Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.mft
File:                     AytF1GJQMh8taAHhzNiIYa_W1S4.mft (raw, json)
Hash identifier:          o+2BHi7Q81hLBaZSP6+cg66HFcdO8TNzATNlLZjCFb8=
Subject key identifier:   16:E6:C0:84:FA:8D:61:57:AD:2F:59:3C:CF:A3:89:6B:D1:9B:2B:54
Authority key identifier: 03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
Certificate issuer:       /CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Certificate serial:       018C1528A06DDE7ABBDCE0E8836148B6FA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.mft
Manifest number:          084C
Signing time:             Tue 28 Nov 2023 09:00:32 +0000
Manifest this update:     Tue 28 Nov 2023 09:00:32 +0000
Manifest next update:     Wed 29 Nov 2023 09:00:32 +0000
Files and hashes:         1: 8dQTKoWBP1UJql_KpyDkWwuJBvI.roa (hash: nTgQrmnuJcYX4Caw8Dtowu21d7KUPZdNTCeRCR/CcoM=)
                          2: AytF1GJQMh8taAHhzNiIYa_W1S4.crl (hash: LglGDEdBdYGfDPuLHUX6QiIcYAzSDaaL0UWY/WGftOI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:15:28:a0:6d:de:7a:bb:dc:e0:e8:83:61:48:b6:fa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b45d46250321f2d6801e1ccd88861afd6d52e
        Validity
            Not Before: Nov 28 09:00:32 2023 GMT
            Not After : Nov 29 09:00:32 2023 GMT
        Subject: CN=16e6c084fa8d6157ad2f593ccfa3896bd19b2b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:01:c9:05:11:3d:78:00:dc:e4:89:cb:24:
                    c6:df:e1:2a:0d:5a:d2:7f:b7:45:16:f9:1f:a2:ce:
                    d1:e7:a1:11:79:49:0d:5f:f1:50:96:41:d7:bc:d1:
                    fe:ca:75:2c:6c:30:50:25:5e:43:d1:9e:92:10:eb:
                    96:4a:70:df:84:58:bb:09:f0:de:dc:f7:a0:bc:e3:
                    1a:13:3a:1c:c2:72:71:d4:05:c3:08:85:5c:f4:42:
                    91:e4:b5:39:56:45:28:e5:ec:d7:31:01:3d:d6:58:
                    61:28:a3:12:2d:07:1d:52:e6:32:31:7f:72:fb:5c:
                    06:42:70:e2:cb:94:6e:62:96:1a:80:58:32:7d:b7:
                    b2:b1:59:2d:a8:f4:b6:e4:05:0e:b6:29:2d:d2:84:
                    97:c9:87:21:14:0d:4f:f7:c7:9d:aa:f8:f6:64:66:
                    cc:9b:a5:92:45:e6:59:5f:74:1b:23:cb:1e:7f:0e:
                    2f:20:62:5c:9d:9e:7f:44:53:58:b9:a2:9b:36:13:
                    41:b6:ec:1e:4b:3c:f6:3b:9b:26:95:8c:85:23:60:
                    8f:c1:38:14:76:35:73:42:6c:df:93:9b:c5:ee:96:
                    f8:b0:c9:40:43:f0:36:01:7c:ae:89:11:52:bc:81:
                    d7:eb:63:e4:ef:fd:49:d5:14:a0:45:ef:a5:53:0f:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E6:C0:84:FA:8D:61:57:AD:2F:59:3C:CF:A3:89:6B:D1:9B:2B:54
            X509v3 Authority Key Identifier:
                keyid:03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ba:f9:e5:d4:1f:43:10:fe:f5:93:64:11:e8:db:fd:95:f0:
         bb:e1:b2:6a:36:bc:47:de:af:36:1b:d4:41:7a:b6:22:5b:b7:
         21:93:cf:53:4d:b2:80:27:8b:e5:e2:24:b0:ab:31:aa:4c:6f:
         1f:b2:54:17:97:84:5b:40:60:fa:5d:8f:29:e1:2d:8d:e3:21:
         51:95:22:24:24:02:aa:16:cc:39:10:ad:f1:1d:e4:ac:82:6b:
         7f:28:f4:83:22:7f:94:a7:0b:49:d2:95:c4:e2:bc:54:78:60:
         bc:9b:60:1d:b6:d5:9c:11:cd:05:df:7e:dc:b5:67:f7:b1:8c:
         dd:33:40:2b:40:5b:1b:92:14:38:c8:f6:79:5c:fd:e5:f4:91:
         0e:8e:77:15:39:69:28:a6:98:7e:74:20:54:3e:b2:7b:0b:97:
         c4:09:a7:a3:50:94:5b:7d:da:18:76:11:e9:e8:c2:2f:2e:d4:
         19:e7:23:22:c9:b9:7f:0f:ed:d8:0a:b0:1b:5d:9c:1e:9c:4f:
         d7:0a:e0:05:da:0d:1d:3e:0c:21:e5:db:31:51:46:93:7c:63:
         69:98:7b:55:27:bf:16:b3:18:f2:04:90:11:66:41:5b:6a:df:
         3c:08:ec:13:3e:b8:92:1b:e2:bf:d8:14:4c:6f:98:00:4a:36:
         1d:62:a6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----