Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/_wHxqk246j5J4eOjXIvDalJ1BwA.mft
File:                     _wHxqk246j5J4eOjXIvDalJ1BwA.mft (raw, json)
Hash identifier:          wxf8PeM9olf/BIjq11TzLeITr/tuQCQ053fstHB3gG4=
Subject key identifier:   F0:10:6F:DD:58:32:3D:3D:78:BB:AC:D8:5D:B9:2C:53:D5:02:6A:EB
Authority key identifier: FF:01:F1:AA:4D:B8:EA:3E:49:E1:E3:A3:5C:8B:C3:6A:52:75:07:00
Certificate issuer:       /CN=ff01f1aa4db8ea3e49e1e3a35c8bc36a52750700
Certificate serial:       01866D04EA8624AF2CB6C49FB612B2C1DE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_wHxqk246j5J4eOjXIvDalJ1BwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/_wHxqk246j5J4eOjXIvDalJ1BwA.mft
Manifest number:          0C8B
Signing time:             Mon 20 Feb 2023 04:11:23 +0000
Manifest this update:     Mon 20 Feb 2023 04:11:23 +0000
Manifest next update:     Tue 21 Feb 2023 04:11:23 +0000
Files and hashes:         1: 4IF8f_M8gYMj3sRUYe9DgQLFfHs.roa (hash: jgysNKv5zvMEWou7LaMan5IROkbLyCinWbXdKH69e34=)
                          2: _wHxqk246j5J4eOjXIvDalJ1BwA.crl (hash: ZP20jY75I2tCrm7eGzBQi0FnsqHjGNoJy24hOKHKL9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6d:04:ea:86:24:af:2c:b6:c4:9f:b6:12:b2:c1:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff01f1aa4db8ea3e49e1e3a35c8bc36a52750700
        Validity
            Not Before: Feb 20 04:11:23 2023 GMT
            Not After : Feb 21 04:11:23 2023 GMT
        Subject: CN=f0106fdd58323d3d78bbacd85db92c53d5026aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:1d:90:53:f2:d1:67:18:30:b0:da:da:6a:
                    f6:55:4b:c4:a9:10:42:19:a8:f5:fb:b4:3a:cd:c5:
                    ee:15:ca:f1:2c:a3:cf:d7:67:81:85:fd:19:18:30:
                    89:de:9a:a8:57:0b:fd:4e:bc:97:91:45:04:55:f9:
                    39:9f:29:20:c7:3c:9d:a9:21:a6:58:4e:04:04:d0:
                    17:d2:5a:04:32:9d:12:c9:bb:2d:dd:ba:7d:72:a6:
                    9e:7f:34:85:98:31:c7:b0:4a:cc:c3:ee:e9:52:f8:
                    d7:30:66:54:4d:ba:e7:40:02:4b:17:d1:cf:6c:50:
                    8a:dc:97:41:0a:72:e9:5a:bf:ea:0e:c8:91:7b:e0:
                    f8:38:a4:ef:ab:dd:7d:6e:77:2e:cb:b9:fa:a7:8d:
                    95:ee:be:ba:0e:be:b8:ec:25:4c:9b:7a:2a:e4:c0:
                    74:06:5c:9b:ef:66:24:51:52:06:5e:46:df:7e:c0:
                    41:9c:bb:6e:db:a2:81:b9:6f:e1:0e:f0:94:61:4f:
                    08:18:e1:3f:01:98:f5:07:7e:48:cb:5b:a5:77:9c:
                    11:c2:bf:16:77:03:41:18:e5:36:9d:56:0f:e7:88:
                    6a:22:34:56:ac:93:fb:c3:74:8d:16:8c:84:9c:ed:
                    a4:60:f4:74:fc:58:13:15:0c:88:46:01:eb:2f:6f:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:10:6F:DD:58:32:3D:3D:78:BB:AC:D8:5D:B9:2C:53:D5:02:6A:EB
            X509v3 Authority Key Identifier:
                keyid:FF:01:F1:AA:4D:B8:EA:3E:49:E1:E3:A3:5C:8B:C3:6A:52:75:07:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wHxqk246j5J4eOjXIvDalJ1BwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/_wHxqk246j5J4eOjXIvDalJ1BwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/_wHxqk246j5J4eOjXIvDalJ1BwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:97:36:38:7b:f0:25:fd:0c:8c:5d:85:71:f1:8b:b8:52:
         c2:3a:19:de:fc:bc:4c:8b:f1:bd:17:dc:67:17:ce:3c:57:d2:
         05:e3:7d:73:eb:a5:0d:eb:69:cb:29:88:08:e5:f7:9a:e4:e0:
         56:30:65:12:0a:68:89:35:06:d8:1e:89:87:48:e7:e9:b0:dc:
         f6:9d:10:9d:93:bc:f3:f3:21:c7:c2:15:ed:67:2e:fa:d0:5c:
         c6:c5:62:ca:77:72:d6:c3:82:4d:34:fe:3d:f4:c2:6b:70:2b:
         4b:f0:1b:a7:b3:f8:90:bf:8b:f8:fc:55:a4:63:3a:98:65:9b:
         fc:40:e8:fa:91:f4:30:dd:54:44:8f:29:c7:31:42:fb:e9:2f:
         a6:fd:03:ec:90:63:db:37:a5:93:d8:24:eb:a8:ea:3a:48:8c:
         4c:94:09:b0:36:4b:28:b6:dc:cf:51:24:a5:ba:7b:f9:de:62:
         0f:9b:a9:37:a6:86:c5:b1:06:62:48:9a:0c:22:81:6d:a5:fa:
         56:4e:4e:29:54:63:e6:09:e8:d1:25:2c:c0:4b:bb:b6:7b:c3:
         81:4c:3c:30:64:c7:a6:4d:aa:2d:8b:0a:a4:39:10:57:f3:6d:
         dd:b4:45:d2:e6:44:93:c7:c5:82:e3:8d:68:f7:57:f1:ee:37:
         b0:8e:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----