Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/NUR56bWheG5uh0B66d3lEXeaUH8.mft
File:                     NUR56bWheG5uh0B66d3lEXeaUH8.mft (raw, json)
Hash identifier:          WcoAMUumCvF/fKmSCg1VEz+HYmDhDcjI1UXGmMcjfM4=
Subject key identifier:   11:68:C6:5D:FA:BA:17:35:F7:37:05:E5:C1:22:43:D0:B3:65:FD:B1
Authority key identifier: 35:44:79:E9:B5:A1:78:6E:6E:87:40:7A:E9:DD:E5:11:77:9A:50:7F
Certificate issuer:       /CN=354479e9b5a1786e6e87407ae9dde511779a507f
Certificate serial:       018513E6DB4A79D7BCE3819646469AC11217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUR56bWheG5uh0B66d3lEXeaUH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/NUR56bWheG5uh0B66d3lEXeaUH8.mft
Manifest number:          05FE
Signing time:             Thu 15 Dec 2022 03:49:34 +0000
Manifest this update:     Thu 15 Dec 2022 03:49:34 +0000
Manifest next update:     Fri 16 Dec 2022 03:49:34 +0000
Files and hashes:         1: DzWlzWcfAj2NtHbR2GGDWdx7qxg.roa (hash: QmI6FPGLwMzhwWs+7nD+bM3D6cmDtwLOUzVJ5tPADkc=)
                          2: HQ1XE8vgPiBK9Opjp91LVRKzMMQ.roa (hash: eB6AiaEe0Tj1dr9KrylFpR9EptAFC55nV4LlVz1O9mI=)
                          3: NUR56bWheG5uh0B66d3lEXeaUH8.crl (hash: 4DyFfRBPefLiTPnwvXJP3BAsGWmTCTu7+/bvZBAKx7E=)
                          4: hwkqjEsEd4sOlgPtr8fc0BmdMBc.roa (hash: yb0Vb/Bnfd9J4gxSJrSIdm47oNubI7WJRzvJ/qrRBX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:13:e6:db:4a:79:d7:bc:e3:81:96:46:46:9a:c1:12:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354479e9b5a1786e6e87407ae9dde511779a507f
        Validity
            Not Before: Dec 15 03:49:34 2022 GMT
            Not After : Dec 16 03:49:34 2022 GMT
        Subject: CN=1168c65dfaba1735f73705e5c12243d0b365fdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:a2:b0:20:ea:3e:b2:7c:c9:0f:ec:cc:47:
                    cd:d4:65:48:74:35:35:cf:bc:99:3b:e8:4e:ff:a8:
                    74:20:7e:96:f5:34:8c:54:17:0b:51:bc:76:3b:0f:
                    2b:ec:e7:be:9f:20:0e:8e:12:ae:f3:4f:bf:f7:5c:
                    2c:d7:48:05:eb:4c:fd:df:aa:3d:3b:83:b1:c2:1d:
                    66:b1:64:98:c9:a6:48:ca:18:c1:a5:4f:7d:3c:be:
                    d2:7d:18:c1:f1:3d:8c:cc:f5:8f:26:ec:d1:c9:96:
                    a1:1a:24:b8:8d:9e:5d:0a:a0:15:3f:a7:2d:dd:ed:
                    c3:e3:b7:51:1c:83:66:95:d5:f5:dc:ec:da:ce:03:
                    11:ea:c9:05:23:9c:ba:a2:97:4a:f3:9f:eb:0e:66:
                    17:2e:e0:1f:72:1e:a6:5c:cf:1e:02:9a:fe:1d:00:
                    0b:62:2a:97:38:4f:b5:5e:68:8a:50:8e:3f:88:01:
                    ae:de:37:df:6d:1c:eb:ea:ea:a6:a1:9c:53:d2:88:
                    8b:24:b8:c7:5b:eb:6a:bb:83:48:10:75:36:3e:cb:
                    fa:0d:f6:2d:08:e2:8c:71:26:b1:10:3d:e3:c6:c6:
                    91:73:c2:5a:fa:ea:71:46:ae:33:eb:87:8a:d6:9c:
                    03:0a:26:26:d2:86:4a:f2:c4:46:94:0e:6b:e1:b8:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:C6:5D:FA:BA:17:35:F7:37:05:E5:C1:22:43:D0:B3:65:FD:B1
            X509v3 Authority Key Identifier:
                keyid:35:44:79:E9:B5:A1:78:6E:6E:87:40:7A:E9:DD:E5:11:77:9A:50:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUR56bWheG5uh0B66d3lEXeaUH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/NUR56bWheG5uh0B66d3lEXeaUH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/NUR56bWheG5uh0B66d3lEXeaUH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f2:0c:b9:01:9b:7d:3c:7c:ca:aa:e1:9e:be:12:57:de:56:
         14:47:dd:ee:f4:93:92:8c:83:65:52:df:32:f0:d4:04:12:4c:
         e5:6d:99:4c:96:59:ee:51:bb:e8:7d:11:bc:dd:4a:11:5f:83:
         0d:eb:11:4b:78:d5:9b:60:94:45:58:50:34:90:78:42:8f:90:
         d5:88:fc:3c:6d:b0:1b:56:d2:f1:50:e6:1c:c4:b2:6f:07:75:
         ba:81:38:0a:d3:a9:96:fb:25:4a:d9:53:4c:21:4a:2d:5b:2b:
         4e:35:62:06:fc:f1:c2:85:ba:1e:11:fb:10:d1:d3:5f:cb:9f:
         82:6a:37:05:c4:cf:97:78:f9:ad:78:89:a9:0f:61:3f:a7:ee:
         68:de:b9:0b:16:55:0f:8b:0e:13:71:85:a4:d0:46:95:c0:33:
         26:f9:b1:a8:75:ca:8b:48:c7:a2:f2:58:dd:59:1a:21:78:02:
         2b:7f:37:90:96:07:02:14:d0:49:89:3d:e5:8a:d6:41:94:00:
         27:9e:c8:83:74:ec:5f:93:83:1a:a7:57:f7:5e:d6:89:a2:25:
         d6:a3:9b:63:43:2b:0f:d6:38:6c:71:c4:c2:05:37:84:23:17:
         3a:0b:68:8a:b8:80:48:37:9b:92:38:59:26:6e:90:5a:08:0d:
         81:eb:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----