Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.mft
File:                     C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.mft (raw, json)
Hash identifier:          BFnvOEDQQS6HDGUkQbQE8x+qk1gzfHe5p6U76evjAXs=
Subject key identifier:   A6:D3:70:FD:31:EE:33:B8:F1:AF:B3:DB:13:01:1E:E0:88:5E:3F:BF
Authority key identifier: 0B:86:26:88:08:71:12:72:7E:DD:0D:DB:BE:AC:36:78:3A:3B:7D:2A
Certificate issuer:       /CN=0b862688087112727edd0ddbbeac36783a3b7d2a
Certificate serial:       018C86AC18C82E6D8FF9CDBC9847FBE242E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.mft
Manifest number:          0520
Signing time:             Wed 20 Dec 2023 10:01:14 +0000
Manifest this update:     Wed 20 Dec 2023 10:01:14 +0000
Manifest next update:     Thu 21 Dec 2023 10:01:14 +0000
Files and hashes:         1: 5Pw36qCf2EixesfOAtEStjMBxhI.roa (hash: my5dw8ks/VdG7HVuyO90YtxItDQsEeQctITLzNq64fc=)
                          2: C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.crl (hash: 11mCyRbSdGpD1IHRZcSTzx1yjgYsRqYq8DB74PfgVx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:86:ac:18:c8:2e:6d:8f:f9:cd:bc:98:47:fb:e2:42:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b862688087112727edd0ddbbeac36783a3b7d2a
        Validity
            Not Before: Dec 20 10:01:14 2023 GMT
            Not After : Dec 21 10:01:14 2023 GMT
        Subject: CN=a6d370fd31ee33b8f1afb3db13011ee0885e3fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b0:7d:10:5d:fb:50:fd:8a:9e:29:e1:db:e3:
                    7b:97:72:5b:9d:e6:86:2d:22:81:fb:36:c6:6f:25:
                    df:84:82:25:f5:42:38:d6:4c:10:63:b3:1a:0d:e4:
                    99:7c:d0:85:13:1c:ac:c3:29:0d:8d:74:40:12:ad:
                    78:fb:05:b3:75:e4:63:d7:a6:70:48:e1:10:6f:b0:
                    58:ae:63:53:f5:d3:5e:86:9b:0f:41:e1:a3:e9:a9:
                    3e:d2:d3:5f:75:e1:a6:1a:7a:22:82:6f:4a:02:69:
                    a4:c1:c7:61:fe:d1:3e:0f:a1:ba:ea:a2:88:ff:49:
                    e2:10:67:43:a4:de:36:4b:ec:7b:85:43:ef:0c:64:
                    aa:7b:90:88:0b:85:50:85:a8:25:57:dc:a2:76:98:
                    23:c5:14:d2:90:37:08:64:3b:a0:cc:3d:6c:58:37:
                    89:c2:4f:28:bf:fa:2a:4e:c7:f6:f0:35:06:98:61:
                    90:3b:76:c7:3d:c0:46:70:83:4d:5b:04:ec:e7:57:
                    16:f4:5c:bc:e6:87:b7:ac:f9:ca:a8:8f:2d:2f:46:
                    97:37:9e:da:bb:18:56:18:20:04:4e:a3:2b:7c:2a:
                    8f:0e:a2:36:7f:2a:0a:74:75:a3:86:cd:7f:ac:4f:
                    e2:6d:2e:c6:52:78:d4:55:39:56:f7:cc:f8:30:d9:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D3:70:FD:31:EE:33:B8:F1:AF:B3:DB:13:01:1E:E0:88:5E:3F:BF
            X509v3 Authority Key Identifier:
                keyid:0B:86:26:88:08:71:12:72:7E:DD:0D:DB:BE:AC:36:78:3A:3B:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:96:85:b4:dc:4e:8d:9f:be:91:05:1b:d8:c0:f6:c2:4b:4e:
         92:c5:f3:e7:c3:f4:5d:a2:ba:f0:65:6d:2a:d2:48:69:11:a9:
         4e:07:7b:f7:94:97:72:ad:07:26:3b:12:b3:23:af:1a:2b:a1:
         8f:46:43:e9:3a:fa:39:20:3e:48:ca:3d:73:7a:fc:dd:03:de:
         28:a0:4c:4b:86:b7:4d:d5:33:91:4d:41:f8:c0:b7:ef:94:a9:
         90:4d:6c:fe:85:68:df:5a:b8:42:89:66:35:68:70:c8:12:94:
         ea:3b:36:8e:a2:d9:03:9f:2c:d0:62:4c:ce:4a:ab:e6:35:cf:
         c7:b8:97:92:42:c4:81:ff:d0:ab:88:a3:de:5c:c7:2b:f8:fe:
         c6:fa:3d:fb:ec:1f:9a:8c:14:a8:3a:39:14:ae:9d:74:91:70:
         0d:21:95:6d:05:e2:8c:06:33:45:16:4d:fc:9c:95:34:60:10:
         40:0f:b4:b3:6b:bc:34:cf:24:51:11:20:a1:2f:2f:aa:d1:c0:
         34:c3:c8:c9:36:c0:1d:f7:0e:bf:d4:36:6c:7c:3c:00:35:df:
         d6:38:2a:67:bd:0d:7c:3a:bd:1c:27:2d:46:b3:03:c8:01:0c:
         c6:a6:db:2d:7a:da:90:10:cf:ec:04:87:49:43:71:7d:0d:45:
         07:72:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----