Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.mft
File:                     ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.mft (raw, json)
Hash identifier:          S2iETfnIX2Oj70/ggABe2Lyg0Tfa1ehBsLSOlxPMSNY=
Subject key identifier:   7C:C7:83:F9:3E:F5:B0:45:AD:7C:E1:61:BE:B4:D5:3A:79:CE:82:4A
Authority key identifier: CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
Certificate issuer:       /CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Certificate serial:       0187039B15D737906F2230D86A7B79297D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.mft
Manifest number:          053F
Signing time:             Tue 21 Mar 2023 09:58:27 +0000
Manifest this update:     Tue 21 Mar 2023 09:58:27 +0000
Manifest next update:     Wed 22 Mar 2023 09:58:27 +0000
Files and hashes:         1: ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.crl (hash: +jMCc7prCZEtwWoizj+DhYH6vyG7780V8UsdWdLveME=)
                          2: yzuKCsRbsf0EXzepOqRJWqXFRBE.roa (hash: WLToO/D4aoCfLdmRRMRiHzpeYEnGwbzm5pco+m+YgOQ=)
                          3: zw-ZWQy_mAw4lR9zWUNxAD2nh8M.roa (hash: EzyagHrqLBNuryN8Wil1h309BdHFC40Q3jovmBtoozk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:03:9b:15:d7:37:90:6f:22:30:d8:6a:7b:79:29:7d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
        Validity
            Not Before: Mar 21 09:58:27 2023 GMT
            Not After : Mar 22 09:58:27 2023 GMT
        Subject: CN=7cc783f93ef5b045ad7ce161beb4d53a79ce824a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:f9:a3:70:2b:f1:7d:97:d9:0b:ce:68:6b:
                    5e:2d:78:7d:92:ea:0e:6c:68:e7:a8:c2:dc:a0:00:
                    7e:56:20:86:77:05:10:f0:82:33:10:30:a1:df:4e:
                    d9:6f:d3:07:95:b2:75:83:9d:28:41:3c:ce:08:2d:
                    04:18:d3:10:e4:96:dc:c9:35:7c:3a:2b:b8:f4:13:
                    38:fc:90:06:52:18:f6:c9:6f:34:30:bd:06:6b:8d:
                    b9:8b:8b:e1:aa:40:72:f2:96:2e:f0:ff:43:a1:ec:
                    70:fa:e9:29:86:ed:dc:b1:89:d5:55:92:f5:fe:94:
                    c1:a4:80:80:20:25:48:ad:44:e6:95:0b:95:6a:bf:
                    ab:3a:4d:7d:ca:ea:57:7b:59:70:9f:5a:1d:c9:b8:
                    f3:f5:f7:d1:5f:3f:32:83:4a:e4:e0:d8:f9:46:6c:
                    d5:e1:e4:ee:c2:f8:b0:c6:de:18:19:38:d9:77:f2:
                    e0:00:70:ef:75:73:d1:02:dc:bb:76:b6:1e:5a:67:
                    39:cc:73:83:bf:be:24:a9:c2:c0:2b:c9:35:01:02:
                    c9:b9:30:e0:2c:fe:2f:f7:1e:88:7a:2e:94:3a:8b:
                    2c:ed:ec:77:31:fd:ea:b0:a5:7c:ab:ce:90:09:d2:
                    8c:7e:e1:3a:dd:72:59:50:24:70:0d:fb:90:0b:d7:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:83:F9:3E:F5:B0:45:AD:7C:E1:61:BE:B4:D5:3A:79:CE:82:4A
            X509v3 Authority Key Identifier:
                keyid:CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:e7:f3:67:81:f2:35:73:8f:46:23:57:42:e4:27:3c:74:
         36:ef:1b:f1:78:be:f3:9f:4a:9c:38:53:4d:c1:89:f5:0f:62:
         15:fe:51:a1:72:6f:82:d2:24:a3:9e:4c:30:bc:8f:87:5e:fe:
         3a:b4:03:ed:93:9d:cf:ad:47:e7:5e:db:2d:ac:74:5a:9b:f2:
         8a:44:64:49:d4:82:12:5d:07:e3:20:a1:da:55:f6:bd:60:96:
         10:d6:66:06:eb:e7:8d:0f:95:75:a0:f0:93:4e:52:ba:4a:4f:
         53:45:c0:ed:c4:5d:3b:61:fa:1f:21:91:92:1e:6b:e6:b3:f2:
         53:44:23:1b:ed:21:eb:fc:e5:97:86:d0:b7:7e:e1:46:a0:c1:
         93:83:2e:af:e7:08:b7:9f:7d:a6:c5:ae:d2:3f:ed:56:4b:82:
         12:be:26:5a:0a:30:3f:a0:ea:1f:49:fe:01:2b:01:f1:01:f4:
         30:f5:d4:9f:57:43:7b:72:73:6e:f6:04:58:d1:a6:f6:f2:07:
         4a:c5:c7:7e:9a:e7:33:7b:3d:70:3f:23:d8:3a:01:9a:8f:75:
         7e:9a:20:e9:69:b5:41:7f:8e:07:79:bf:21:fb:7c:44:01:cf:
         6f:45:a6:38:30:91:ec:e5:92:e7:31:db:ac:fc:57:77:3f:b3:
         24:df:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----