Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.mft
File:                     YkHuLESs6KczhMJVrXfGwfBFJIY.mft (raw, json)
Hash identifier:          gr+Ygq8JScKAEX8Xwj3UbZL/BcEob59zz8OnvzdIUgc=
Subject key identifier:   E4:59:B3:69:28:A4:01:DE:B4:88:28:2E:9F:3B:09:6D:E6:77:FC:DB
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Certificate issuer:       /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial:       018C5BC17156B2F7C4F677CF2DC0A00D219A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.mft
Manifest number:          05AF
Signing time:             Tue 12 Dec 2023 02:00:53 +0000
Manifest this update:     Tue 12 Dec 2023 02:00:53 +0000
Manifest next update:     Wed 13 Dec 2023 02:00:53 +0000
Files and hashes:         1: 6qU6lKP0IjN7mshlfyzm7Sc4wn4.roa (hash: ++jaHchRw7S5+/M/Y4WLIGbo4nVBKjhxyeIRR20j/Ks=)
                          2: 8CV_4ygnLIHarraBhz3oGUMWMOk.roa (hash: L6jHG9A6f7B6PJSq79KhFuddAKgB7h0BRkRypkd+Otw=)
                          3: YkHuLESs6KczhMJVrXfGwfBFJIY.crl (hash: oOgu9wz8hbfH9m5ZjUgFSzPCedvd5ZRetBPtfOGf7sE=)
                          4: mT-oHuL0v79KccCyu48NsarCeOc.roa (hash: AXV2/21YI2Wbg6utxDV0PptYaVwUUwyMR9Suj5x0ces=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5b:c1:71:56:b2:f7:c4:f6:77:cf:2d:c0:a0:0d:21:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
        Validity
            Not Before: Dec 12 02:00:53 2023 GMT
            Not After : Dec 13 02:00:53 2023 GMT
        Subject: CN=e459b36928a401deb488282e9f3b096de677fcdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:c7:ce:06:27:2f:06:c7:5a:13:6a:6f:ee:
                    ea:fa:34:94:08:73:97:b8:f9:a1:7d:74:c6:90:82:
                    a0:4a:0c:30:e7:73:f9:bb:c7:26:3a:99:68:b7:f9:
                    bf:4a:53:66:89:b8:e4:2d:3c:13:63:95:5b:44:3f:
                    b5:7f:90:6c:aa:d8:59:eb:bc:e6:d3:14:29:40:99:
                    1f:a7:a4:5f:17:37:7f:24:78:0b:69:cd:c5:a2:a2:
                    b5:88:be:9d:f7:75:15:5c:24:5f:33:03:e6:a5:50:
                    f7:24:ea:1a:0b:fe:b3:e5:29:06:6f:5c:bd:20:f9:
                    5d:21:39:54:fa:d0:f2:e8:2c:f4:6d:75:34:4f:c8:
                    f8:21:fd:4f:9d:92:61:60:11:fe:82:40:81:c3:84:
                    21:91:8c:a2:4d:c3:ce:16:ff:86:17:b4:d0:80:4d:
                    86:e7:a2:a3:79:83:20:11:66:38:64:a5:56:22:87:
                    66:f8:15:04:ff:7b:2a:6f:1c:09:32:07:8d:d3:65:
                    c6:e1:56:24:37:c3:eb:66:1c:3b:4f:c3:01:a9:76:
                    57:af:67:67:52:1d:18:bb:38:b2:0c:a8:7d:b6:68:
                    0f:80:2a:b1:b5:e1:ba:fb:7a:24:8c:92:84:0f:87:
                    44:a6:ea:9e:9c:f3:d2:76:71:37:22:3e:81:a6:63:
                    bc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:59:B3:69:28:A4:01:DE:B4:88:28:2E:9F:3B:09:6D:E6:77:FC:DB
            X509v3 Authority Key Identifier:
                keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:41:a5:8f:a0:03:1a:0a:f5:1a:e2:d3:e1:f6:48:c4:3c:
         be:82:21:f6:65:b4:d2:ef:3c:3a:35:da:fc:6d:62:b5:d4:67:
         07:f7:f8:fb:40:8d:18:62:fd:03:6c:cf:3f:be:a0:6d:38:5d:
         d9:2e:8d:4a:76:8c:8c:d3:9e:d8:a4:51:98:67:d8:bb:08:25:
         59:6d:1d:63:b4:f9:58:6f:1f:6c:85:2e:cf:d2:16:b5:97:62:
         85:e6:13:1c:59:12:d3:d0:4b:98:b2:f9:a7:b8:8c:81:a2:aa:
         0b:cf:45:7d:57:a7:b1:57:a3:af:a2:af:f5:b9:b2:4c:20:f2:
         6a:95:31:a5:40:8c:75:48:8a:2d:c8:bf:5c:01:33:ef:77:1f:
         fe:2d:03:db:eb:38:e8:44:e6:11:8b:20:7c:c6:47:14:08:c1:
         2a:40:20:b6:d4:f7:d1:b5:c5:02:c0:98:c9:bd:bb:6c:63:af:
         aa:45:a7:8c:88:49:19:cf:ee:c7:bb:bf:da:20:0d:18:b8:2d:
         c5:7b:7b:25:c1:bb:f3:a7:d8:f9:42:31:6c:f8:ee:ce:fa:a6:
         20:c1:84:ce:7c:0e:41:b0:81:3d:72:98:ec:cf:52:5d:df:84:
         90:8c:1a:9c:ad:1f:35:f9:a9:cb:5d:df:14:e8:5c:6b:bd:8c:
         4b:39:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----