:7e:f9:bb:d3:c5:
         04:78:db:a4:94:2a:29:27:ca:22:14:05:ed:b1:0e:97:b2:bc:
         80:79:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:58 2023 by rpki-client on console-ams.rpki-client.org