Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/XFzAfPpPDWXmipUBnCVv1-22b0Q.mft
File:                     XFzAfPpPDWXmipUBnCVv1-22b0Q.mft (raw, json)
Hash identifier:          QP2dtDt4ribxSle4jeLF7SqAfElSw9hU/T0YjALhmNA=
Subject key identifier:   73:86:FC:95:98:A4:0B:48:12:DF:97:5C:9D:4C:09:E6:70:01:B6:E0
Authority key identifier: 5C:5C:C0:7C:FA:4F:0D:65:E6:8A:95:01:9C:25:6F:D7:ED:B6:6F:44
Certificate issuer:       /CN=5c5cc07cfa4f0d65e68a95019c256fd7edb66f44
Certificate serial:       018EE3FDDC1841DC17240A3D42FFC3049E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XFzAfPpPDWXmipUBnCVv1-22b0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/XFzAfPpPDWXmipUBnCVv1-22b0Q.mft
Manifest number:          0792
Signing time:             Mon 15 Apr 2024 23:00:48 +0000
Manifest this update:     Mon 15 Apr 2024 23:00:48 +0000
Manifest next update:     Tue 16 Apr 2024 23:00:48 +0000
Files and hashes:         1: U50M3xIUSlKjP9H42DDevL7rW_c.roa (hash: +D2w3jEd5LzJ024OAoU9O419fzRVlBf2FWVtI0ZxyOA=)
                          2: XFzAfPpPDWXmipUBnCVv1-22b0Q.crl (hash: Elb/7xBEXxzex09/SEU/zqjyQEAeFf5fU63UBjod8eU=)
                          3: YinwcUCMN5iX2SngTOV2ZfybKwU.roa (hash: +mTSnJqnngKSlVHPqWCyOg6XfxueZRJLUHxxB0Ei12M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e3:fd:dc:18:41:dc:17:24:0a:3d:42:ff:c3:04:9e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5cc07cfa4f0d65e68a95019c256fd7edb66f44
        Validity
            Not Before: Apr 15 23:00:48 2024 GMT
            Not After : Apr 16 23:00:48 2024 GMT
        Subject: CN=7386fc9598a40b4812df975c9d4c09e67001b6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:8e:1a:cf:06:fb:9c:ae:04:02:b6:16:01:
                    3d:31:77:22:fa:76:8d:f1:99:89:69:55:6e:f6:e3:
                    51:f5:94:22:fc:9c:a7:2e:5f:3d:fa:cb:dc:95:d3:
                    50:4e:15:91:e3:ce:74:96:b8:9b:b6:7d:76:c1:c6:
                    d5:9d:72:0d:64:be:fa:6a:10:2b:ec:6a:b0:0a:57:
                    17:1e:a0:c9:73:ff:45:6d:e7:3b:18:be:39:f4:56:
                    af:f1:d2:3f:88:a8:1b:ae:52:fa:68:39:85:bd:cd:
                    15:97:21:2a:fe:6b:1d:81:95:55:30:0b:c1:04:6b:
                    a0:b0:60:e3:94:e0:5f:88:37:f0:ca:9f:5a:cb:74:
                    74:34:a5:47:fc:5c:8e:f2:b8:d8:2a:f7:44:5f:df:
                    1f:9b:d3:07:ca:e8:6a:0d:80:bb:fb:59:f6:3f:8f:
                    7c:37:f4:b4:60:3f:dc:20:b9:7e:15:8a:b6:9e:e0:
                    fc:99:50:18:1f:d2:44:87:f4:c5:19:d4:5b:8b:c1:
                    ea:0c:82:30:c8:ad:df:31:18:d0:85:dd:c1:5a:ed:
                    93:34:81:de:2b:0f:55:52:f5:f7:9e:56:e1:4a:4a:
                    95:a1:1b:d3:74:c6:45:6b:f0:66:1e:e3:af:23:34:
                    43:9d:22:00:4b:3d:0c:a7:88:8c:48:17:6f:c9:69:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:86:FC:95:98:A4:0B:48:12:DF:97:5C:9D:4C:09:E6:70:01:B6:E0
            X509v3 Authority Key Identifier:
                keyid:5C:5C:C0:7C:FA:4F:0D:65:E6:8A:95:01:9C:25:6F:D7:ED:B6:6F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFzAfPpPDWXmipUBnCVv1-22b0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/XFzAfPpPDWXmipUBnCVv1-22b0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/XFzAfPpPDWXmipUBnCVv1-22b0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:0c:10:59:0a:0c:0a:71:dd:d5:18:0e:9d:62:44:45:5c:
         f8:81:9e:10:ac:74:0a:4d:ef:e6:10:9a:2b:7a:18:17:9b:4b:
         b2:8c:c4:c2:fa:17:d3:48:16:88:a6:0a:39:42:97:5a:49:f4:
         3d:c4:4b:eb:5b:1c:a3:57:75:af:51:af:a3:68:56:09:dc:62:
         9a:2f:03:b7:52:a5:cc:26:fc:d8:ca:ef:05:21:73:6e:c9:20:
         8b:0a:d2:65:be:fd:1d:4c:47:d7:c3:b6:4d:47:7c:28:94:83:
         22:11:02:ed:a1:ba:c3:95:ff:31:7e:4c:13:04:cd:5f:f7:6c:
         20:0a:66:35:76:4e:ca:8e:25:a4:4f:51:cc:99:e4:2c:79:df:
         93:fe:f2:80:6c:fd:f2:23:6d:eb:cb:ed:d8:7c:77:26:ec:33:
         08:84:89:a9:55:cf:00:33:da:29:3f:0a:0a:0d:41:33:39:07:
         78:e2:6b:e3:10:c3:59:35:b8:81:0f:0a:40:51:6e:89:d1:64:
         61:8e:5d:cb:3a:10:d7:c8:d4:93:fb:f5:c9:1c:8a:3e:1f:7f:
         fa:0b:8d:79:a7:8a:fe:14:1f:c7:b7:a4:ac:02:0a:2e:80:b7:
         50:42:03:f7:ec:50:73:bd:09:cd:4d:b9:b1:e3:56:3f:62:82:
         a8:2d:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----