Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.mft
File:                     YB2c0uMMPqK6WGzYHz6yahoAD1Y.mft (raw, json)
Hash identifier:          kc9/B9hc/bUF4qDzZ4rZkp6nx1VQ/sWuhteeed69dXo=
Subject key identifier:   B3:8A:94:9A:BB:30:35:A6:FB:00:4F:B6:B1:9B:03:F6:52:A5:DB:C5
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Certificate issuer:       /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial:       01837931424DF6371D81D21ECACE11F66E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.mft
Manifest number:          02E3
Signing time:             Mon 26 Sep 2022 09:46:54 +0000
Manifest this update:     Mon 26 Sep 2022 09:46:54 +0000
Manifest next update:     Tue 27 Sep 2022 09:46:54 +0000
Files and hashes:         1: 1s5NNm7PxDHdPGYChzBexb6rGMg.roa (hash: 6wQP+gGG/3+k6yB4yuphHuHi3cSwjhl6Nl+bkw1h+/A=)
                          2: AnR806CZ9Fv7Y51OZbDiuoQCAIY.roa (hash: hnTMZF2a9ypFxYuJtdlDCrpenMm87U1serxlRLN+f/E=)
                          3: HnrGnJamfLl1jZDE_8wNq9gSOh0.roa (hash: oOYiIOFwm4KalSyx887Eoqn0ShWUE6XolLYTVIQo2YQ=)
                          4: ILfYUxSxqwdFcMDIIc5QfJ0Q7Mw.roa (hash: kswoqoBH1v2J3K6kUpq8g1uiYIxHs4bmL8f1J6TeO54=)
                          5: Py6cdrbHtBmaL3uvOb-2Doyq454.roa (hash: y5aTQKLA7TY/m/Ih0ls1dCxJdjtkqiAkrBGRvFXqXaQ=)
                          6: YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl (hash: WX/aQKs3GmMOhYXKglqMvjbUHNgjpNJaI+ZuKE14lBA=)
                          7: dqR87K0CPTE9Q3VHc4Z-s23i-wc.roa (hash: J6UGQjiOi0qBrlzpSivIhtW9KC0jMb4pYUpKpHBePZk=)
                          8: iqy6oOY7iofe7lX71YEp3twU72Y.roa (hash: x1hRgczDjQNTJ8U50pY9zxHO3Gk0Jg1OUWUGUzqOCkM=)
                          9: oCMf65PXJ75If68JZc62McjaxyQ.roa (hash: D5HjfS1AmbIpEiJWqlPT5UG03gTX8QLDSBPcOWdU5Dc=)
                          10: vHzDcv7aXBon0MJA1-UUlC08Q6E.roa (hash: hHuLVlTk4/HbM/TvA07YnDKi759oQp/52gLUKI68p1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:79:31:42:4d:f6:37:1d:81:d2:1e:ca:ce:11:f6:6e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
        Validity
            Not Before: Sep 26 09:46:54 2022 GMT
            Not After : Sep 27 09:46:54 2022 GMT
        Subject: CN=b38a949abb3035a6fb004fb6b19b03f652a5dbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:4f:bb:9f:07:16:49:99:49:1f:ab:d6:f4:
                    1f:fd:47:c8:ea:5e:43:c2:d6:fc:3f:05:ab:4b:2e:
                    c9:9c:7b:5f:a4:1d:82:5a:cf:a1:e2:48:35:65:e4:
                    66:a3:64:ca:80:9d:06:a1:ea:c3:94:8b:a5:3f:6e:
                    a3:8c:a2:88:6f:c8:14:ec:e4:68:6c:4e:0e:7e:19:
                    2f:3e:73:e2:dd:6a:b5:92:c0:d3:91:5d:57:4f:30:
                    cc:f1:ac:32:73:de:29:2a:2d:d8:a9:f5:4a:47:2c:
                    7c:c7:a6:6b:fc:3f:35:81:10:e0:c7:a6:ef:d5:68:
                    34:f8:80:ff:62:50:8b:b2:dc:e8:2e:87:ae:25:36:
                    62:be:00:fc:68:02:d2:68:48:77:82:ef:d6:57:2a:
                    b1:b7:25:0d:ca:f9:00:f3:1c:cc:0f:0c:7f:29:84:
                    a4:2f:d2:d5:78:24:e3:6e:fd:18:d8:13:6c:ce:b0:
                    84:0c:aa:66:6f:c6:cf:8e:ec:94:00:7c:52:24:14:
                    7c:b6:84:ff:53:f0:c1:ea:a9:0e:7c:95:e1:15:fd:
                    82:e1:30:e8:04:11:3f:8c:98:da:dc:5e:2b:c2:de:
                    5d:86:6b:0e:60:95:dd:f2:f9:31:53:57:08:ad:38:
                    92:46:31:a3:44:fb:be:85:39:ce:b1:fa:3a:32:aa:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8A:94:9A:BB:30:35:A6:FB:00:4F:B6:B1:9B:03:F6:52:A5:DB:C5
            X509v3 Authority Key Identifier:
                keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:68:c6:fd:d7:8d:3f:1c:80:46:59:bb:2f:6c:87:ba:18:b3:
         d1:b3:74:72:80:1c:f9:41:26:93:2e:67:ad:b2:b6:68:65:b6:
         98:c6:a3:4a:cb:13:cf:15:e2:e6:09:fa:78:f9:c8:f3:97:00:
         e1:54:b2:45:c8:f9:45:77:07:f8:2d:15:f4:8d:a4:94:38:de:
         a5:63:6a:27:6e:49:9d:1e:5b:79:b8:fc:9e:9b:09:37:6d:e2:
         47:21:c1:4b:45:c1:4f:08:48:d9:37:13:6b:b9:d0:d0:fa:48:
         a8:47:9d:6a:f8:95:a5:8f:0e:da:b4:72:9a:a0:8f:c2:a1:9e:
         be:cc:84:a5:f2:ea:45:23:f4:c6:b2:cc:5d:09:f1:9a:a2:2e:
         a0:5d:a3:da:bd:16:81:6c:42:0f:df:6d:a3:35:cd:43:72:a7:
         05:5f:91:8a:4f:0d:46:f9:88:d2:88:a4:eb:7b:17:c4:7d:db:
         be:6a:b4:76:8c:86:b1:0d:1f:f1:b3:b6:42:b7:c8:a5:a7:b0:
         5f:66:d4:78:3f:1e:51:72:68:0c:ef:1d:a3:b6:eb:8c:cb:4a:
         99:b5:36:6a:60:5e:8d:8b:d3:69:13:ff:a5:9e:4c:99:e7:ad:
         12:ec:f0:86:b5:60:18:4d:05:85:9e:3f:a2:87:d6:27:0e:40:
         23:60:be:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----