Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/yBFyLZAxVj9vy4dSH94IaAEACLo.mft
File:                     yBFyLZAxVj9vy4dSH94IaAEACLo.mft (raw, json)
Hash identifier:          e7DtdW+5gtjjDVO+BBQjRAIv/mK2K7+3gpdM5F9/ztM=
Subject key identifier:   95:8D:DB:3C:16:89:7F:04:68:AF:75:24:27:B6:00:B3:4A:ED:D2:40
Authority key identifier: C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA
Certificate issuer:       /CN=c811722d9031563f6fcb87521fde0868010008ba
Certificate serial:       018AEEC34E240379C6824E2BF57E9CE2EC0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/yBFyLZAxVj9vy4dSH94IaAEACLo.mft
Manifest number:          086D
Signing time:             Mon 02 Oct 2023 05:01:31 +0000
Manifest this update:     Mon 02 Oct 2023 05:01:31 +0000
Manifest next update:     Tue 03 Oct 2023 05:01:31 +0000
Files and hashes:         1: 2Rpde-cJCk72BViobrkPcSUf3JI.roa (hash: 2FugCMNahyeCIGdL6tTSx53tKXjGLuE1AWcjqW+ij6Y=)
                          2: yBFyLZAxVj9vy4dSH94IaAEACLo.crl (hash: hAucw8UyroJwAZd8KOWSFkbNmGbWifpPDVV6ShpNr3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ee:c3:4e:24:03:79:c6:82:4e:2b:f5:7e:9c:e2:ec:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c811722d9031563f6fcb87521fde0868010008ba
        Validity
            Not Before: Oct  2 05:01:31 2023 GMT
            Not After : Oct  3 05:01:31 2023 GMT
        Subject: CN=958ddb3c16897f0468af752427b600b34aedd240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:d1:2d:9a:97:d4:bf:64:b6:a8:f9:f3:42:
                    65:76:e6:78:f0:ee:26:1b:0b:41:4f:31:92:68:5c:
                    09:c2:15:15:bf:2a:a9:a5:c1:65:ab:27:16:e2:bf:
                    af:a5:db:9d:fc:5b:22:ec:ab:45:81:19:a0:0e:9d:
                    75:30:17:e4:47:2d:4b:a7:01:01:84:bf:d6:62:7a:
                    04:8d:b1:ed:ab:b6:7b:51:fe:34:c0:67:80:54:f6:
                    72:fa:cd:6d:7d:84:0b:68:67:20:da:28:78:6c:0b:
                    e8:d6:51:2b:de:de:94:b8:5b:2b:dd:33:af:b9:36:
                    fd:99:64:5a:fc:53:7c:a7:1c:06:0b:81:03:b8:27:
                    09:a9:5b:50:a4:f6:a7:0d:08:c2:f8:19:fd:05:36:
                    d4:49:9d:e5:ab:19:ef:fd:c4:37:34:ea:33:67:3a:
                    f8:f8:6e:d6:02:f7:7c:95:fe:68:4a:94:81:ad:52:
                    a2:8c:27:1b:15:d4:ae:3d:7a:e6:f5:3b:46:e3:48:
                    db:c4:a5:f4:30:30:b1:e9:e4:cc:44:0a:b1:bc:4e:
                    de:4d:f6:74:0a:8e:15:62:d6:f4:44:0c:41:1d:4d:
                    3d:01:0f:9b:5d:16:29:16:65:12:e7:db:de:89:6b:
                    ab:f2:45:a8:dd:79:a0:fd:f2:0c:3d:bc:3c:4a:9f:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8D:DB:3C:16:89:7F:04:68:AF:75:24:27:B6:00:B3:4A:ED:D2:40
            X509v3 Authority Key Identifier:
                keyid:C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/yBFyLZAxVj9vy4dSH94IaAEACLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/yBFyLZAxVj9vy4dSH94IaAEACLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:be:d6:55:08:f6:00:be:e4:98:9f:90:49:fa:58:d7:0a:fe:
         95:06:a2:e8:a3:fb:43:f8:1a:a1:8a:a1:5c:2b:9a:83:d4:51:
         57:1b:38:12:c7:94:3f:5d:2c:99:0b:c3:04:bc:0e:b5:a7:48:
         30:c7:d1:6a:34:d2:7d:59:cf:a5:22:96:56:7e:89:a1:c2:c5:
         53:81:8c:91:c9:0f:4f:ff:b3:d7:4b:b7:7b:fc:6d:e6:98:1a:
         39:a5:2d:90:e9:1f:e5:a1:29:ea:a8:96:73:ca:18:c2:44:ba:
         dd:e1:dc:d3:03:1c:c1:07:59:e6:3e:fc:85:b9:aa:e6:cd:03:
         0e:88:bb:dd:9f:48:d6:2c:df:22:6f:d4:27:df:ce:8f:00:77:
         77:b4:95:ef:9b:ae:5d:96:45:90:af:fb:83:3f:e2:9a:d7:50:
         a2:37:88:0d:73:73:cc:60:13:31:d1:86:2f:bf:80:c4:c5:2f:
         4c:c0:2a:c6:17:71:6e:a7:5b:71:bb:33:b3:b5:65:77:12:68:
         5c:cc:09:50:57:89:cb:2b:da:f1:c4:bb:91:fd:49:5e:2b:15:
         5a:a3:6b:6f:fa:08:78:e2:44:1b:6a:76:04:d3:10:83:17:91:
         9f:6e:ab:bd:a5:1b:50:7a:f0:93:9b:01:71:8e:25:d2:7c:67:
         61:dd:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----