Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.mft
File:                     3YSQY2Fq7oua6QhK3nKEKgB9NnY.mft (raw, json)
Hash identifier:          ldl6o1Jkhe7SiULefT9aH+oSoJvatoYMp9U1YEpQtl4=
Subject key identifier:   96:9D:FB:00:67:7E:82:7F:A4:33:AD:FB:14:5E:EE:56:B2:07:1A:9D
Authority key identifier: DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Certificate issuer:       /CN=dd849063616aee8b9ae9084ade72842a007d3676
Certificate serial:       01870D9F32EC902F306B86B2795E67B1FBCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.mft
Manifest number:          05BF
Signing time:             Thu 23 Mar 2023 08:39:09 +0000
Manifest this update:     Thu 23 Mar 2023 08:39:09 +0000
Manifest next update:     Fri 24 Mar 2023 08:39:09 +0000
Files and hashes:         1: 3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl (hash: pf6eFwlomZN1B7s9ClZNktsNKqHJreTXgwqJoV2pwrA=)
                          2: _g4LKP7Du52wu9GA45ue3Erb2Zs.roa (hash: SLfKXgK+8HqFvRmXRQ2gjKOr78Dj8jAiUcYBgL/kB9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:9f:32:ec:90:2f:30:6b:86:b2:79:5e:67:b1:fb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd849063616aee8b9ae9084ade72842a007d3676
        Validity
            Not Before: Mar 23 08:39:09 2023 GMT
            Not After : Mar 24 08:39:09 2023 GMT
        Subject: CN=969dfb00677e827fa433adfb145eee56b2071a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:fa:c1:e4:b5:04:47:27:3e:ba:75:be:e1:
                    a5:fb:a6:3a:fb:37:ac:2e:10:25:f3:79:53:94:82:
                    79:72:84:9d:8d:bb:a1:7b:fa:65:0a:6c:5b:e4:85:
                    7b:8e:18:d6:24:aa:77:cc:12:d5:79:51:9e:fa:f6:
                    63:26:76:01:13:fd:dc:4f:0a:85:02:77:1a:e7:42:
                    db:6e:f6:89:68:b8:19:5c:88:b7:ee:ee:44:9d:0c:
                    b0:86:af:6a:85:4e:78:d6:62:4e:b7:e3:7d:ab:c7:
                    73:ed:ea:b8:94:33:00:17:ba:88:f3:a3:d4:33:bb:
                    d1:42:ba:38:c4:69:73:98:7c:4f:56:2d:d0:79:f2:
                    16:d7:d1:6c:56:13:3e:c5:97:3e:37:9c:ae:4f:6c:
                    35:91:be:fc:08:e1:3d:41:29:57:1f:b6:d8:11:0d:
                    4b:d2:e1:e8:1d:91:46:47:4e:e6:3a:20:11:ce:a7:
                    85:9b:5a:39:8a:bf:58:da:90:39:f9:5b:b7:d8:8b:
                    18:9e:10:cc:0f:fc:98:90:f5:5a:f1:8a:72:c4:90:
                    e9:ae:18:76:10:46:fa:04:f4:7b:82:35:91:a2:a2:
                    6a:28:c6:24:73:4d:a5:b3:8c:2a:b5:b9:25:75:7d:
                    4a:02:1e:e4:46:06:be:75:44:c3:d3:d1:1d:e8:d3:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9D:FB:00:67:7E:82:7F:A4:33:AD:FB:14:5E:EE:56:B2:07:1A:9D
            X509v3 Authority Key Identifier:
                keyid:DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:92:5a:73:a5:cd:09:39:f1:19:40:d7:43:6e:64:89:c5:66:
         b4:1e:21:92:73:a4:50:f2:d5:4a:fa:1f:31:e1:04:36:3b:5a:
         62:e9:0d:e7:d0:5e:1c:fd:4c:b6:ac:84:bb:81:8f:8c:41:fe:
         d0:7a:eb:43:d8:8a:c5:26:da:be:14:25:e7:0b:92:10:23:aa:
         f9:92:2f:36:23:43:52:6f:bd:4f:d9:69:81:2f:42:38:0a:c5:
         1c:b5:f7:b0:50:c6:50:d3:86:26:60:5d:37:bb:dc:ff:b6:e3:
         77:b8:2d:fd:d1:12:7e:3f:24:6a:6b:dd:9b:98:16:f8:ce:3a:
         3a:d5:d5:a4:1e:df:32:ec:2b:ee:b1:03:96:01:2a:ae:26:1a:
         45:81:5b:18:8c:d5:dc:32:4b:62:70:8f:9b:79:b9:c0:0d:0b:
         2f:0d:ed:3e:6b:e3:16:61:85:bc:18:da:c3:50:f7:71:f2:9d:
         4e:7a:67:10:97:81:c8:b5:25:bd:68:df:86:3f:7e:20:87:0e:
         25:96:aa:d6:9a:4f:71:8e:82:54:82:2a:da:d8:f6:71:18:15:
         cb:5d:db:b0:1e:69:17:02:f1:46:0d:a1:18:d2:35:e5:c4:e6:
         98:c9:90:0a:29:44:b4:49:dd:09:33:2f:f8:e7:6b:c7:07:97:
         e4:af:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----