Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.mft
File:                     zwtOQgEqslYSSLwY8EQsIAfIyqI.mft (raw, json)
Hash identifier:          RUBSQGMgHXW320uIT9x/CrpnYuAlHPXtRSMOb65/ujs=
Subject key identifier:   C9:11:67:C3:31:55:F3:16:74:04:A2:18:A2:D0:3B:60:C0:54:39:E2
Authority key identifier: CF:0B:4E:42:01:2A:B2:56:12:48:BC:18:F0:44:2C:20:07:C8:CA:A2
Certificate issuer:       /CN=cf0b4e42012ab2561248bc18f0442c2007c8caa2
Certificate serial:       0188E0C7A90D0FA39A288984AF6B330DAA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwtOQgEqslYSSLwY8EQsIAfIyqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.mft
Manifest number:          02C4
Signing time:             Thu 22 Jun 2023 01:46:01 +0000
Manifest this update:     Thu 22 Jun 2023 01:46:01 +0000
Manifest next update:     Fri 23 Jun 2023 01:46:01 +0000
Files and hashes:         1: rVdZo4dTzsfhpQ6QNxn9MdXihNg.roa (hash: IdR2LGNSltiWZjT1s8s2sf9Y0pygwqob9p+fX22nvTU=)
                          2: zwtOQgEqslYSSLwY8EQsIAfIyqI.crl (hash: 4vkYuHkKZEgtA+ituEaGkbW4jPEkopHIFP/SKHB4G5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e0:c7:a9:0d:0f:a3:9a:28:89:84:af:6b:33:0d:aa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0b4e42012ab2561248bc18f0442c2007c8caa2
        Validity
            Not Before: Jun 22 01:46:01 2023 GMT
            Not After : Jun 23 01:46:01 2023 GMT
        Subject: CN=c91167c33155f3167404a218a2d03b60c05439e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:a1:aa:45:19:c5:e0:bc:4a:68:13:4b:89:
                    ef:94:b8:a1:e3:47:af:51:dc:6e:2a:a1:bb:ce:d9:
                    01:9f:4e:de:46:5f:26:f1:7c:04:11:51:ee:ee:c0:
                    1b:b0:70:ea:9d:6e:2c:0e:b0:f9:de:fe:2d:11:0d:
                    dd:34:a7:bb:56:fd:1f:82:28:2d:32:19:9a:ca:9a:
                    58:f4:a9:07:11:65:51:1b:99:18:f3:40:32:ba:c8:
                    c0:c3:5d:fe:de:73:04:d9:83:4e:19:7e:38:f7:bf:
                    b4:0b:4a:c6:0e:5d:ae:1a:b6:3e:1d:13:4f:86:ab:
                    97:af:d9:47:45:70:d2:57:9f:4f:be:53:78:54:83:
                    8b:96:4e:8c:50:a4:e3:d7:40:b6:ae:f9:8f:df:f2:
                    c3:68:33:73:8f:eb:e3:e2:42:5a:9d:cb:16:15:db:
                    44:75:18:03:71:b8:88:de:78:09:f5:1e:4f:7b:0e:
                    3a:b0:8f:ed:d5:31:98:c2:3b:f7:13:be:a4:c0:98:
                    af:91:47:f7:1d:3f:14:5a:3d:9a:c3:5d:54:33:bc:
                    49:7e:e0:08:80:22:ec:21:1e:67:a7:39:bf:38:26:
                    5e:9b:67:ec:76:22:9c:cf:69:6d:5c:90:34:f3:b3:
                    12:ce:46:c2:5e:3a:c1:4d:d2:1c:f4:a5:5a:99:3e:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:11:67:C3:31:55:F3:16:74:04:A2:18:A2:D0:3B:60:C0:54:39:E2
            X509v3 Authority Key Identifier:
                keyid:CF:0B:4E:42:01:2A:B2:56:12:48:BC:18:F0:44:2C:20:07:C8:CA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwtOQgEqslYSSLwY8EQsIAfIyqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:36:ac:8e:44:ca:b6:b3:7c:b0:0a:79:fc:b0:37:6e:11:
         08:78:dd:98:04:a4:f0:0b:71:ec:a2:a2:6f:29:e4:3e:3d:56:
         63:b0:13:6f:5a:4b:c9:ac:0a:a8:a0:f0:23:b9:83:0f:0a:06:
         de:5f:e4:e1:b1:e4:a6:15:69:95:01:51:e2:47:cf:d2:94:21:
         96:b6:42:da:a3:4e:4b:27:d5:fc:72:01:6f:2f:f1:4e:3a:35:
         f4:00:51:9c:f6:b8:b1:c8:ba:b7:4f:3f:09:98:73:6a:9d:31:
         6f:80:a4:24:b1:46:3f:78:93:0a:97:c5:07:72:75:15:08:eb:
         7d:f7:2e:53:50:8e:4b:10:38:bb:b5:31:d3:fd:5c:3a:7b:51:
         a4:56:f5:ef:aa:d8:e9:01:29:41:df:27:e0:e3:ef:75:81:fc:
         a9:42:a2:e8:3e:83:54:48:82:47:b4:76:75:18:96:b3:ac:12:
         9c:3a:92:ae:6e:14:31:47:f4:27:f4:80:33:93:b3:e3:2d:ff:
         33:41:35:74:e3:9f:b6:4a:aa:f1:1f:11:9a:ba:36:22:0f:76:
         5e:64:6e:99:43:d8:3c:6d:5a:fe:f8:09:9a:97:f5:d1:ea:2a:
         cb:cb:3f:5c:fb:77:96:ec:54:22:3f:69:a1:17:cb:bb:33:57:
         68:fc:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----