Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.mft
File:                     cpeNHU53goFqxC2keI4zy7JIeFk.mft (raw, json)
Hash identifier:          RoS74jL9v/zYKp3ZoKVsUJZEeDnpqmuQHt+Sq6CJJT4=
Subject key identifier:   A3:B6:6E:2B:BC:3E:DA:C8:0D:60:AC:3D:E2:D0:F1:6C:E1:AE:0B:96
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Certificate issuer:       /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial:       01870E15F6067993A7E9EB570EE8B1C38A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.mft
Manifest number:          082B
Signing time:             Thu 23 Mar 2023 10:48:52 +0000
Manifest this update:     Thu 23 Mar 2023 10:48:52 +0000
Manifest next update:     Fri 24 Mar 2023 10:48:52 +0000
Files and hashes:         1: 1-OtTE4KjYdJDQFwV6CsAxBpJYHI.roa (hash: yaety4W2VEpjTBZFP9FqJFznfutqu6+YpOnx0qQt9Xk=)
                          2: 8JRFpTVsaou3LjzaQZ8p7VxJ3fM.roa (hash: NTysmyzWFt+S1qFpHWQgayNcftFKAW389vnViZCv82g=)
                          3: 9geiU70mLwB1BPcefPCbUcvhZBo.roa (hash: c5i4PB+XVrSZErV43Y+PKZqsLu4LtJOw/B4DVKHCFgY=)
                          4: FDt3ktTT9e0VfFiTSAXmtBTqIDI.roa (hash: 6+KLJT+Jhlew6T4f8CTmnn2vj9cQTIBu463I5e7dptk=)
                          5: HAPGrIxq5BEBYEiQ_qQYp-w-WDc.roa (hash: Bcekmn2uspRk2vvdPQEeFhf7SOpg5AuDyBDqVpxh2p4=)
                          6: QRfMy_SvE2eKjOFwOSX4Zi88mcM.roa (hash: dLIzhLLD3RK1Pq5xVH5Rc2nVjdjIun46r3Aba1KxGvY=)
                          7: TfcnXl7QcyqB9gxzy4Ms412vnks.roa (hash: wtIIniEd3EJpbz0w6fGpZ+djhvzC7rmcjutyM/AUSeg=)
                          8: cpeNHU53goFqxC2keI4zy7JIeFk.crl (hash: vDUNutdY48z7tGq0zGOjIqvnyRU9sbwIeAqbbNO6NWI=)
                          9: iZHSnHuWYI1XCEpCFOweQ3M3gsY.roa (hash: IpBy6OmEOKPYfSE2oefsyr6eyZHHQogJuDRqXofD1lI=)
                          10: m3_7TyQBYZN7O8xjcD9C-5GkOKU.roa (hash: h9PeF1dDecF/nyG8x2hVAvLsnrVblbhKP9eYgG8GLNA=)
                          11: uvbuDXpk4-Bz4KCW8l8RvKCLhbc.roa (hash: zt3teuYB/LDusbhXT2QHfAUm1rc6x4ed7PIRRp9xlek=)
                          12: yDGzTDAIAj41HgA3T1JafXGTRvQ.roa (hash: VihD+cv6ag3m2tIounIvOzqRBwgTnUdhZ6T0Lli2u/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0e:15:f6:06:79:93:a7:e9:eb:57:0e:e8:b1:c3:8a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
        Validity
            Not Before: Mar 23 10:48:52 2023 GMT
            Not After : Mar 24 10:48:52 2023 GMT
        Subject: CN=a3b66e2bbc3edac80d60ac3de2d0f16ce1ae0b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:d6:5e:fd:23:c8:fb:4d:41:9e:86:f1:e3:
                    36:39:23:af:de:70:ea:31:6f:21:16:0e:78:20:d2:
                    17:48:21:b6:9f:c5:3c:0a:ba:b7:31:18:91:f8:5e:
                    7b:33:74:53:13:65:20:b1:45:19:23:7b:65:2c:0c:
                    bb:12:57:fb:a0:f7:f5:d3:e1:63:41:f5:73:cb:57:
                    79:5b:57:d7:bf:87:5e:cc:87:f4:f2:4a:a3:7f:ba:
                    05:1f:a1:c1:14:a7:be:a9:8a:c4:12:c5:d6:27:6b:
                    0a:b5:e7:ca:ff:e5:f9:1c:78:7f:ca:21:30:58:e0:
                    59:cb:4a:16:ad:39:54:93:29:9b:c9:9e:e7:91:47:
                    4e:1c:9d:24:c4:7e:7d:03:de:d5:fb:b0:5a:a0:93:
                    dc:1d:88:dd:21:4c:4a:2e:f6:87:df:cc:87:b5:49:
                    ed:f0:d4:fe:3f:cc:76:25:7d:41:77:2b:b0:e5:50:
                    14:f3:5a:2e:e0:b0:a2:f1:bc:82:ea:42:81:6b:b8:
                    59:40:d3:e6:fd:8a:df:b7:0c:14:fb:56:14:1d:cc:
                    e6:d6:87:6a:ec:67:3e:46:ca:03:a2:fc:d9:69:fa:
                    7e:b7:84:c3:0b:26:0a:7e:10:73:6d:8c:bd:f4:35:
                    f8:41:0f:ae:ff:79:6a:c0:5d:72:5c:a6:fa:8a:44:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B6:6E:2B:BC:3E:DA:C8:0D:60:AC:3D:E2:D0:F1:6C:E1:AE:0B:96
            X509v3 Authority Key Identifier:
                keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:0b:b4:e5:df:84:7f:46:1c:a3:ee:7b:72:23:05:9c:57:
         ca:9e:f5:4b:21:9e:a9:21:f7:ea:df:ec:2a:56:6a:4c:d0:99:
         31:f3:e5:ab:f8:5d:13:d3:bc:72:e6:c3:c6:b0:fe:ef:63:c6:
         94:be:10:64:47:6e:a7:de:d0:c3:ef:80:5f:53:22:fe:c4:e7:
         1c:83:3c:ff:e4:a8:5a:c1:2f:27:e4:e3:c1:00:66:e2:39:2d:
         3b:15:3e:9c:f3:30:f4:b9:40:6c:04:7a:59:37:e2:2b:52:5a:
         28:b6:e5:aa:8a:26:54:1a:3e:a6:a9:f4:1a:df:76:9a:3f:2f:
         49:16:4e:6a:4b:86:d9:12:fa:f4:d9:b9:65:e2:76:d8:53:81:
         1f:47:22:f4:14:52:d2:fe:8b:d4:14:ae:e4:81:c2:cd:6f:b8:
         a8:d4:7b:e6:82:48:25:b4:55:21:c4:c1:08:91:a3:e7:d7:da:
         45:a9:2a:a9:21:4b:0e:49:3f:3d:c9:f1:69:8f:5c:cb:e9:2d:
         1f:c9:f4:45:3e:7c:5f:52:c4:01:65:dd:6f:a1:de:ec:76:e3:
         ab:62:c0:06:1a:c6:15:68:1c:2d:40:98:af:16:fb:06:7d:55:
         2c:05:b3:81:fa:f1:01:eb:a1:84:f8:52:05:24:92:f5:e8:66:
         fc:90:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----