Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/473f1b-fcbb-420c-8c5c-a30b81da5cee/1/Yar5fXqOr7eBUsTVdaL5awTj2dA.mft
File:                     Yar5fXqOr7eBUsTVdaL5awTj2dA.mft (raw, json)
Hash identifier:          TbFVTdzaptjP1YWDLFUiiQCEG1B4SYt0NkbQV7Il94w=
Subject key identifier:   EC:CD:A7:B5:CC:44:38:23:07:0D:A6:61:D0:6A:8B:B9:1A:2F:8F:F2
Authority key identifier: 61:AA:F9:7D:7A:8E:AF:B7:81:52:C4:D5:75:A2:F9:6B:04:E3:D9:D0
Certificate issuer:       /CN=61aaf97d7a8eafb78152c4d575a2f96b04e3d9d0
Certificate serial:       018AB0BFC8D3BA5E267DF4C1265A30EF4891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yar5fXqOr7eBUsTVdaL5awTj2dA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/473f1b-fcbb-420c-8c5c-a30b81da5cee/1/Yar5fXqOr7eBUsTVdaL5awTj2dA.mft
Manifest number:          0EF7
Signing time:             Wed 20 Sep 2023 04:01:13 +0000
Manifest this update:     Wed 20 Sep 2023 04:01:13 +0000
Manifest next update:     Thu 21 Sep 2023 04:01:13 +0000
Files and hashes:         1: 6qWccT9w6csTHmhbCE1FrBLArOw.roa (hash: NTW/w2dcE6gdvE5Bgl0J9MJtIMDOPPDyXl3EHPmEjdE=)
                          2: NtiOgv9jGNzBi-DitDTH7DaTGk0.roa (hash: ojfvSRPbzOAHwQl8L3tBNTIFolW8HS9b6KwvYwmExUg=)
                          3: Yar5fXqOr7eBUsTVdaL5awTj2dA.crl (hash: EOT2x9gLUlzb1Qn7USg4wMMls1S6rpJaP2xFAaYX1JY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b0:bf:c8:d3:ba:5e:26:7d:f4:c1:26:5a:30:ef:48:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aaf97d7a8eafb78152c4d575a2f96b04e3d9d0
        Validity
            Not Before: Sep 20 04:01:13 2023 GMT
            Not After : Sep 21 04:01:13 2023 GMT
        Subject: CN=eccda7b5cc443823070da661d06a8bb91a2f8ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:40:a5:9d:72:05:29:61:8c:d6:23:31:0b:
                    c9:1f:00:16:a9:47:94:c4:82:bb:58:73:22:eb:78:
                    30:77:29:9b:3f:9b:b1:06:9b:fa:65:ef:a5:cc:c6:
                    f8:62:34:3e:8e:53:6e:67:f3:e5:81:df:2f:fe:f0:
                    bb:a0:12:38:bb:00:b6:3f:53:38:da:24:08:74:4c:
                    39:6b:4c:c0:35:6c:4e:2d:04:67:12:4a:cc:11:f8:
                    c9:4d:3a:2a:69:3d:0c:3e:7c:ec:ed:a4:2a:4c:67:
                    be:59:15:dc:f7:bc:60:4a:cf:b8:20:aa:88:13:31:
                    ec:63:f3:62:59:ec:7b:a7:53:f4:64:71:29:82:f0:
                    d2:89:1c:30:75:e5:02:7a:c4:cd:59:aa:c5:3e:3b:
                    cb:da:d7:45:bb:10:a0:e3:62:18:41:4c:31:42:73:
                    b5:8f:ec:ba:a5:2c:6d:33:bb:3a:e4:aa:13:ad:d1:
                    ba:7d:57:d5:8a:7b:cc:a1:37:b3:7b:0e:51:b9:25:
                    b2:f7:d1:d5:96:39:f2:01:ce:64:b7:0a:32:89:5e:
                    fa:d3:0a:d6:78:2a:90:4d:46:4a:f5:a7:f7:0d:68:
                    b5:5c:17:3a:7a:81:43:e3:0f:c2:0a:38:28:ce:63:
                    e8:b3:06:68:35:e7:b5:73:52:3a:e3:43:16:a5:1c:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CD:A7:B5:CC:44:38:23:07:0D:A6:61:D0:6A:8B:B9:1A:2F:8F:F2
            X509v3 Authority Key Identifier:
                keyid:61:AA:F9:7D:7A:8E:AF:B7:81:52:C4:D5:75:A2:F9:6B:04:E3:D9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yar5fXqOr7eBUsTVdaL5awTj2dA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/473f1b-fcbb-420c-8c5c-a30b81da5cee/1/Yar5fXqOr7eBUsTVdaL5awTj2dA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/473f1b-fcbb-420c-8c5c-a30b81da5cee/1/Yar5fXqOr7eBUsTVdaL5awTj2dA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:c1:dc:68:cc:d3:fd:a2:ff:67:f3:88:9c:99:81:3b:1b:
         28:c3:cd:85:09:81:ed:ef:04:b5:fa:a4:d4:db:22:52:92:08:
         da:b5:e9:eb:b7:c9:bd:fa:93:cd:b2:61:41:8d:96:7d:16:0a:
         e0:57:00:1e:70:8e:bc:0d:82:8c:9d:af:73:60:d0:d1:a6:87:
         a5:cf:6d:cc:ea:86:b4:0f:6d:00:3e:cd:0c:7a:4b:24:46:11:
         17:57:0b:5f:68:d8:69:11:37:42:fc:f9:f4:7f:df:37:05:6c:
         8e:dc:a2:56:1f:39:81:ca:30:c5:33:e9:7c:94:45:dc:58:e9:
         f7:88:4d:07:43:d7:db:af:3c:f0:eb:63:03:89:d0:6d:e5:63:
         d4:cf:34:cf:cd:49:2a:a7:10:f8:21:0a:f2:be:0b:ec:60:35:
         9b:fc:68:1f:d0:70:46:1f:e2:9d:ad:b9:0a:2a:76:e7:e8:be:
         7c:4b:1b:0a:0e:61:f3:c7:90:08:01:4e:ec:bc:90:4e:ce:17:
         fb:1b:25:2b:28:e8:9a:44:52:ee:c8:eb:58:01:6a:23:90:9f:
         cb:ef:d1:3c:1b:dd:63:cf:4f:69:64:e2:4a:4e:46:df:77:dc:
         95:9b:e1:e7:90:59:c3:ac:8a:b0:bd:4a:dd:8a:d8:d7:81:7c:
         f4:21:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----