Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.mft
File:                     fyySp59i_LkZ55WrXeMT9L2nHd8.mft (raw, json)
Hash identifier:          +rRL4BLTuxbg32RiJUCRz/sSgFrDd3xsDfD3jS3tWLI=
Subject key identifier:   57:0B:CD:D7:09:A6:9D:D6:1C:E4:74:44:0E:29:C0:D0:4E:C2:0E:1F
Authority key identifier: 7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF
Certificate issuer:       /CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
Certificate serial:       0188E60CE544470F99B601912AD21143CC74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.mft
Manifest number:          0743
Signing time:             Fri 23 Jun 2023 02:19:44 +0000
Manifest this update:     Fri 23 Jun 2023 02:19:44 +0000
Manifest next update:     Sat 24 Jun 2023 02:19:44 +0000
Files and hashes:         1: eGvDxj16NO2iA-TbM4I-yOEUH5M.roa (hash: ex98diuLvCzYCR41V11UVEhYGmWUmvrBa7rQf8bfx7c=)
                          2: fyySp59i_LkZ55WrXeMT9L2nHd8.crl (hash: cwJlm4YGahl5JNsVfA0Z2kkGrfikJpxRmybl3JB6Z6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e6:0c:e5:44:47:0f:99:b6:01:91:2a:d2:11:43:cc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
        Validity
            Not Before: Jun 23 02:19:44 2023 GMT
            Not After : Jun 24 02:19:44 2023 GMT
        Subject: CN=570bcdd709a69dd61ce474440e29c0d04ec20e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:d5:d0:8e:41:9c:97:ec:58:f8:99:81:25:
                    c8:63:6f:60:f6:be:2c:39:57:1d:70:ae:b8:28:55:
                    a3:5c:4f:a0:76:1d:8e:5e:37:c4:ec:bb:87:e4:a9:
                    a7:e9:bf:99:2e:f2:94:28:d3:54:c9:1e:df:2d:63:
                    b8:0b:72:ed:97:1a:30:c5:aa:b3:b1:6d:f5:34:57:
                    63:f3:51:2d:46:14:bb:60:cc:e8:c8:8c:e3:7a:52:
                    de:27:ca:cb:05:b4:0c:5a:ab:18:0d:c8:1f:bc:32:
                    ac:23:d4:aa:cb:b6:22:ec:f2:ce:32:0b:66:23:49:
                    65:a8:39:1f:26:fe:da:76:f2:6b:d8:0d:07:97:88:
                    9e:41:95:33:7e:01:16:48:f1:1c:f4:af:27:d3:e2:
                    c0:29:9e:b6:ff:54:ba:4d:5e:16:12:5f:b6:fe:4a:
                    a1:70:c6:41:a9:68:6b:87:f8:d7:0d:e8:e7:cb:87:
                    c1:72:6a:fe:78:98:a2:64:ed:cc:5e:19:9e:4e:c2:
                    2f:ed:c5:b1:52:bb:fa:3d:f4:24:a1:5c:99:14:51:
                    74:43:c1:d9:ae:cd:97:c1:d6:ba:4d:e4:22:59:b7:
                    8a:c3:4e:6b:a6:2f:19:ba:d8:15:68:0e:3b:8d:cf:
                    d5:de:e1:48:c2:8c:83:a5:57:86:4f:1b:0f:64:32:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0B:CD:D7:09:A6:9D:D6:1C:E4:74:44:0E:29:C0:D0:4E:C2:0E:1F
            X509v3 Authority Key Identifier:
                keyid:7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:45:c9:f3:69:8d:f8:7c:6c:43:60:44:8c:31:a1:61:69:
         2f:7f:04:4c:01:24:39:f1:ab:12:ab:82:7b:68:a3:7a:3e:76:
         d8:10:e0:d3:96:71:b9:88:d7:42:e0:75:8b:3d:6d:69:4c:6b:
         62:11:b5:a7:ce:f8:5a:54:96:0f:4b:dd:62:03:e2:38:93:03:
         15:10:26:88:38:52:a7:ee:e7:2f:95:93:a7:f8:99:37:25:a9:
         4b:ef:21:15:54:ef:80:dc:f5:b0:99:09:de:a8:7e:8a:6c:35:
         f2:fd:e6:84:de:fa:55:a1:1a:ba:9f:44:1d:71:38:57:76:04:
         b4:24:62:da:03:8f:8e:38:3a:16:29:4e:0c:71:de:f9:db:ed:
         97:35:c0:df:ee:58:cf:2e:3a:7b:65:e5:13:96:3a:a6:9c:92:
         6f:f5:23:f7:c3:d0:ab:5e:35:48:52:9f:21:3e:c4:f2:73:d5:
         78:a7:12:68:60:8a:b7:77:ad:ef:b7:75:ef:73:c0:89:f5:ec:
         b4:1f:60:f0:10:4d:10:3b:b9:4c:29:96:63:cf:c4:82:f7:9e:
         1d:54:d5:7c:95:da:9b:19:7c:15:16:aa:ba:68:a7:6c:96:d6:
         b6:7d:3c:b5:e0:7d:5d:1e:6d:70:88:00:99:1f:9a:a5:bb:08:
         8d:34:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----