Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.mft
File:                     Fmw4IPtmUFE0wpLyyPS63OTrGrU.mft (raw, json)
Hash identifier:          0m5VEYWeyBzmpF7EJ7hfKycSmvmYrw3u7oskFIM8dtg=
Subject key identifier:   46:AB:3E:5A:66:23:44:93:4C:44:88:D0:08:5A:0C:54:8A:11:96:02
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Certificate issuer:       /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial:       018B7E1887CBE4F1A557E054F504CFA6444F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.mft
Manifest number:          089D
Signing time:             Mon 30 Oct 2023 01:00:18 +0000
Manifest this update:     Mon 30 Oct 2023 01:00:18 +0000
Manifest next update:     Tue 31 Oct 2023 01:00:18 +0000
Files and hashes:         1: Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl (hash: M2ebIgWMvuq/ReaRxcKy1rdiHoJI6q4UG9BkU585bkI=)
                          2: jCIA3m_GsXFl8MxChk9As2mU5w0.roa (hash: vp0AhfL0PN1kiyQhzzrPTW0neQ837Q7iBE209rMdg8A=)
                          3: uvuzmRx8-6cGlxneouFp2r3cQLs.roa (hash: Q8jSuQVbZnL0m4YW+amp+qk6XrA14M8l2UlAYa8wHIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7e:18:87:cb:e4:f1:a5:57:e0:54:f5:04:cf:a6:44:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
        Validity
            Not Before: Oct 30 01:00:18 2023 GMT
            Not After : Oct 31 01:00:18 2023 GMT
        Subject: CN=46ab3e5a662344934c4488d0085a0c548a119602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:36:39:dd:ca:94:f3:76:c6:e6:db:9e:1e:
                    0d:79:10:5f:00:7e:dd:6c:47:2b:9c:9a:ca:eb:cf:
                    5c:b1:0c:e4:fb:37:0c:e6:64:92:02:4d:51:02:29:
                    a0:1c:50:d4:92:e2:17:61:f2:a6:35:ff:75:2e:7b:
                    95:0a:e2:36:af:30:16:c9:b7:13:c9:88:df:f5:67:
                    3d:da:bd:8a:e1:da:db:9e:ab:09:4e:37:25:cb:7a:
                    9c:15:bb:c7:b8:22:49:08:0e:cc:88:1a:e3:ea:bb:
                    dd:2a:b6:b0:77:63:7f:09:92:b9:dc:cb:0b:47:46:
                    82:f9:29:50:2a:39:30:ac:21:ea:0e:39:3b:53:ad:
                    79:94:0b:6d:74:cf:1b:be:18:6e:8a:01:9e:45:90:
                    99:f4:aa:a8:eb:d6:17:0a:e3:55:f9:d4:dd:13:e3:
                    84:8e:4e:87:0f:f9:98:0f:c9:2c:d9:6b:f4:07:b8:
                    c5:b2:c2:d5:77:31:22:34:bf:43:c7:5d:be:78:a9:
                    77:7e:c0:d0:40:49:6a:f2:14:6b:99:51:da:50:4f:
                    04:28:48:a6:24:e8:88:1f:48:3c:cf:6a:a1:d2:5f:
                    20:fc:58:2c:b2:67:6d:90:6c:7f:c2:03:96:65:76:
                    d8:44:5f:e1:db:14:79:5b:a8:19:d3:90:9a:1f:6b:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AB:3E:5A:66:23:44:93:4C:44:88:D0:08:5A:0C:54:8A:11:96:02
            X509v3 Authority Key Identifier:
                keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:72:44:a3:8c:7a:dc:53:76:fa:2c:2e:51:d8:13:19:52:bf:
         33:c8:50:21:f7:3f:ee:2d:a2:22:37:ef:88:f0:f1:99:46:c0:
         df:02:63:c8:73:70:6b:20:40:b2:40:b7:4e:9b:56:cb:26:39:
         69:00:7e:5e:bd:fd:4a:f2:56:19:28:35:95:2e:80:33:7c:a8:
         a6:ae:eb:da:37:b0:16:37:d4:d7:53:ad:f3:d0:13:d3:d6:f7:
         ef:ab:3a:b9:86:4d:a6:46:f6:f4:55:e5:99:ab:c3:05:f4:fc:
         33:dd:b4:52:24:d4:c8:83:aa:99:2d:8d:f5:85:b5:51:55:a1:
         4a:4e:fa:47:4f:4b:36:ce:de:6b:31:69:2a:25:26:ae:0d:8a:
         6c:4b:db:13:36:9b:ae:25:eb:8a:87:67:4e:a8:86:56:e2:3e:
         3c:93:c0:b3:67:20:ec:a8:f5:fc:87:9f:09:6f:22:fd:f7:dd:
         ca:d4:ed:84:ca:0c:ec:89:93:33:73:79:7c:05:3f:83:57:fa:
         cd:fd:62:06:0b:f4:58:4c:94:27:3d:fd:d0:27:54:fc:ca:a0:
         ce:73:c6:67:37:91:17:7e:db:fc:37:5c:7a:d2:68:ba:ac:e0:
         ca:64:f9:68:ff:b3:30:9b:21:53:8c:dd:13:cb:b1:f0:20:2c:
         71:10:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----