Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/ktP600SgFD9Ksyjp61-LeJX51nI.mft
File:                     ktP600SgFD9Ksyjp61-LeJX51nI.mft (raw, json)
Hash identifier:          hMr5XSjHAophfW0bavbkHty7gfSMPEzRgVCXLUpi2R0=
Subject key identifier:   23:20:44:72:2E:A4:90:36:EF:79:3A:BC:C4:32:D6:0E:2A:32:EB:6A
Authority key identifier: 92:D3:FA:D3:44:A0:14:3F:4A:B3:28:E9:EB:5F:8B:78:95:F9:D6:72
Certificate issuer:       /CN=92d3fad344a0143f4ab328e9eb5f8b7895f9d672
Certificate serial:       018B7101AEB0A38E8F07FAEE34ED97B92AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktP600SgFD9Ksyjp61-LeJX51nI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/ktP600SgFD9Ksyjp61-LeJX51nI.mft
Manifest number:          0F59
Signing time:             Fri 27 Oct 2023 12:00:17 +0000
Manifest this update:     Fri 27 Oct 2023 12:00:17 +0000
Manifest next update:     Sat 28 Oct 2023 12:00:17 +0000
Files and hashes:         1: 1eYtr_PgP6NMydkdlAICMhtcKAo.roa (hash: 0gSRFO8Syc0h0V/zjzSEwr/Hy0BVbC6dNFxWmiH3hJE=)
                          2: ktP600SgFD9Ksyjp61-LeJX51nI.crl (hash: h69Qm9RoakLLSaYGuY35qpRpFsTF8dXxeewv5btEfYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:71:01:ae:b0:a3:8e:8f:07:fa:ee:34:ed:97:b9:2a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d3fad344a0143f4ab328e9eb5f8b7895f9d672
        Validity
            Not Before: Oct 27 12:00:17 2023 GMT
            Not After : Oct 28 12:00:17 2023 GMT
        Subject: CN=232044722ea49036ef793abcc432d60e2a32eb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:2f:1e:9d:91:22:af:d8:c1:be:93:1a:e9:
                    0a:46:fc:de:4b:da:fb:17:df:4c:26:dc:c6:55:52:
                    17:48:da:f2:18:e3:e0:9d:9f:18:ec:d5:e1:31:9d:
                    06:0a:25:f1:73:66:5a:ba:b9:22:8e:6c:43:78:b2:
                    02:54:99:4c:ec:a4:7d:c0:04:5c:94:33:af:49:b3:
                    8c:a0:c5:ab:94:a4:60:78:b4:23:c6:3e:6a:6f:c4:
                    d3:7d:71:0d:e2:b8:7b:25:cf:b4:0c:16:b4:8f:db:
                    fd:aa:33:8a:18:95:ae:30:f0:78:9d:e9:38:16:04:
                    09:b1:16:43:3a:e3:46:cc:20:09:9c:67:e7:cb:19:
                    65:40:e1:c7:85:1f:84:88:c3:52:e2:b7:49:3b:55:
                    14:00:77:0b:5a:4b:c2:ac:ed:e6:82:32:02:d9:c8:
                    b1:d6:4c:7c:f9:83:07:f8:0f:ff:6c:26:85:61:7e:
                    00:bb:ec:5b:90:be:4f:03:98:2c:75:be:5f:c1:dc:
                    d3:12:41:b8:fe:3d:e1:d4:56:95:9f:cc:ec:99:c3:
                    a7:ba:37:0f:dd:66:bd:83:5a:cd:92:b1:c9:2c:ce:
                    9a:8f:6f:8f:03:58:85:be:73:23:ec:38:c7:24:02:
                    7d:1a:f2:ec:bf:93:e1:2b:6b:1d:89:4e:db:72:fa:
                    2b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:20:44:72:2E:A4:90:36:EF:79:3A:BC:C4:32:D6:0E:2A:32:EB:6A
            X509v3 Authority Key Identifier:
                keyid:92:D3:FA:D3:44:A0:14:3F:4A:B3:28:E9:EB:5F:8B:78:95:F9:D6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktP600SgFD9Ksyjp61-LeJX51nI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/ktP600SgFD9Ksyjp61-LeJX51nI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16f628-6b48-41e0-bad3-2754123ee6a4/1/ktP600SgFD9Ksyjp61-LeJX51nI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:0d:4f:9d:93:74:cd:93:46:4b:08:dd:25:7a:c9:09:93:de:
         5f:c7:78:18:10:5f:9c:96:25:cd:0e:3f:37:2f:08:b7:c5:b1:
         1b:e7:3f:fb:a5:74:6f:42:9e:ef:e7:74:b8:77:81:8e:dd:6c:
         10:1b:90:9e:bb:4d:34:9a:16:70:9d:94:8f:ce:13:63:33:b1:
         9f:95:66:39:25:ca:1f:c0:c7:de:a2:d1:e3:d0:90:30:b1:3f:
         c6:0c:2c:39:36:06:05:ca:47:b5:6a:39:da:09:42:b1:4f:cd:
         21:71:d0:9e:0f:4e:c8:c0:6a:e7:81:5c:3f:f3:5e:06:7c:6b:
         2f:66:06:96:af:0f:16:76:62:5e:36:8c:8c:27:6b:0b:e8:a4:
         22:1b:2a:e5:87:16:ed:18:78:cd:3e:a6:24:4d:2d:8a:b7:cd:
         17:55:70:bd:2b:93:4b:dc:5e:06:53:9d:ef:24:18:05:ce:f9:
         89:61:fb:89:48:f4:f0:63:6b:3f:17:ef:56:0a:18:59:88:c8:
         b4:af:8f:96:c1:44:40:4b:d2:66:19:06:b1:ff:3e:e3:c3:b3:
         6d:04:0e:8f:38:6a:f2:06:0d:02:2c:06:a1:f4:cf:30:69:bd:
         eb:a8:a9:a0:db:4a:b0:51:a2:a8:99:92:f0:64:a8:5b:54:41:
         d7:fd:33:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----