Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/IvJ3kAXJN9U_S6bkhDNbHTXgll4.mft
File:                     IvJ3kAXJN9U_S6bkhDNbHTXgll4.mft (raw, json)
Hash identifier:          iHjoYfyXEjvwrJtsCpeiM4yqH20eA4sO1g9OMywQMcM=
Subject key identifier:   5B:97:74:A5:E7:CE:0E:17:CE:06:24:68:F5:B9:E8:40:8D:D2:28:18
Authority key identifier: 22:F2:77:90:05:C9:37:D5:3F:4B:A6:E4:84:33:5B:1D:35:E0:96:5E
Certificate issuer:       /CN=22f2779005c937d53f4ba6e484335b1d35e0965e
Certificate serial:       018709669D28405AAB69F4330BE918E8171F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvJ3kAXJN9U_S6bkhDNbHTXgll4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/IvJ3kAXJN9U_S6bkhDNbHTXgll4.mft
Manifest number:          06D9
Signing time:             Wed 22 Mar 2023 12:58:52 +0000
Manifest this update:     Wed 22 Mar 2023 12:58:52 +0000
Manifest next update:     Thu 23 Mar 2023 12:58:52 +0000
Files and hashes:         1: F6WMW2w-DmoShKhAXIzVFU17bYk.roa (hash: Iv9T5MiywF6YSRkbcBszWJWwz8s/1Do+BCaAtRzizbo=)
                          2: IvJ3kAXJN9U_S6bkhDNbHTXgll4.crl (hash: p8E+VoQfowQCFpGBHdIOse/Dlzj4lmIJfZi3SKa9avQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:66:9d:28:40:5a:ab:69:f4:33:0b:e9:18:e8:17:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2779005c937d53f4ba6e484335b1d35e0965e
        Validity
            Not Before: Mar 22 12:58:52 2023 GMT
            Not After : Mar 23 12:58:52 2023 GMT
        Subject: CN=5b9774a5e7ce0e17ce062468f5b9e8408dd22818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:4b:47:8d:f5:dd:f4:dd:48:7d:44:d4:a5:
                    1c:0b:9f:5f:2e:f5:1b:1d:fd:6a:a4:94:00:81:3d:
                    60:9d:3e:d8:18:f7:7e:ef:8d:9b:36:99:9e:c6:de:
                    db:02:87:41:9a:38:7e:cb:33:31:6a:fd:5c:55:df:
                    fd:40:8f:e1:7e:d8:04:69:20:9f:1c:8a:f7:9c:34:
                    d3:85:e6:0c:4b:41:dd:80:30:10:f7:fd:6e:98:ba:
                    e1:ec:be:23:3b:b8:ef:0a:2f:e6:a9:2f:42:ae:05:
                    5e:bd:63:95:34:24:72:17:89:60:ff:68:9a:10:5e:
                    3c:d6:cf:cb:71:69:5f:0a:22:25:c2:7f:1a:44:b6:
                    6c:8c:ba:20:1b:b6:19:4c:cd:5b:92:e9:12:04:68:
                    1c:ed:c3:c5:1c:03:a3:b8:26:04:9a:3f:eb:be:81:
                    e5:e4:44:5c:d5:ba:63:3d:a2:f7:2a:22:fd:ef:b4:
                    59:6c:22:1e:1d:8c:5a:16:83:69:16:21:ec:ff:86:
                    be:67:75:07:e2:e5:6c:ed:3a:24:f4:67:e0:8f:f4:
                    5d:d0:a4:19:20:86:b3:89:06:33:c1:40:9e:a3:fd:
                    cb:95:a7:ea:04:cc:4d:c9:2e:cf:35:21:6a:10:85:
                    20:5b:15:72:f8:08:82:d5:8b:90:3e:c4:fe:23:25:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:97:74:A5:E7:CE:0E:17:CE:06:24:68:F5:B9:E8:40:8D:D2:28:18
            X509v3 Authority Key Identifier:
                keyid:22:F2:77:90:05:C9:37:D5:3F:4B:A6:E4:84:33:5B:1D:35:E0:96:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvJ3kAXJN9U_S6bkhDNbHTXgll4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/IvJ3kAXJN9U_S6bkhDNbHTXgll4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/IvJ3kAXJN9U_S6bkhDNbHTXgll4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:f1:6a:fc:e1:72:8b:ae:e2:cb:ed:62:55:8f:32:c2:8a:
         50:ae:c2:cd:c6:d1:89:f0:70:5b:aa:6d:c3:73:94:86:52:3d:
         bc:33:6b:82:44:9d:50:18:59:d4:d6:65:46:17:58:bd:f5:8d:
         1e:99:60:ae:b2:21:9b:50:0f:bb:7f:b0:53:ed:81:f2:c7:c0:
         05:b3:5a:a6:dc:7a:08:60:ba:99:0f:d3:07:5f:06:37:6b:36:
         1e:85:ed:e1:04:fd:f3:91:a6:79:cf:37:fe:71:71:87:aa:7e:
         e2:22:83:09:a7:f4:39:ee:95:df:dc:8d:61:6b:67:55:e3:34:
         98:ea:c3:82:96:3f:62:16:21:77:7b:97:ae:f8:94:43:20:78:
         18:05:d6:83:27:61:76:6e:68:6b:3f:61:0a:d7:b0:65:86:25:
         15:1e:27:9e:c4:2d:6f:72:47:4a:68:fe:ff:05:cc:5b:82:8a:
         9f:85:bd:22:89:92:45:c7:4c:bd:a5:46:bf:14:cf:a3:8b:3e:
         c5:a4:73:e5:c8:2c:df:b3:88:0e:cb:90:0c:05:ba:b6:de:84:
         d2:0d:62:56:c8:f0:54:88:93:f4:e4:3b:bd:df:6b:25:f7:8a:
         96:96:7e:f2:d4:63:a9:38:5b:ed:ea:ff:91:de:47:e2:6a:39:
         70:00:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----