Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.mft
File:                     vpapQJ2ZXnArISyT9tTJmp2ybko.mft (raw, json)
Hash identifier:          gJo6uoWC3Ue9yGdClTrvb9AGRYvB4ydf2w9hq9V3sK4=
Subject key identifier:   6F:09:6D:AE:32:FB:CD:39:01:6D:C7:BF:28:88:25:3E:97:52:76:0F
Authority key identifier: BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
Certificate issuer:       /CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Certificate serial:       018AD64C2B11AF9732C17DC4B2556EFAB155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.mft
Manifest number:          036B
Signing time:             Wed 27 Sep 2023 11:00:30 +0000
Manifest this update:     Wed 27 Sep 2023 11:00:30 +0000
Manifest next update:     Thu 28 Sep 2023 11:00:30 +0000
Files and hashes:         1: ITeyHGvsM61zDSXHkKUitbV5Dss.roa (hash: POjULMvDZpDksVMuf2Vyhx9htj/1YuSULEUB/bwj6Jw=)
                          2: JUbj1WHOJf6pu0Rh9tlh01k6L44.roa (hash: RPC8cpeNnTVS92X5WCWJ+DRVbNL5iWfkDN7pVMOkUQQ=)
                          3: TVzRZfQ4YsSEESQzIbaZ23PPUEM.roa (hash: UTBcfF8+2Zo0Ocuj9TS7VVTZENaX2FGZtN/CX/5k8Ms=)
                          4: lCLEuhTXsjjMpbzOcaCN7wTy-es.roa (hash: ybQEKhZN7GJiDOCV0hRI/RfWbazgbDz9/mZPSzHghag=)
                          5: vpapQJ2ZXnArISyT9tTJmp2ybko.crl (hash: k+Ibi+oAIO4eiTtHsY9efW0tj8I3VIG2j1HehvjMjzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d6:4c:2b:11:af:97:32:c1:7d:c4:b2:55:6e:fa:b1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
        Validity
            Not Before: Sep 27 11:00:30 2023 GMT
            Not After : Sep 28 11:00:30 2023 GMT
        Subject: CN=6f096dae32fbcd39016dc7bf2888253e9752760f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:f1:3f:d3:a3:23:86:5c:7d:1f:3c:2f:63:
                    17:4a:bb:46:b0:7e:91:ac:b0:18:b9:87:b9:d6:f8:
                    99:b1:99:fa:17:ca:01:f6:dc:bb:ea:b4:39:18:63:
                    e7:38:88:40:45:b7:ff:21:22:bb:86:59:ac:ac:8c:
                    29:ea:bc:8a:42:59:59:90:f0:d0:51:22:05:43:6d:
                    c9:20:ab:45:8c:68:86:1c:d9:ed:5e:c8:47:47:76:
                    e8:59:71:8a:2c:9d:b3:96:2f:e1:30:dc:92:c1:67:
                    3f:0e:e3:7c:18:34:c2:d2:b3:6f:8d:f7:21:4f:50:
                    f5:b1:07:40:20:d9:b5:b2:aa:11:41:62:99:66:cf:
                    80:01:b3:62:5a:30:76:48:41:60:ef:30:3f:97:20:
                    9d:72:3f:59:82:9f:b4:ad:c4:44:2e:c5:dd:18:05:
                    1a:f7:0c:38:9c:e7:1c:3a:24:04:08:10:65:6f:0a:
                    05:a7:2f:90:4e:36:30:b2:23:5c:06:fd:5b:7c:3b:
                    e1:55:f7:ad:8d:10:bc:bf:a7:b8:c8:65:65:1b:1a:
                    33:d7:0c:59:ee:39:29:79:01:7c:0e:3f:ee:be:b8:
                    b9:e3:8f:63:59:3f:e1:22:35:ed:21:98:e6:fc:52:
                    a9:d2:17:cf:bc:34:0e:15:10:51:f9:7d:00:1d:b6:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:09:6D:AE:32:FB:CD:39:01:6D:C7:BF:28:88:25:3E:97:52:76:0F
            X509v3 Authority Key Identifier:
                keyid:BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a7:aa:37:b1:dd:0c:41:c1:3a:c6:44:7c:b0:8e:0d:68:a6:
         67:d5:90:3f:10:72:a6:2f:1b:64:c2:f5:eb:0e:ae:e0:ca:32:
         0d:67:f4:50:4d:a5:5a:85:97:10:53:97:8f:04:24:a1:84:ed:
         dd:79:8d:5a:31:40:4d:6a:88:a5:42:30:82:f2:a5:58:a2:b2:
         6a:ef:69:46:1d:9c:e4:99:af:11:5e:a7:58:15:40:29:ae:5d:
         79:53:f9:15:14:10:55:20:4a:be:9e:f1:d8:78:03:3e:19:54:
         93:17:c4:2d:bf:9e:0e:50:73:79:e2:f7:12:39:82:ec:df:47:
         25:0e:3c:cd:15:94:7c:69:d5:c7:8f:8c:8a:09:87:cd:40:1d:
         f6:df:59:e7:81:29:76:95:8a:c9:25:86:98:87:0a:14:e2:91:
         2d:59:41:91:6c:44:0f:01:33:41:fd:21:0f:f0:e2:66:10:ca:
         9a:b7:d9:d8:ca:2a:b4:cb:a2:ea:5e:d7:5e:2c:13:e3:71:9a:
         d8:15:5b:ca:15:c5:07:f6:46:14:98:96:23:cf:d0:cf:5a:03:
         51:ba:0e:34:8d:1a:f4:8f:bd:b1:28:9d:4a:4a:06:1b:1b:85:
         c8:44:7b:9e:43:4f:73:6a:97:b5:b6:5a:34:15:19:cc:2e:fd:
         0d:9f:ac:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----