Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.mft
File:                     Ah-YeUI--xB8d5E29VPkpvJFoNc.mft (raw, json)
Hash identifier:          pgcEnlKHvW804UjJUC5i1xOxRYVfsJn2AzHWvyAR+KE=
Subject key identifier:   5C:C0:A3:FE:89:8C:B7:65:7E:B6:58:7E:EF:C1:64:77:85:8F:F2:9D
Authority key identifier: 02:1F:98:79:42:3E:FB:10:7C:77:91:36:F5:53:E4:A6:F2:45:A0:D7
Certificate issuer:       /CN=021f9879423efb107c779136f553e4a6f245a0d7
Certificate serial:       01853748DA533B30E96DA444EE38F577016E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ah-YeUI--xB8d5E29VPkpvJFoNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.mft
Manifest number:          E3
Signing time:             Thu 22 Dec 2022 00:43:19 +0000
Manifest this update:     Thu 22 Dec 2022 00:43:19 +0000
Manifest next update:     Fri 23 Dec 2022 00:43:19 +0000
Files and hashes:         1: Ah-YeUI--xB8d5E29VPkpvJFoNc.crl (hash: nk7+hIGDaGCdkEoeC+PHRBMCZRyr0wMvMJFIeKE+gXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:37:48:da:53:3b:30:e9:6d:a4:44:ee:38:f5:77:01:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021f9879423efb107c779136f553e4a6f245a0d7
        Validity
            Not Before: Dec 22 00:43:19 2022 GMT
            Not After : Dec 23 00:43:19 2022 GMT
        Subject: CN=5cc0a3fe898cb7657eb6587eefc16477858ff29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:85:f6:dd:b9:fb:57:d9:c2:1b:ed:e0:5f:
                    cc:1e:ee:91:71:63:f0:63:d1:1e:53:74:c8:97:83:
                    11:46:24:4d:72:3e:7b:50:23:6c:fc:e1:f9:2c:79:
                    4f:e9:25:29:a7:8d:dd:54:a3:ed:bd:3a:f1:f2:c9:
                    2e:58:9f:8d:4b:62:1e:46:c6:b9:a2:e8:f6:7f:f3:
                    10:12:d5:af:bb:6b:9e:a7:59:f2:7e:b9:b6:3f:59:
                    32:b2:10:c4:b7:cb:6a:81:b6:aa:bf:6f:ab:ae:74:
                    af:6f:ad:68:b5:30:14:d0:33:7f:cc:78:10:2c:ad:
                    6c:14:7e:e6:6d:25:23:07:8a:42:96:c8:d1:f8:b4:
                    ce:bc:5a:d0:5f:4c:1f:6e:18:23:11:43:de:61:75:
                    a0:a3:bb:a5:43:4a:56:a5:84:9a:29:a5:5a:35:b4:
                    2b:1e:7c:a3:a9:7d:40:04:a5:bb:77:08:94:c2:5c:
                    c1:91:81:8b:11:29:e2:19:1c:9d:93:26:9e:aa:c4:
                    fc:8a:ca:e6:47:b6:fb:03:64:60:33:75:56:b8:9e:
                    fa:a3:b3:31:f6:6f:7d:82:81:21:71:74:49:99:18:
                    98:b5:19:68:2e:2c:4b:7f:7f:e5:60:c0:1c:30:e0:
                    4d:5e:fb:46:90:18:2f:f3:f9:6c:aa:52:f3:91:ac:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:A3:FE:89:8C:B7:65:7E:B6:58:7E:EF:C1:64:77:85:8F:F2:9D
            X509v3 Authority Key Identifier:
                keyid:02:1F:98:79:42:3E:FB:10:7C:77:91:36:F5:53:E4:A6:F2:45:A0:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ah-YeUI--xB8d5E29VPkpvJFoNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:6b:b8:58:3d:60:5a:7d:80:b3:4f:ce:07:89:0b:0c:81:
         67:f9:c0:a9:92:9c:7f:86:ab:e1:af:76:fd:e7:04:a6:f3:a7:
         e5:aa:c4:08:24:fb:7d:18:9f:ff:9b:dc:11:ac:17:7f:97:7a:
         50:dd:62:52:7f:d0:56:8e:61:b1:46:98:e4:5f:89:9b:d0:a9:
         67:9e:61:e1:bc:08:6f:3a:1d:33:76:09:86:07:44:33:23:e6:
         07:3c:db:49:4f:93:44:8f:59:97:76:5d:21:77:60:fe:93:49:
         d3:7f:85:5d:f6:94:2c:ff:d2:9d:53:37:41:ad:c6:45:f2:8f:
         87:f2:56:26:dd:de:f0:e5:74:9e:42:22:16:df:c9:19:5a:e8:
         a2:02:36:66:f9:81:23:b1:c2:68:9c:94:d0:04:56:b3:cc:b3:
         d2:09:d8:4d:e0:4b:a4:c8:9f:e8:1b:c5:f2:b2:85:db:71:6a:
         e5:e6:51:aa:18:5a:2d:40:80:49:ef:83:fb:bf:bc:76:e9:5a:
         71:e0:7e:c4:dc:9e:ea:a5:98:27:e2:70:96:33:65:41:f1:80:
         a9:69:61:7b:5b:70:06:43:06:eb:48:02:4b:01:16:df:45:29:
         d0:b8:39:5b:b3:cf:46:d2:82:32:ac:00:ef:71:aa:72:0a:70:
         72:40:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----