Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.mft
File:                     DanN3Sdrjj-LDJeJvMNKmWA6Wlc.mft (raw, json)
Hash identifier:          Asv1IpK5OlKDzeQGFoMRmeEoAwVLiJ9g2p9HJLCZTNk=
Subject key identifier:   D4:89:B9:9B:9A:81:C4:EE:C7:4E:2D:51:F7:56:75:1E:7E:E2:4C:77
Authority key identifier: 0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57
Certificate issuer:       /CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
Certificate serial:       01870D7548642DAA9E4A3B1075B0B91070B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.mft
Manifest number:          05A2
Signing time:             Thu 23 Mar 2023 07:53:22 +0000
Manifest this update:     Thu 23 Mar 2023 07:53:22 +0000
Manifest next update:     Fri 24 Mar 2023 07:53:22 +0000
Files and hashes:         1: DanN3Sdrjj-LDJeJvMNKmWA6Wlc.crl (hash: GmDE7KpC87k19BhFMCYGqJGS7kj1LLWeYoIzjYi1pjc=)
                          2: rIHNQpYcPEpvjs0E3x3HY-aCuwY.roa (hash: HjLp3OoL+YT77gnKYZajbgeScOnKEAwm8CGesbtYtnY=)
                          3: vsErZ4EpgJamXoleYuPq-8T7wfY.roa (hash: XInsNoJtmV+OVJnQXnvUC6FqR41lVrD3Wh52K6oRXR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:75:48:64:2d:aa:9e:4a:3b:10:75:b0:b9:10:70:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
        Validity
            Not Before: Mar 23 07:53:22 2023 GMT
            Not After : Mar 24 07:53:22 2023 GMT
        Subject: CN=d489b99b9a81c4eec74e2d51f756751e7ee24c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:46:0b:5f:f5:ff:71:bf:cd:af:48:7a:b0:
                    3f:64:d3:74:2e:81:06:62:49:c6:89:27:9e:c2:8c:
                    30:16:3a:10:ba:72:56:f6:ff:9c:46:60:86:b2:f8:
                    bf:6b:2c:f2:e6:3e:d5:29:85:28:5d:17:b1:d5:e9:
                    b2:dc:26:a0:4b:27:48:6d:5b:01:f0:83:fd:b7:bf:
                    a8:97:7d:df:1f:ef:ee:ab:47:d5:55:2e:f5:1f:5f:
                    63:96:b2:29:52:7d:67:06:78:98:e2:8f:56:9f:d6:
                    97:7f:2f:27:3a:6c:49:d7:99:09:33:a2:d6:4f:a3:
                    db:cd:3c:01:20:49:cc:54:1a:5e:b8:75:d3:bb:36:
                    cf:87:21:5f:4d:bc:d5:a5:3f:b1:e0:55:e1:02:dd:
                    e2:92:a5:59:4b:5d:0b:0c:93:63:b2:17:45:bc:7a:
                    bd:21:fa:c4:1b:c1:ed:e7:64:64:bb:4b:70:56:6e:
                    2e:3f:84:4c:3c:05:37:43:4f:5f:40:7a:0e:4d:cf:
                    a6:fd:e3:6a:fe:31:d1:9e:92:4c:f0:09:1f:8c:8f:
                    d6:c8:1e:40:5a:5a:eb:eb:62:99:1d:6b:02:97:6b:
                    3a:bd:a9:85:9b:18:af:a5:59:8b:8d:eb:c8:d2:db:
                    dd:82:94:a0:b8:c3:84:25:c9:3c:fe:83:2e:fd:c2:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:89:B9:9B:9A:81:C4:EE:C7:4E:2D:51:F7:56:75:1E:7E:E2:4C:77
            X509v3 Authority Key Identifier:
                keyid:0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1b:d3:87:6a:12:a1:46:2c:72:36:57:a3:be:17:c2:9a:11:
         a6:1f:c6:24:ca:e9:77:d6:70:c2:a2:6c:e9:9d:65:71:8a:a9:
         fd:bb:67:af:a3:4b:9c:6c:b0:99:a9:3e:40:74:d3:66:b4:78:
         37:42:0c:d0:1a:2a:78:ec:fd:d0:6c:25:ad:93:7f:c7:60:83:
         15:da:4f:97:64:2c:b5:cc:06:91:45:ef:49:2c:36:6a:e1:76:
         23:2b:a6:bf:42:82:e8:ae:1d:0e:9b:21:3b:4e:00:0a:88:ad:
         7e:86:d8:a4:5a:3c:04:18:87:ee:71:8d:55:9b:c8:3d:16:cf:
         5b:f2:fe:b5:92:05:aa:fc:ca:85:71:c1:1d:a5:38:bf:14:ec:
         80:3a:91:8b:3d:9b:ff:e3:54:c4:ce:c7:96:66:f3:3b:da:d3:
         29:ff:8c:47:fd:ad:4d:74:66:05:fe:5f:9e:96:b7:df:dc:af:
         0e:c3:5a:4c:a5:25:c4:d0:f7:f3:1e:1b:47:c9:3a:3b:eb:a0:
         83:e5:79:6e:d6:49:cc:81:42:f1:3b:91:6c:e5:16:6e:70:e1:
         b9:88:68:16:59:a1:88:97:ff:bf:df:2a:69:ff:b1:34:2d:bd:
         de:f1:18:20:59:0e:17:e3:09:41:61:1a:2b:89:77:68:ca:6a:
         5f:e8:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----