Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.mft
File:                     0YEndEtMZlwu-d6k34Z7VDrGVmk.mft (raw, json)
Hash identifier:          tJbjjujyxA6hmSq6wi/3CeupzLeCtiX6pMkeyJrIejk=
Subject key identifier:   3F:5D:E2:7E:F6:B1:00:DC:98:E2:89:34:68:E6:54:C7:E6:B9:7D:AB
Authority key identifier: D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
Certificate issuer:       /CN=d18127744b4c665c2ef9dea4df867b543ac65669
Certificate serial:       018726E811CB1BA8B9B753252D8628F0BD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.mft
Manifest number:          0CF8
Signing time:             Tue 28 Mar 2023 06:29:15 +0000
Manifest this update:     Tue 28 Mar 2023 06:29:15 +0000
Manifest next update:     Wed 29 Mar 2023 06:29:15 +0000
Files and hashes:         1: 0YEndEtMZlwu-d6k34Z7VDrGVmk.crl (hash: eZSckDPbAPdRr4SVietVa4GnaaybVWqkGgOnN5aeKaQ=)
                          2: KxgH4zCrj-Fju28MeBM3sSf8AT8.roa (hash: dW7p9BKSG1TizCFFT0c/xrD0N4dy4U7h9IoNWBoj4lA=)
                          3: c4Hg8aaGDmQwSsEALGqKPvw6mkk.roa (hash: SkTPplvw/sm8MXOdogI7RT8Y1au4dzZWlX3ifyhwqP0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:26:e8:11:cb:1b:a8:b9:b7:53:25:2d:86:28:f0:bd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18127744b4c665c2ef9dea4df867b543ac65669
        Validity
            Not Before: Mar 28 06:29:15 2023 GMT
            Not After : Mar 29 06:29:15 2023 GMT
        Subject: CN=3f5de27ef6b100dc98e2893468e654c7e6b97dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:3b:ac:d2:90:d1:70:ad:a2:0a:11:2b:35:
                    a0:aa:f7:3e:75:4a:86:2c:0b:24:a5:60:a0:4c:89:
                    a7:32:b5:5e:c5:af:8d:9c:3b:af:09:b1:57:71:c5:
                    ed:ca:04:09:ce:21:69:6d:ec:7d:c3:14:93:94:98:
                    3a:5c:28:41:11:0b:da:41:03:f3:fc:14:5b:2f:1c:
                    6d:8e:89:b1:0a:3f:91:c0:b8:98:f6:ed:bc:bf:9a:
                    1a:9f:64:c4:e2:16:f0:40:e6:c9:d7:4d:13:67:c5:
                    0c:07:f3:7b:5e:16:5e:f2:4e:6e:09:fe:ee:39:3d:
                    07:06:a9:4c:4c:0b:15:4f:de:b7:cf:62:82:a7:3c:
                    88:fd:d7:39:3e:6a:c7:09:d3:dd:b6:ee:ce:7a:d4:
                    95:62:d8:f2:8d:51:9d:82:bf:fc:75:8c:79:bf:53:
                    33:1e:5b:78:0e:87:63:da:7d:94:18:41:26:3d:91:
                    35:ca:07:25:b5:76:a0:05:e1:8e:69:3f:9e:a1:c3:
                    3b:6d:44:f4:c1:0a:98:b3:d7:94:8e:78:50:38:a6:
                    a9:00:52:f0:3a:17:d2:65:63:39:d7:ad:ab:91:ee:
                    f9:69:85:bc:27:23:95:50:37:e5:35:bb:c5:2a:e7:
                    d9:a9:f2:56:bf:68:38:7a:02:c8:10:e9:a8:8d:49:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5D:E2:7E:F6:B1:00:DC:98:E2:89:34:68:E6:54:C7:E6:B9:7D:AB
            X509v3 Authority Key Identifier:
                keyid:D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:db:4f:1c:00:90:cb:90:ec:6e:be:11:fb:f1:6d:7b:5e:
         63:8e:94:07:b7:4c:42:40:4d:72:6a:db:fa:05:96:8a:a6:6e:
         74:7a:75:de:13:06:1d:d4:ba:72:99:82:44:df:3f:94:e7:14:
         42:3c:af:f3:1a:dd:13:63:35:80:49:63:3c:55:59:7b:78:37:
         3c:5f:5a:7e:6b:0b:80:85:3b:8e:0d:44:1f:1c:ec:cf:68:2b:
         82:b9:a7:2e:64:7d:25:0d:4b:23:1e:ed:82:2b:15:db:2f:96:
         07:28:39:27:5d:60:49:be:37:7f:d6:6e:fb:d2:a7:af:2b:74:
         eb:47:ac:5a:b7:bc:0c:05:d9:d3:46:51:28:71:2a:8a:9c:88:
         61:c1:cd:6c:c7:82:7f:70:68:19:4d:ec:87:51:8b:8e:a9:ff:
         f4:19:08:fb:7f:c2:77:d2:25:90:60:0a:71:74:05:02:3f:f7:
         43:d8:ed:46:7c:7b:2a:2e:b3:91:57:92:96:d9:9f:8c:58:1e:
         23:e4:a6:39:8c:04:5c:c0:14:cc:71:a4:dc:5a:94:b2:af:70:
         1f:c7:90:ed:53:30:a2:81:15:49:56:a6:c6:5d:7d:72:f6:cb:
         3c:54:de:f4:e3:05:02:84:02:09:8a:9b:8e:fa:1e:a7:91:bc:
         46:8e:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----