Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fb2246-0449-4be2-8938-ba2f94908266/1/ks3CLKbthCv_3Dkkg1kCsIvrVN4.mft
File:                     ks3CLKbthCv_3Dkkg1kCsIvrVN4.mft (raw, json)
Hash identifier:          xTuwYWBeV1HW6yqBRsIAv8HyKlz/kY+Ph/XcjCBz3PA=
Subject key identifier:   9C:8E:56:2C:7C:BC:2C:41:5C:26:00:45:30:E0:CB:C4:D9:57:C6:AE
Authority key identifier: 92:CD:C2:2C:A6:ED:84:2B:FF:DC:39:24:83:59:02:B0:8B:EB:54:DE
Certificate issuer:       /CN=92cdc22ca6ed842bffdc3924835902b08beb54de
Certificate serial:       0186E8AD68F693CEC98123F27046E6F5B638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks3CLKbthCv_3Dkkg1kCsIvrVN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/fb2246-0449-4be2-8938-ba2f94908266/1/ks3CLKbthCv_3Dkkg1kCsIvrVN4.mft
Manifest number:          0CD0
Signing time:             Thu 16 Mar 2023 04:28:43 +0000
Manifest this update:     Thu 16 Mar 2023 04:28:43 +0000
Manifest next update:     Fri 17 Mar 2023 04:28:43 +0000
Files and hashes:         1: ks3CLKbthCv_3Dkkg1kCsIvrVN4.crl (hash: 0VIMGe2UVcnt31gyPiGmF/ErKlZ0fE/nZ2mceS13Wak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e8:ad:68:f6:93:ce:c9:81:23:f2:70:46:e6:f5:b6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cdc22ca6ed842bffdc3924835902b08beb54de
        Validity
            Not Before: Mar 16 04:28:43 2023 GMT
            Not After : Mar 17 04:28:43 2023 GMT
        Subject: CN=9c8e562c7cbc2c415c26004530e0cbc4d957c6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:98:99:17:35:ee:d6:2e:1d:bf:f5:62:18:
                    0b:70:72:2f:eb:62:9d:70:cf:6a:c2:9a:15:99:e6:
                    3f:0d:6c:42:e6:ef:8e:7a:36:6d:06:22:63:75:5c:
                    f2:9a:6e:f4:31:e2:d3:78:f2:ff:43:52:c8:5b:d7:
                    6b:fe:2a:d5:6f:e8:82:07:84:70:6b:2f:ba:53:f3:
                    00:c5:fe:5e:d4:21:21:8a:97:e9:90:01:8a:99:8d:
                    20:a1:27:92:60:50:cc:00:34:c2:0c:1f:c1:b1:d3:
                    e5:d4:c4:49:2d:11:31:b2:f8:f5:38:f4:05:dc:1e:
                    e1:85:af:b3:87:2c:9d:6e:7f:78:4b:b2:88:bc:ec:
                    a8:92:c5:e5:d7:a7:bd:6b:1e:93:21:11:86:4a:9b:
                    5c:84:06:8c:90:56:e5:97:5c:27:bc:ed:94:09:f7:
                    bf:0f:e7:de:97:96:a7:0e:6c:3f:b7:a8:9f:0e:22:
                    3b:be:db:ee:dd:bd:d1:2e:e4:69:3e:a2:cb:5b:41:
                    fe:7b:bb:84:0a:a0:9c:ee:ea:8e:09:01:d8:e9:06:
                    c3:f6:2c:28:1f:d1:e0:90:87:8d:cf:e9:d4:3c:0d:
                    05:af:fb:75:44:51:7f:64:d5:01:eb:25:3f:d7:fd:
                    27:c0:26:41:87:38:7e:de:39:22:c5:07:ad:ce:53:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8E:56:2C:7C:BC:2C:41:5C:26:00:45:30:E0:CB:C4:D9:57:C6:AE
            X509v3 Authority Key Identifier:
                keyid:92:CD:C2:2C:A6:ED:84:2B:FF:DC:39:24:83:59:02:B0:8B:EB:54:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks3CLKbthCv_3Dkkg1kCsIvrVN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fb2246-0449-4be2-8938-ba2f94908266/1/ks3CLKbthCv_3Dkkg1kCsIvrVN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fb2246-0449-4be2-8938-ba2f94908266/1/ks3CLKbthCv_3Dkkg1kCsIvrVN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:57:98:58:57:fa:dc:51:75:6f:f5:79:08:a3:51:f9:d7:5e:
         44:80:0b:9c:50:ab:ae:2d:f1:e1:91:ac:d2:db:f0:11:ab:6f:
         ef:77:d3:00:78:94:5c:5d:9a:8c:27:19:01:78:78:bf:f7:ee:
         ba:cf:fb:3a:bf:7e:6d:80:01:ee:bb:2d:61:91:92:59:3f:7f:
         ef:cf:91:3a:c6:73:e1:f2:c7:54:c5:34:b5:04:61:d3:9d:ae:
         9f:57:f5:1f:9a:ee:f5:7f:28:ad:49:8d:12:8f:71:89:2a:e9:
         89:19:fe:85:15:0c:e2:80:6e:7f:cc:b3:61:12:0a:1d:8c:d3:
         1b:74:b4:13:8a:71:19:2d:99:fb:cb:cd:87:62:3d:9f:3e:e5:
         9d:25:15:de:54:ec:be:b0:53:eb:c9:d2:00:7e:f5:ab:a5:ea:
         4f:c0:c6:6e:71:2b:67:8c:d9:14:fd:96:62:04:cf:e3:51:f0:
         23:90:52:6e:2f:ba:82:0b:97:a8:a0:3c:88:7d:54:c3:eb:26:
         d2:94:e6:e9:00:4c:6f:c5:54:06:b4:26:e1:87:d4:ab:df:7f:
         62:f7:9c:2f:e6:36:8f:d9:6b:ef:23:52:47:b8:22:42:7c:97:
         08:4b:ba:85:d9:5f:90:eb:6a:a1:62:e9:cc:82:6d:4a:44:50:
         29:16:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----