Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/EpctxIWp5Zba1A2k4QEx2JzW70U.mft
File:                     EpctxIWp5Zba1A2k4QEx2JzW70U.mft (raw, json)
Hash identifier:          /1vpRkoeO9KgFXJa9xi7HhvNjy4TKvACKcJWlBeUJNc=
Subject key identifier:   52:ED:56:7F:A1:41:76:85:0B:23:2F:20:F6:AB:64:CC:EE:5D:92:67
Authority key identifier: 12:97:2D:C4:85:A9:E5:96:DA:D4:0D:A4:E1:01:31:D8:9C:D6:EF:45
Certificate issuer:       /CN=12972dc485a9e596dad40da4e10131d89cd6ef45
Certificate serial:       018A1B77285BB894ACBF6CFF3F07D36142C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EpctxIWp5Zba1A2k4QEx2JzW70U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/EpctxIWp5Zba1A2k4QEx2JzW70U.mft
Manifest number:          05F0
Signing time:             Tue 22 Aug 2023 04:18:28 +0000
Manifest this update:     Tue 22 Aug 2023 04:18:28 +0000
Manifest next update:     Wed 23 Aug 2023 04:18:28 +0000
Files and hashes:         1: EpctxIWp5Zba1A2k4QEx2JzW70U.crl (hash: t3zbrjiGEMBRTupPQy0NB4QyHTC8ckAthm6bXaM3OWU=)
                          2: Ff7RQwPztxqbFh6oISmMTIQ4xtI.roa (hash: Ubx5blVonWY4sJc/wfjJdWjK9SQL/3KaVSbyiR2BuC0=)
                          3: IukcK1yRsBywRNrnKl0dLTWvP2Q.roa (hash: b/dSYf5E2sFcf+iCRiSIs+2paWYFN6iE5ZxXVqHLclA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1b:77:28:5b:b8:94:ac:bf:6c:ff:3f:07:d3:61:42:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12972dc485a9e596dad40da4e10131d89cd6ef45
        Validity
            Not Before: Aug 22 04:18:28 2023 GMT
            Not After : Aug 23 04:18:28 2023 GMT
        Subject: CN=52ed567fa14176850b232f20f6ab64ccee5d9267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:c3:fc:bd:e0:05:29:61:5f:9f:eb:94:6f:
                    bd:7d:9d:01:ab:49:36:aa:1d:b0:a4:d0:31:0e:31:
                    a6:6d:4e:e2:92:34:34:8c:ee:10:01:f9:28:3c:16:
                    02:2d:8d:d5:a7:fd:20:0f:7e:e2:a9:22:5c:6d:a8:
                    8c:7f:0c:30:44:11:05:e8:31:7a:bc:b6:dc:e8:19:
                    6e:f9:32:29:ef:da:e9:44:ae:e0:8c:77:54:8b:32:
                    c1:35:2c:bc:be:e9:a6:24:6c:ea:e2:9c:72:cc:67:
                    e2:85:ed:6e:9f:ce:9e:c2:75:64:6c:7f:35:6f:48:
                    22:c2:95:2c:8d:cc:be:38:85:1e:79:dc:5d:ce:7a:
                    f0:21:75:96:c0:5e:d4:88:4b:ba:1e:4b:86:81:71:
                    14:74:9e:13:43:ab:d3:cf:90:5c:42:ac:fb:af:a0:
                    1c:d3:29:51:17:2d:ea:9f:81:73:19:11:9d:d7:a3:
                    56:f6:4a:c4:86:bd:8e:04:0d:91:74:a2:19:4c:c2:
                    2b:b5:c9:11:c9:48:b9:8b:00:c8:49:9d:d7:2e:0e:
                    9b:71:db:69:8b:e2:1c:0c:32:1c:f0:a8:dd:f4:ce:
                    ca:56:04:2a:8a:d2:2d:3b:d1:c1:d3:5b:1e:f7:ea:
                    60:2a:c2:17:72:7b:f5:76:b1:9a:13:35:5b:9f:89:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:ED:56:7F:A1:41:76:85:0B:23:2F:20:F6:AB:64:CC:EE:5D:92:67
            X509v3 Authority Key Identifier:
                keyid:12:97:2D:C4:85:A9:E5:96:DA:D4:0D:A4:E1:01:31:D8:9C:D6:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpctxIWp5Zba1A2k4QEx2JzW70U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/EpctxIWp5Zba1A2k4QEx2JzW70U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/EpctxIWp5Zba1A2k4QEx2JzW70U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:7e:9f:bf:1d:be:93:bf:52:8c:6e:a3:4e:11:0a:3a:4d:
         fd:64:53:7f:1e:64:01:1d:a6:f0:a5:1c:61:15:45:ca:1b:65:
         aa:51:dc:f4:37:0a:e1:ac:e3:06:ea:74:93:8f:77:08:d3:5f:
         16:e6:5c:28:e0:b9:fb:df:9c:30:8a:f5:e5:ea:93:1c:dd:94:
         4d:37:26:f0:34:5d:10:31:6b:26:4c:5e:e0:da:93:c7:5f:09:
         a9:71:1f:a3:71:83:db:08:b4:4e:ba:3e:a7:6c:78:78:77:5d:
         94:2a:75:ab:76:cb:cf:8d:75:35:b5:23:36:1a:21:3f:df:1a:
         53:e6:1b:b2:13:9e:1a:ae:e3:dd:e4:60:1e:b1:0a:d5:41:45:
         4f:00:0f:38:bc:33:40:a0:f8:22:01:ff:de:3b:70:6c:62:72:
         09:36:4b:b4:07:2a:5c:9e:c3:62:b5:8b:56:22:e7:90:10:1b:
         4c:6f:0e:e1:30:d8:b7:20:87:f7:4d:89:ff:74:c6:e8:fe:90:
         f0:6d:47:16:0a:5e:6f:80:6f:90:e5:8c:04:42:82:3b:81:fb:
         48:de:d6:c4:19:00:39:5d:f2:72:02:73:48:65:ce:c1:71:57:
         45:3c:0d:b8:c6:1e:b0:2b:13:6d:64:20:d3:aa:b7:0b:a0:7c:
         f1:59:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----