Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.mft
File:                     8C0hySXt19gR4b6W8PKH18zS81s.mft (raw, json)
Hash identifier:          8OWacYb4tZZTwZSkXbAo2R9nTQXmpkCHW/eR5cmHr20=
Subject key identifier:   03:57:2F:06:86:7D:73:A9:B5:02:7B:DE:59:E0:19:A9:B2:17:DA:53
Authority key identifier: F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
Certificate issuer:       /CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
Certificate serial:       0186914B95243FBD8EAE5496FB08B15DE2E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.mft
Manifest number:          0AAB
Signing time:             Mon 27 Feb 2023 05:14:55 +0000
Manifest this update:     Mon 27 Feb 2023 05:14:55 +0000
Manifest next update:     Tue 28 Feb 2023 05:14:55 +0000
Files and hashes:         1: 8C0hySXt19gR4b6W8PKH18zS81s.crl (hash: 8Nxajr9dhNJ78mVL/n9wZvpDkhkKb+6anEwKZ4MDhYs=)
                          2: JUfWPt7JdvXV1AdnBvGbd1bYe4U.roa (hash: Rq0DAEvj76wEAuIjFGDTgwO9FgGI28QdH/vhXmjfrRI=)
                          3: o0hgdl5wumgjhv_W04qkWbsRMGE.roa (hash: fadDNu2AZRzBaNQFWcS64ppC0IzLVga/YwGZFyp63lk=)
                          4: xunIV9WtuE33EEFg1oycdvZH7mA.roa (hash: Pn8LwuCrtBdD9EQaxxFRQe6O3ckJz8VdR/dnO51jrmY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:91:4b:95:24:3f:bd:8e:ae:54:96:fb:08:b1:5d:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
        Validity
            Not Before: Feb 27 05:14:55 2023 GMT
            Not After : Feb 28 05:14:55 2023 GMT
        Subject: CN=03572f06867d73a9b5027bde59e019a9b217da53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:81:1e:1b:ed:f4:55:31:b3:55:7b:75:c7:
                    ff:f6:8b:48:8c:f6:5c:98:bc:53:ce:c1:fc:c2:5f:
                    7f:2f:42:2c:2f:31:8d:d6:a0:fc:66:09:fb:4e:69:
                    56:7b:b2:5b:f4:68:51:10:b8:c2:02:6a:f4:18:d5:
                    49:61:a6:44:e8:c0:f4:9d:67:a9:df:cb:7f:46:c6:
                    eb:9d:13:c3:f5:b4:3a:8c:bf:6c:13:75:a1:0d:4b:
                    0d:4c:64:9d:f0:de:4e:9f:7f:23:12:71:1b:75:25:
                    d9:4d:35:5e:0b:b2:02:c5:d0:ba:b4:e9:a7:00:07:
                    13:43:7d:81:33:af:73:3d:a2:12:1c:35:6d:13:06:
                    d3:e5:00:d9:f2:85:88:18:c9:cb:e6:27:6a:27:b1:
                    2a:33:fc:8c:70:f6:f4:7b:c3:cd:e5:2a:2c:cd:18:
                    93:0c:ee:d0:48:72:3f:b2:d5:36:68:a0:aa:c5:c7:
                    fd:6c:8f:2b:e2:ea:09:fa:0c:2f:ae:fb:70:91:b5:
                    eb:68:46:0c:42:00:10:75:09:b1:b0:44:28:a4:bf:
                    1c:49:28:85:ee:86:eb:0a:91:dc:b0:f0:be:f2:2e:
                    4f:3f:03:58:a2:31:e2:89:cc:85:fc:47:ca:c8:19:
                    e0:b8:51:79:2b:02:17:e3:24:3c:02:bd:47:c7:cb:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:57:2F:06:86:7D:73:A9:B5:02:7B:DE:59:E0:19:A9:B2:17:DA:53
            X509v3 Authority Key Identifier:
                keyid:F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:92:f2:4f:60:dd:be:80:e4:34:b0:28:90:5d:32:c6:5b:ef:
         66:12:27:94:84:04:d1:a5:74:d0:81:4f:ce:2d:7d:dc:8b:92:
         63:6f:f2:7c:41:30:26:37:cb:aa:9a:4a:e4:ee:f8:5c:9e:91:
         9c:ea:96:74:79:49:92:e4:f8:ea:6b:3b:52:a9:10:b3:d5:4e:
         6e:fd:e2:9b:bf:0f:1d:77:43:dc:3d:1e:a4:e9:88:ef:96:c9:
         7c:30:7d:da:6b:33:17:4e:20:d0:13:5c:a8:85:23:d9:51:54:
         25:16:c1:08:e4:79:02:f2:7a:7a:68:d1:0c:e7:c2:f7:8f:f9:
         46:b6:95:33:fb:63:70:7a:44:f7:b3:6b:0d:7f:30:73:31:5f:
         97:98:fb:49:94:aa:69:b2:80:86:0e:64:ed:f9:15:50:78:d7:
         3d:62:d2:67:d0:8e:4b:22:53:59:c8:16:78:28:d7:d7:93:d5:
         c5:68:07:a1:3f:c5:c5:db:cb:3d:cf:20:f7:7a:0d:e8:e8:7c:
         a0:57:e7:6e:e5:99:e4:14:98:c5:dc:df:d0:e3:3d:6c:7c:e5:
         c0:97:9e:5b:4f:f0:fe:89:9f:51:5e:33:d8:80:5c:05:ad:45:
         26:b4:f7:ce:c8:4d:64:e2:88:0e:67:75:47:07:cc:43:43:2f:
         02:a9:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----