Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.mft
File:                     Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.mft (raw, json)
Hash identifier:          Pe1oDlKfjYMsj5mTl+CzJ+wIrZ3Kz3bTTiKMpZEsDZg=
Subject key identifier:   6C:F8:00:04:36:D8:F5:BF:92:50:3B:79:F3:10:0C:DF:03:9B:EF:8C
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Certificate issuer:       /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial:       018949BC9E80DA0FEA9F4AA3B06DFC5EF995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.mft
Manifest number:          0E4D
Signing time:             Wed 12 Jul 2023 10:54:05 +0000
Manifest this update:     Wed 12 Jul 2023 10:54:05 +0000
Manifest next update:     Thu 13 Jul 2023 10:54:05 +0000
Files and hashes:         1: 0uasKzs27EzqIXyZOOzdsfUjy1I.roa (hash: ZiCvT+MPe1z4VwrX8zYuF8VZ5sfoKK+XRx8LwwtONiU=)
                          2: 5SAYA2sjOjONpwIEO7srg0WJh2A.roa (hash: +r5rIepJiQa+gL48LWIh40r4gNrnQ6n7fKonQBWAzHM=)
                          3: JT4AUcD3yTm3GmfX3Ln2j8KmhzY.roa (hash: BbqMqBjlREZryjRViuMVB4xze97BD0i4ruDYMV++EmU=)
                          4: Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl (hash: 1SU2nh52pzRMzhzdoL1O3bsUtUO/qSoZHu4gxqnBvCo=)
                          5: T5-GxIvc_jAfdNYg2ngoYw2Q_VM.roa (hash: JcQrHjZVjW1kjnlGYTOhyzVwOnSLOAiA9Tt8avG9pCc=)
                          6: h0zBr8LC6cWViZT-PC2v46z0Nyo.roa (hash: BsLuQIYpUz5CAlFrnT0f5iZeOX54tu4iaOvV5uAbwWw=)
                          7: m9vu8TLaXyRZKZjrJY9nTuu7ooE.roa (hash: FC0l8pRFEUtDxXxcvjdf2E83vybYXIb4+/TwFB88yjA=)
                          8: nviSdssjYgt-RNqWiJYwHvfb714.roa (hash: TUtWEnN3ESUPBvwOVRZT7sbsv9Ui5ONzzmRezoJDX+o=)
                          9: wYlIQ3DPKgXmk0V23AtVjBOJR7s.roa (hash: MX7z5ac0zdz0lT7RoJBIaMSEIHiKEeGvOvYo1Rlu4VU=)
                          10: wn62tAfV3UHkgmtfFCfgWwjuvb8.roa (hash: R/uKXgjFqysTy7RJ7qYH4bUdjBG4vI0F0Uy7fg/lTjU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:49:bc:9e:80:da:0f:ea:9f:4a:a3:b0:6d:fc:5e:f9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Validity
            Not Before: Jul 12 10:54:05 2023 GMT
            Not After : Jul 13 10:54:05 2023 GMT
        Subject: CN=6cf8000436d8f5bf92503b79f3100cdf039bef8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ad:e0:63:1a:8d:c8:78:ef:28:d8:f1:5d:7f:
                    54:00:61:8b:08:54:b9:51:fd:fb:c9:38:56:10:98:
                    94:71:72:9f:64:50:81:7a:f9:3e:11:21:6b:47:dc:
                    46:1d:4a:54:77:5d:eb:95:9e:26:30:0c:05:6c:72:
                    cd:c0:bc:93:6a:d5:79:ca:b2:d1:25:7f:c6:a9:7e:
                    06:97:aa:ad:83:bc:3f:95:b5:20:a8:28:dd:0f:a7:
                    91:88:99:a3:4c:e6:57:7c:dd:fe:1f:39:02:e0:64:
                    ad:b7:0d:b4:08:a1:49:59:89:ae:62:b9:fc:ad:b8:
                    ad:19:f3:9d:10:20:a3:54:86:14:01:80:a0:fb:f1:
                    59:f8:43:07:6d:db:e7:6a:61:10:a5:c1:a4:a2:b6:
                    96:1e:24:0c:01:7c:b3:ae:41:25:3c:cb:b5:4d:3e:
                    0b:67:f6:fe:d7:72:68:50:c5:6f:56:52:5d:fc:b2:
                    33:26:51:82:91:7e:e7:78:b3:84:2d:e3:af:32:d0:
                    04:49:c4:40:c6:f3:6d:d9:a0:e7:f9:6b:4e:a4:7f:
                    43:90:81:3e:90:91:35:ee:4b:79:15:bd:f4:03:2f:
                    30:e7:e3:d1:c0:dc:7b:cc:d9:f0:80:56:e3:9d:16:
                    a1:1c:17:ca:67:32:cc:5e:c2:a3:e4:15:a1:a7:8f:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:00:04:36:D8:F5:BF:92:50:3B:79:F3:10:0C:DF:03:9B:EF:8C
            X509v3 Authority Key Identifier:
                keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2c:e8:8d:10:ee:7f:17:4f:6d:d4:5f:0b:35:82:11:28:7c:
         6e:d5:d1:06:03:37:80:c5:e0:ca:13:87:44:cd:65:c7:82:e5:
         80:7d:c0:b9:32:9c:70:51:d4:7e:57:d4:53:2b:86:50:b7:89:
         bf:b8:af:6c:94:4f:5f:59:02:41:64:3d:a5:4a:f7:d3:59:2f:
         67:dd:1a:7e:cd:ef:6b:62:58:fc:27:09:2f:da:19:bd:a2:55:
         4e:6c:95:e8:06:55:86:5e:a5:d5:c7:84:5a:15:ec:0f:15:ef:
         3f:fa:73:15:05:9e:d9:d2:a1:ac:e3:d8:da:c8:06:9f:dc:a5:
         1f:87:b1:26:40:b4:7d:9f:5d:d8:ea:a3:e3:f6:9a:ca:51:b1:
         f4:5f:5a:f0:ed:d9:9a:5e:63:7f:91:ef:6e:46:17:58:a9:71:
         59:c2:03:bc:a3:f4:d0:4a:77:bf:9f:da:0a:32:ba:4d:d8:cd:
         a8:58:d8:6c:94:ad:53:80:1b:d5:ea:17:54:9d:4d:db:45:06:
         25:65:22:65:89:79:26:22:bf:9e:17:0e:55:c0:95:6e:5f:1a:
         90:82:71:82:49:53:eb:6e:5a:fc:d6:99:4b:36:c8:20:8e:b6:
         b2:23:f0:6d:4d:11:6b:85:6b:f8:6d:1b:2f:d9:ec:50:4c:08:
         5b:ac:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----