Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/CDmWxvLno4hx-MAB9Pi6SnBeh5k.mft
File:                     CDmWxvLno4hx-MAB9Pi6SnBeh5k.mft (raw, json)
Hash identifier:          XD7GimV1Lw1pZWcBrT+i9tqdjtYP+QJbS2QC/WCr5hs=
Subject key identifier:   DE:33:F9:56:E9:55:98:18:A0:C1:5E:68:5D:71:DF:D0:99:CF:8C:AF
Authority key identifier: 08:39:96:C6:F2:E7:A3:88:71:F8:C0:01:F4:F8:BA:4A:70:5E:87:99
Certificate issuer:       /CN=083996c6f2e7a38871f8c001f4f8ba4a705e8799
Certificate serial:       01867D5CFC53AE7E55E205F8904CE2C5A9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmWxvLno4hx-MAB9Pi6SnBeh5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/CDmWxvLno4hx-MAB9Pi6SnBeh5k.mft
Manifest number:          0C9C
Signing time:             Thu 23 Feb 2023 08:21:30 +0000
Manifest this update:     Thu 23 Feb 2023 08:21:30 +0000
Manifest next update:     Fri 24 Feb 2023 08:21:30 +0000
Files and hashes:         1: CDmWxvLno4hx-MAB9Pi6SnBeh5k.crl (hash: simxMoLGuZiI0xepN1L4AeUxH3jcWTmRXL52czA/2xk=)
                          2: HzbxpcWjWvqJy2yYsBfVsmh8_Js.roa (hash: /VP/uIjZ0lUZufbEcGKlKjsdJqloYAgM8YzbdLal4vQ=)
                          3: LPtB1Fqr61SFpsykpHGFJ2XQQ3w.roa (hash: W1WLFbDUscMvG8gOIcgzJShWuI6KRmOyPXlmypu8t/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7d:5c:fc:53:ae:7e:55:e2:05:f8:90:4c:e2:c5:a9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083996c6f2e7a38871f8c001f4f8ba4a705e8799
        Validity
            Not Before: Feb 23 08:21:30 2023 GMT
            Not After : Feb 24 08:21:30 2023 GMT
        Subject: CN=de33f956e9559818a0c15e685d71dfd099cf8caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:d4:74:5c:d7:92:70:d1:b0:a7:c3:d2:41:
                    c3:a3:58:d2:b7:b4:35:12:5e:3d:64:e8:f1:2f:ec:
                    51:45:15:92:65:8d:31:a8:7e:ec:30:3c:ac:7d:c7:
                    82:cb:2d:cf:66:d7:af:4e:94:1e:f4:9b:25:92:6d:
                    11:18:3a:38:93:fa:20:52:c6:cb:bd:6c:65:b3:50:
                    da:5b:77:ec:af:e4:ad:7d:db:05:db:bc:8a:07:c4:
                    16:98:42:6b:be:8e:42:97:d3:30:49:84:3c:ac:4c:
                    08:87:c8:e7:dc:12:fb:8b:d8:69:c5:00:ca:be:80:
                    30:7f:58:db:30:24:07:9b:ff:ab:9c:ab:7c:4a:87:
                    91:08:38:9f:40:c6:29:70:de:da:15:6e:bc:e0:fa:
                    1c:a1:96:65:db:ac:89:63:4c:cd:b3:e9:70:8f:ef:
                    fe:4e:31:15:f7:5f:79:c2:73:ea:9d:19:19:92:d1:
                    ab:01:c6:1e:76:c5:e6:33:df:e8:af:57:1b:9c:68:
                    35:b1:d7:88:8b:94:71:c8:b5:77:17:64:23:12:0c:
                    cc:2a:2c:32:65:99:7c:61:35:73:a4:45:d5:79:26:
                    d6:55:be:b4:34:e6:12:af:50:06:0e:41:90:35:84:
                    6c:30:73:6a:03:24:63:bf:14:3b:8b:14:36:89:63:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:33:F9:56:E9:55:98:18:A0:C1:5E:68:5D:71:DF:D0:99:CF:8C:AF
            X509v3 Authority Key Identifier:
                keyid:08:39:96:C6:F2:E7:A3:88:71:F8:C0:01:F4:F8:BA:4A:70:5E:87:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmWxvLno4hx-MAB9Pi6SnBeh5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/CDmWxvLno4hx-MAB9Pi6SnBeh5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/CDmWxvLno4hx-MAB9Pi6SnBeh5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:62:8e:85:ff:40:9a:3a:23:f8:2b:f0:be:7b:98:12:3f:78:
         e4:37:51:d7:44:45:0e:a6:69:95:7d:74:58:cc:32:53:34:58:
         c7:ee:9e:eb:92:44:d1:a8:b5:06:76:ba:b1:99:df:60:78:60:
         40:03:82:14:da:44:ff:9c:9e:20:6d:35:04:8a:84:38:4c:1c:
         1d:06:d4:e7:5c:d5:e0:3f:35:bd:38:87:0a:a0:88:a5:22:e2:
         b0:09:a6:83:ab:62:b2:f8:d1:4d:25:d0:1b:1c:c9:95:21:15:
         6c:56:f8:de:7b:c3:59:25:4b:19:6f:62:b4:1e:67:d7:3d:6c:
         83:a5:20:bf:e9:77:28:78:62:c2:75:b6:b9:ab:5d:76:4b:fd:
         b5:5e:59:d0:f4:9b:70:83:74:98:70:95:67:ac:dc:fb:4b:46:
         a5:3d:9e:03:26:76:82:e9:36:79:48:6a:37:29:94:cc:06:80:
         5c:d2:be:8e:9e:d4:ca:fc:e0:e3:e0:f0:a4:33:f6:77:52:35:
         74:fa:e5:6e:6e:c7:94:e4:0c:c3:4d:e9:6f:2f:04:97:ad:6e:
         c2:36:84:3d:9b:74:3d:15:f9:31:6c:68:c1:5f:9f:6b:0c:78:
         40:0b:91:6f:be:43:14:53:fd:cf:8f:b6:3d:fc:a6:65:4c:b1:
         95:89:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----