Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.mft
File:                     nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.mft (raw, json)
Hash identifier:          ik+FQ3EfGiNRF8ejY1vwcj1Ymb4QcfZIRnEgAa0pFe8=
Subject key identifier:   B8:A9:8F:AB:BC:F9:2A:31:BB:FC:B6:85:73:48:1F:64:01:43:71:B9
Authority key identifier: 9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
Certificate issuer:       /CN=9c378004b2d850fe49a35559e40abf09adee402e
Certificate serial:       01852E3FD79DD211C862571ABB5C10508FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.mft
Manifest number:          0BDA
Signing time:             Tue 20 Dec 2022 06:36:53 +0000
Manifest this update:     Tue 20 Dec 2022 06:36:53 +0000
Manifest next update:     Wed 21 Dec 2022 06:36:53 +0000
Files and hashes:         1: XoiDLUCpz8UWz2aeM-RSHFYon-s.roa (hash: YItXg1vzGkKh+3tuCde/Io03y41gQL/bPbuGRJnoCD0=)
                          2: am-h-SZznhdeA2K24iYYHM7ftII.roa (hash: k2UfMtrg1quknZqrJGM4ICwSRfcH+aptZV7XlN1N5Lc=)
                          3: nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.crl (hash: d+rG7SnWeIP144h9Faxn/hMp0wehTZrhdQvRzJM7iSY=)
                          4: y06sDkhoYjDgz4wsmJHUJtOrvds.roa (hash: mcD5iUFSa8Rd/yAX5YpLrReHwLv4oNYzkOCh8AoZGVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2e:3f:d7:9d:d2:11:c8:62:57:1a:bb:5c:10:50:8f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c378004b2d850fe49a35559e40abf09adee402e
        Validity
            Not Before: Dec 20 06:36:53 2022 GMT
            Not After : Dec 21 06:36:53 2022 GMT
        Subject: CN=b8a98fabbcf92a31bbfcb68573481f64014371b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:8c:83:1d:b6:55:5f:23:10:9a:23:02:34:
                    1b:59:f9:c6:0b:11:8b:9d:dd:b0:07:11:e5:55:fe:
                    1b:d5:96:1a:5b:a3:6f:b3:2c:2f:d6:f8:0a:50:a4:
                    2f:05:18:73:15:58:50:c2:36:ff:7f:32:e6:4d:c1:
                    19:a6:87:10:53:7e:ff:75:ea:bf:2c:53:eb:e9:64:
                    01:1e:ba:3f:ea:67:69:8c:e0:41:90:59:28:aa:e8:
                    23:7d:65:9f:54:7d:60:35:37:11:34:9e:a9:4b:94:
                    5d:4e:d7:98:34:40:20:c0:93:ac:8f:73:70:f7:76:
                    2c:5b:4b:0f:a9:f8:29:b2:1f:f6:9f:41:ee:78:73:
                    38:ad:eb:32:06:68:a2:87:cf:d3:b6:95:a1:5e:0b:
                    bb:c7:1c:2f:cc:db:55:8b:78:cd:43:9a:5b:d6:d3:
                    8c:ad:0f:6c:19:14:35:66:9e:ff:4e:9e:77:61:41:
                    66:36:75:a7:65:63:cb:b4:4a:f1:e7:de:1b:25:35:
                    77:da:cc:73:b0:af:58:22:1b:99:71:b5:ce:37:b7:
                    76:13:61:5a:f0:db:c4:00:1b:4a:cf:a2:ce:75:33:
                    17:ff:c4:2e:18:26:bd:7e:96:29:ec:49:db:86:1a:
                    32:3e:01:35:92:54:62:48:5f:0d:60:31:87:a7:7b:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A9:8F:AB:BC:F9:2A:31:BB:FC:B6:85:73:48:1F:64:01:43:71:B9
            X509v3 Authority Key Identifier:
                keyid:9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:b7:b4:6a:f8:85:03:fa:25:fb:af:a7:20:ab:35:b7:4c:
         56:fc:db:e5:4b:64:2b:cf:84:d7:b7:25:de:c8:36:ce:46:ae:
         a7:8f:ba:d6:aa:d5:7f:c1:1f:63:45:e0:7c:99:f8:23:31:a4:
         33:3f:e6:ad:6f:56:2c:92:55:93:36:62:a7:a0:43:2a:fd:8e:
         92:7d:2e:2a:f3:2e:c9:36:28:99:a0:7b:06:c2:11:eb:87:b0:
         78:fb:61:5b:c4:87:3e:ca:64:a3:c2:d6:f6:4d:c7:ab:4b:4c:
         67:e7:02:56:7f:87:f1:66:f4:b3:2c:e3:12:47:d4:b9:79:3a:
         bd:3e:d7:25:64:ff:e3:82:16:19:04:78:a8:a4:8b:5d:bb:3d:
         1f:71:00:95:31:74:17:fb:02:7f:17:4c:14:1f:2f:fc:bd:82:
         c5:7e:4b:a7:ae:29:ef:92:b0:df:c9:dc:3f:94:b7:ad:92:fd:
         f5:fd:20:d9:9f:96:53:52:82:1b:f1:dd:5e:49:9c:2b:8d:94:
         bc:dd:55:ff:34:8a:48:13:28:2d:99:38:9f:69:03:09:c1:87:
         98:8d:44:25:c4:3b:05:4e:a8:1b:53:c8:f9:55:d0:2f:4d:cf:
         b7:97:36:d5:37:d2:f7:29:40:da:e2:22:95:52:c9:9e:d2:91:
         00:e3:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----