Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/BdZYWUtlNkssLlampF67BoR7OEk.mft
File:                     BdZYWUtlNkssLlampF67BoR7OEk.mft (raw, json)
Hash identifier:          Y/5aa2GaMEb1SuDNGTNXnXn4LecrEkBw3YbG8qyFEYc=
Subject key identifier:   9D:84:CE:8E:4B:D6:15:40:46:29:E9:A5:C4:B6:F1:68:EA:1D:B0:77
Authority key identifier: 05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
Certificate issuer:       /CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Certificate serial:       018C43831F90BCAD79AFAB5B02E70ECD78E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/BdZYWUtlNkssLlampF67BoR7OEk.mft
Manifest number:          0FCB
Signing time:             Thu 07 Dec 2023 09:01:55 +0000
Manifest this update:     Thu 07 Dec 2023 09:01:55 +0000
Manifest next update:     Fri 08 Dec 2023 09:01:55 +0000
Files and hashes:         1: BdZYWUtlNkssLlampF67BoR7OEk.crl (hash: 9qI8/HTPimEi026iClImSlo3YO7G5FsbLwvHGw7MZH0=)
                          2: X6ZbqumCzm6VuZPPgWHf0MHWhvs.roa (hash: t2G2F/Ethn7EeRfhb0k/xsXsA9N8UzbzKDPM16WLGUs=)
                          3: bnTkJ1iOYiyhAP5ocSx1UhGskH8.roa (hash: z8LIxkOv5h+IVFnSSbVcBErOihk5w4Qykab9W6ZSCgw=)
                          4: qyjpRnyetUCJE6ujmIMOIse_yBE.roa (hash: ihA1czap/pToCa/E69J6l8uxURW9GMuiaaocMqdRbkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:43:83:1f:90:bc:ad:79:af:ab:5b:02:e7:0e:cd:78:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d658594b65364b2c2e56a6a45ebb06847b3849
        Validity
            Not Before: Dec  7 09:01:55 2023 GMT
            Not After : Dec  8 09:01:55 2023 GMT
        Subject: CN=9d84ce8e4bd615404629e9a5c4b6f168ea1db077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:54:b4:39:b0:75:27:27:e1:38:f2:d6:83:41:
                    8f:9d:1d:7f:b0:43:71:a4:7f:0a:d8:73:2d:7e:55:
                    8c:54:fd:8f:fe:2f:19:e8:06:ac:da:72:47:ec:27:
                    40:66:6e:9c:ba:0a:2d:22:9b:d2:85:50:d2:99:d8:
                    a9:fd:92:4d:f5:0f:28:db:a9:a7:c7:fa:cd:a5:7c:
                    99:b1:49:93:a9:9e:29:6a:f4:a1:3d:42:60:f9:5e:
                    bb:8d:08:25:f2:af:8a:53:f9:bb:8f:97:ee:6e:7e:
                    ed:69:a4:2f:48:2c:28:98:0a:b8:1e:38:04:5e:b6:
                    f6:13:a0:1b:e3:4a:50:54:bc:25:83:57:b5:f2:dc:
                    fe:08:8c:fd:d6:da:65:ad:c1:46:83:a7:90:4c:58:
                    b3:0a:e5:54:3c:a8:e2:9d:06:5c:00:5c:81:03:3f:
                    65:84:41:ce:0c:1b:96:01:05:7d:1d:e9:5f:6f:6c:
                    70:28:c6:96:1f:bb:d7:ec:24:a8:6e:85:59:0c:cd:
                    df:10:08:fb:35:30:fe:26:12:a1:a4:af:68:ba:bb:
                    bb:26:2f:2d:00:38:18:d4:87:c3:fc:61:e3:ef:74:
                    63:96:7e:00:b1:e7:0b:ce:41:99:73:c8:23:2a:e9:
                    93:9a:15:21:e0:5f:b6:a2:60:24:0a:cd:29:b4:cf:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:CE:8E:4B:D6:15:40:46:29:E9:A5:C4:B6:F1:68:EA:1D:B0:77
            X509v3 Authority Key Identifier:
                keyid:05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/BdZYWUtlNkssLlampF67BoR7OEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/BdZYWUtlNkssLlampF67BoR7OEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:83:b0:61:22:d9:1c:6c:3f:54:91:12:c1:3b:c7:c1:55:
         13:fc:fd:93:38:49:00:98:65:d5:ce:ef:94:58:b7:86:89:dc:
         0c:7d:f3:26:1e:0b:e3:75:9a:02:5c:0e:62:b2:a8:e0:4f:ac:
         5d:ad:35:24:af:3e:3d:52:d9:0d:2a:a2:0b:6e:c9:36:c7:01:
         da:68:d4:be:9a:08:03:64:93:e0:59:fc:27:4b:bb:61:9b:dc:
         ad:29:1e:25:9a:2d:4f:45:77:6c:92:26:b9:26:bd:4b:fe:76:
         98:f5:7a:4b:8c:76:2b:dc:0f:ff:48:bb:1d:dd:22:57:f5:74:
         4d:22:c2:73:e7:dc:25:36:c1:a4:aa:dc:75:cd:ba:90:55:9d:
         90:64:a1:1f:77:ff:4c:31:c0:9f:17:47:be:99:8f:06:ba:a4:
         c8:48:e7:95:53:f8:84:ac:3d:bc:c7:f5:75:cc:b1:8b:7a:01:
         65:ab:33:24:33:33:5e:cb:cf:fd:cb:8e:85:2c:8d:d0:2c:cc:
         8a:c8:92:c1:30:c7:0e:b2:94:aa:6e:94:3d:b7:60:43:44:94:
         fc:40:da:d7:5d:a0:7e:16:1b:f7:c4:8f:9f:5b:94:4b:b8:32:
         fc:f1:df:a5:32:1f:0a:ff:cd:8c:4a:c7:61:79:c8:7d:f5:f2:
         4a:0a:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----