Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.mft
File:                     y7Cobpj9j_o1A47rCKroUPuQnys.mft (raw, json)
Hash identifier:          sWcpFtohvkXF5QLQ8kxI2dsbw8oEk3G0yGaCO5xfVmU=
Subject key identifier:   F9:46:8D:E6:90:AA:D2:DA:8B:78:6B:4F:78:80:AD:A3:A7:F6:16:8E
Authority key identifier: CB:B0:A8:6E:98:FD:8F:FA:35:03:8E:EB:08:AA:E8:50:FB:90:9F:2B
Certificate issuer:       /CN=cbb0a86e98fd8ffa35038eeb08aae850fb909f2b
Certificate serial:       01884FFBFBCFC4B1B6BA7B6EE8AED2A4F1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y7Cobpj9j_o1A47rCKroUPuQnys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.mft
Manifest number:          0A72
Signing time:             Wed 24 May 2023 22:58:13 +0000
Manifest this update:     Wed 24 May 2023 22:58:13 +0000
Manifest next update:     Thu 25 May 2023 22:58:13 +0000
Files and hashes:         1: R7Ffu7GpbgRgWA53glyG5xNZfsE.roa (hash: +VjyudQDBbGUaSZzSFzaRq/LTLdR8XVfTpYYuCVZKO8=)
                          2: RVpavK33LEycoox3-d3BLqndDmk.roa (hash: 9KG8MXMaphlS8ackQNlC1q4JPAIeoRL6nM8wWwGJrcI=)
                          3: y7Cobpj9j_o1A47rCKroUPuQnys.crl (hash: nxZmbTfpN/70t81f0sK7Gnd13xMtVzVjcMQTDWPc4XU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4f:fb:fb:cf:c4:b1:b6:ba:7b:6e:e8:ae:d2:a4:f1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb0a86e98fd8ffa35038eeb08aae850fb909f2b
        Validity
            Not Before: May 24 22:58:13 2023 GMT
            Not After : May 25 22:58:13 2023 GMT
        Subject: CN=f9468de690aad2da8b786b4f7880ada3a7f6168e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:cc:26:2a:7e:7a:28:a9:8a:77:01:24:7d:
                    fc:da:93:a3:97:00:a1:a5:8d:93:3b:e1:8c:5e:c1:
                    ae:67:36:aa:3a:d1:4c:70:87:e8:ac:a4:a5:de:ba:
                    b5:65:ea:e6:91:0e:e4:72:75:2b:b2:15:8e:0a:50:
                    7b:0f:2d:90:e5:8b:9c:8d:e8:19:99:13:1b:02:1a:
                    ec:1f:58:fd:ee:ef:4c:eb:af:52:91:bb:ab:de:62:
                    d6:98:ba:ec:9e:13:d9:e8:1e:53:5c:c6:7b:a5:ed:
                    9d:33:db:8d:54:df:14:be:31:48:cd:a5:aa:0d:c9:
                    28:b9:43:a8:af:9f:53:55:28:1c:3c:39:3a:8f:78:
                    d1:a0:85:a0:aa:cf:b7:2e:cc:02:8f:f1:32:88:23:
                    2e:fc:e2:f8:11:e1:f8:50:af:7a:5a:76:d6:6f:46:
                    db:53:a1:8e:b6:a9:a5:c9:6f:5b:a0:82:dc:f5:03:
                    fe:83:1b:f2:b1:9e:13:ec:36:89:2e:6d:4e:a0:c9:
                    e1:56:0f:5e:04:8f:49:49:10:a4:8f:92:1b:28:06:
                    ea:7b:9c:e4:16:bc:9c:7c:2d:f4:27:f8:8d:fd:91:
                    bf:54:f3:78:63:02:3f:ed:97:29:d2:60:a0:2b:63:
                    88:63:11:9a:a6:70:bf:c3:b9:45:68:d1:48:fb:39:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:46:8D:E6:90:AA:D2:DA:8B:78:6B:4F:78:80:AD:A3:A7:F6:16:8E
            X509v3 Authority Key Identifier:
                keyid:CB:B0:A8:6E:98:FD:8F:FA:35:03:8E:EB:08:AA:E8:50:FB:90:9F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Cobpj9j_o1A47rCKroUPuQnys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:87:eb:03:de:7e:a3:38:2e:c8:ea:83:e0:2b:91:d4:17:
         ba:84:73:86:1f:4e:8b:77:b1:2b:23:53:e9:a4:35:5b:77:8b:
         7a:47:c7:83:88:3d:d6:17:a2:ac:cd:76:7d:1c:5c:8c:cb:83:
         4e:18:fb:5c:b5:28:b0:b0:a5:f1:ad:0d:11:06:42:d7:d9:59:
         5f:16:d6:33:09:61:c1:9d:fb:cd:c6:93:64:de:42:99:24:63:
         4c:bf:82:ce:20:58:48:04:1d:39:85:89:3e:57:ee:fd:bc:e3:
         5d:84:3e:d5:0d:64:73:a5:db:e6:39:e2:b9:18:0d:de:f7:4a:
         8c:7c:1d:bc:cb:e9:11:4b:29:ac:20:b1:78:f3:12:9a:6d:cb:
         80:c0:97:c1:3a:ac:d2:9f:79:93:d5:ff:48:5a:da:6d:84:ce:
         5c:83:d2:b7:58:82:87:3b:83:25:3d:63:5d:0e:25:33:38:ba:
         79:65:5b:e5:fa:a6:c3:3f:dc:77:dd:14:2e:79:aa:f6:28:0a:
         27:22:ab:2e:11:96:7b:cc:6b:24:b3:b8:5a:6d:df:87:d2:39:
         56:86:0d:32:e6:f7:57:33:be:4b:44:9a:04:71:48:cb:af:52:
         45:17:f7:2e:81:13:4f:1b:b0:85:ba:33:f0:36:78:ce:55:d2:
         ca:4c:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----