Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.mft
File:                     2K4dfMaLeMSUxTDqpKD3VZ4lpO8.mft (raw, json)
Hash identifier:          XA4xiQXhGcQtj4rt5Gq6xWgyB7HyMJlO0GnD4nu+Zyk=
Subject key identifier:   B6:A3:05:C1:15:DC:D3:AE:0F:42:64:38:95:58:8B:77:E8:E2:16:60
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Certificate issuer:       /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial:       0185ED669041CA5E13970417E2E9459D6E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.mft
Manifest number:          0C45
Signing time:             Thu 26 Jan 2023 09:26:39 +0000
Manifest this update:     Thu 26 Jan 2023 09:26:39 +0000
Manifest next update:     Fri 27 Jan 2023 09:26:39 +0000
Files and hashes:         1: 1--maDYJz0yPO9SM10sMATHW8fx0.roa (hash: WAwN/ncikFUP+CH1W8vcb8lhlujc3oU8dxcTFz2oXws=)
                          2: 2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl (hash: mz/8llVQk5fPNF/RrgrJej+XiW5S+bz4jZq3InwOXpU=)
                          3: LIUBOme4i3T1_sE9grXjIqJaqWM.roa (hash: 9b6FtmnAOZpb4OwgQtCpwazQSvzoZOmA1DuDgV4f1T0=)
                          4: _2OGEM_D_78-8AFmka2dBCf3QXc.roa (hash: R9DtsYL8SQ8hAHjU2Eqx30WmC21tW/lAK/MKTt6hbH8=)
                          5: ykzyTv7T1S2XwwDG-sggPjN9lsM.roa (hash: Vk57ZFBFQ6iOSjEXuuqcT/SJyN9aVVIdiynEnpj05wg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ed:66:90:41:ca:5e:13:97:04:17:e2:e9:45:9d:6e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
        Validity
            Not Before: Jan 26 09:26:39 2023 GMT
            Not After : Jan 27 09:26:39 2023 GMT
        Subject: CN=b6a305c115dcd3ae0f42643895588b77e8e21660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:99:ff:fa:9a:71:8f:c7:a8:fc:a2:5d:bd:
                    ae:03:88:2e:30:87:17:03:b6:00:26:06:97:8d:79:
                    3d:9d:3b:6e:9a:f8:ff:6f:66:80:fe:33:57:9d:40:
                    67:0a:8b:df:44:4d:d0:3e:84:10:85:9f:9a:64:53:
                    d9:49:a7:4a:72:64:20:50:cc:82:ba:3b:60:56:d1:
                    67:b9:19:33:2d:75:90:e6:2a:10:2e:3c:d5:f0:8e:
                    b2:1b:0e:6b:73:af:f4:45:67:f7:31:e9:98:4b:62:
                    71:fc:ef:96:03:5a:93:bc:fe:10:27:2c:e0:ff:6d:
                    04:00:45:53:24:5e:95:b5:ee:48:69:07:a1:aa:f0:
                    ec:d4:b9:d8:8b:cc:c5:48:94:8b:14:4d:17:67:48:
                    3a:d1:2a:06:ec:21:0d:30:ca:28:67:1b:3a:4d:11:
                    4d:3a:ff:6a:47:d0:24:ef:9f:b9:30:81:83:b5:c9:
                    bf:f3:04:f5:eb:0f:57:06:10:8c:f6:44:0e:b2:ca:
                    4f:d1:1e:26:ff:18:3b:82:f8:eb:40:e8:60:bb:1c:
                    c4:21:40:c5:11:c6:1d:fc:07:d6:d5:b3:9c:23:25:
                    18:dd:8a:60:3d:fe:9a:e3:c2:45:38:60:3b:7e:05:
                    a5:36:63:7f:65:f2:c1:f4:fe:e9:aa:01:85:48:bc:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:05:C1:15:DC:D3:AE:0F:42:64:38:95:58:8B:77:E8:E2:16:60
            X509v3 Authority Key Identifier:
                keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:92:ed:9a:01:17:d3:32:92:b2:6d:d1:a6:51:fb:5d:69:b5:
         1d:05:43:53:d1:6c:33:23:f0:48:27:2a:26:e6:1a:41:8f:b8:
         d8:ac:ed:cf:98:16:d5:db:bd:1c:df:5f:e1:b2:f2:6a:25:36:
         3f:cd:ad:90:5a:f7:2d:cc:c0:ac:1f:81:bd:59:34:c1:db:49:
         9c:d6:ba:43:9e:e8:43:f3:57:b7:af:d3:a1:c7:38:c1:7f:ab:
         2e:14:c3:4a:b3:09:35:82:2f:37:85:54:97:84:e5:4d:b9:92:
         c2:d1:4a:70:f8:3d:ed:c1:9e:88:20:1e:13:21:60:25:c8:e5:
         b6:a5:a9:6e:b8:26:b5:4d:22:0b:b0:8b:60:84:02:5b:ab:62:
         dd:d0:75:a1:e6:72:b8:ae:6b:af:b3:d9:63:6e:67:55:ba:72:
         0a:04:e8:65:bc:2b:9c:28:ea:53:6b:87:03:3b:d2:87:83:82:
         89:3c:f0:fe:7d:af:2d:e7:5e:03:85:92:00:30:bb:45:8d:75:
         c1:93:8c:83:5c:96:c0:6f:f2:6e:2d:d9:29:d7:24:ae:20:89:
         3f:cd:05:1a:73:a5:1c:9e:78:ea:1b:94:8c:7d:ad:a7:76:5c:
         39:38:c7:4a:cb:91:89:82:02:18:81:e3:7d:1f:82:4d:ae:4a:
         5a:38:6e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----