Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.mft
File:                     ygofjPO4AWvogy94sQGzZOERQCU.mft (raw, json)
Hash identifier:          CPDFjuj+fLdzmmwaaPyP4cl2WRcy5cOrJ4HBgbOP12Q=
Subject key identifier:   6D:61:F5:DF:46:12:63:69:19:FC:91:BF:2D:1A:6A:15:68:48:9E:2F
Authority key identifier: CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
Certificate issuer:       /CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Certificate serial:       0189AFB67B77C7008DDF34FCA3AAB81C2FC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.mft
Manifest number:          09D7
Signing time:             Tue 01 Aug 2023 06:08:39 +0000
Manifest this update:     Tue 01 Aug 2023 06:08:39 +0000
Manifest next update:     Wed 02 Aug 2023 06:08:39 +0000
Files and hashes:         1: 1llN7pFMJKJur0MpJEm2azZ_aD0.roa (hash: 1lnOjuHIHcgLKeK9CW3YcmetXXZylu0U/OHXcx4CMyg=)
                          2: bSsyAd_p0iREhgcTkwpA6Yfa6-o.roa (hash: i0m15w7eUGgQmpuDtOkbn+WWVpGrki2REtuWkujqb3s=)
                          3: ygofjPO4AWvogy94sQGzZOERQCU.crl (hash: tnhJjK0Olcv01kFSmE1JD9ScHM1HgtxC3S4qkX7XbUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:af:b6:7b:77:c7:00:8d:df:34:fc:a3:aa:b8:1c:2f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
        Validity
            Not Before: Aug  1 06:08:39 2023 GMT
            Not After : Aug  2 06:08:39 2023 GMT
        Subject: CN=6d61f5df4612636919fc91bf2d1a6a1568489e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:ce:c6:b8:30:c6:d5:f0:ea:45:89:af:94:
                    05:ed:03:72:c9:32:14:b3:18:31:5b:7e:bd:61:8e:
                    68:b5:52:f2:e1:2c:c6:84:25:0e:29:b7:1b:df:83:
                    2b:fa:8a:d7:07:5b:65:e3:f7:ed:29:7d:c5:45:b6:
                    92:ff:bd:93:89:49:2a:e0:56:80:cf:df:ce:8e:6e:
                    99:79:a5:7c:8d:06:7f:42:4c:c0:25:0c:e4:69:af:
                    0f:31:80:5a:46:a7:35:f4:9e:02:86:e1:63:db:02:
                    35:33:b2:a4:16:64:d2:1a:38:71:31:10:c4:55:5a:
                    8a:13:06:8d:f2:da:f5:1f:b0:45:a2:ec:2c:e9:bc:
                    3d:cd:54:37:a1:bf:d8:f5:9a:da:10:10:63:70:be:
                    5f:19:9c:57:bf:0d:af:0d:ac:6f:ed:19:09:d0:51:
                    98:3b:83:53:1b:0b:5a:6e:63:82:f8:3f:e1:3b:21:
                    36:43:14:0a:92:f8:c7:c1:12:95:a9:d5:0d:22:63:
                    ab:0c:b5:fb:18:24:c7:65:54:68:fe:d9:18:53:57:
                    33:aa:fd:88:b8:38:fe:c1:17:04:ee:4b:ac:89:f5:
                    1d:06:8e:19:b1:6a:27:72:28:dd:03:ac:a4:64:be:
                    d8:bd:bc:a0:34:af:36:4a:b6:bc:1a:97:e1:7d:18:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:61:F5:DF:46:12:63:69:19:FC:91:BF:2D:1A:6A:15:68:48:9E:2F
            X509v3 Authority Key Identifier:
                keyid:CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:16:53:db:cb:9d:3d:fa:20:3c:d7:c7:9d:a9:19:b9:15:
         c5:b1:96:28:ab:3e:24:5c:04:7a:3e:36:61:dd:90:51:73:9f:
         0c:4c:ff:53:08:d0:8d:11:37:f2:0f:fd:c6:d3:12:df:40:68:
         d6:2b:12:3e:ae:93:8c:70:df:79:f0:18:df:a1:61:76:ad:cd:
         e5:d5:87:70:cc:ca:5d:d1:48:f0:5d:d6:ba:45:06:ef:23:b2:
         90:ba:b7:43:b8:df:02:e2:3f:0c:01:90:71:ad:3d:bb:6e:a5:
         9f:98:41:fb:42:fd:59:5e:f1:7d:ea:95:42:79:82:ba:e9:c6:
         21:92:d5:70:73:f0:3b:f0:89:2a:00:7a:8a:c4:42:66:6f:db:
         64:89:08:04:0e:c5:43:31:1e:e6:13:1b:6c:3c:db:cd:7a:c7:
         53:38:bc:ff:dd:a0:82:5d:09:23:7a:e9:01:9f:4c:30:2e:6c:
         96:48:2d:79:8c:91:d4:04:3d:a2:d7:83:50:92:2d:08:97:07:
         61:0f:cd:7d:b3:ab:65:ec:ea:8d:63:52:fe:b3:12:00:f5:d7:
         9b:e8:b3:20:ab:41:b4:b5:b8:e1:56:5d:33:36:22:ce:18:13:
         fe:bc:d0:73:da:aa:62:63:2d:e1:c3:68:86:fd:09:50:60:c5:
         a3:1b:06:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----