Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.mft
File:                     CxxGfrlAixHQbx9n5anMQjw5rC8.mft (raw, json)
Hash identifier:          tTaNYvaPolPm5Gwl+UIWfKWDR+Bi9eWWvdKGGpokAig=
Subject key identifier:   79:6A:94:4D:32:AF:70:F8:1C:B1:C1:59:84:EC:72:AC:B3:EC:73:28
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Certificate issuer:       /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial:       018900E5270BF4005BD3A0D1EBB008C3B628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.mft
Manifest number:          0BB1
Signing time:             Wed 28 Jun 2023 07:26:04 +0000
Manifest this update:     Wed 28 Jun 2023 07:26:04 +0000
Manifest next update:     Thu 29 Jun 2023 07:26:04 +0000
Files and hashes:         1: CxxGfrlAixHQbx9n5anMQjw5rC8.crl (hash: ZmwafUZF97V4TZ07xaBLg+gMZGB4K3E8VugC0zqijFQ=)
                          2: mWVrtdocog3hlm-mzPkd_MMcpE8.roa (hash: bOQLY16k9G0Pk4hVlENInXVecxKNVITv+arXnhHW73c=)
                          3: odOygNatf8a_d6gPE9hLCN8b-Zk.roa (hash: s3Pp3BnQ5EKQKjHLvkA7w1EoLurqgd1ocw/nKTtFfrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:00:e5:27:0b:f4:00:5b:d3:a0:d1:eb:b0:08:c3:b6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
        Validity
            Not Before: Jun 28 07:26:04 2023 GMT
            Not After : Jun 29 07:26:04 2023 GMT
        Subject: CN=796a944d32af70f81cb1c15984ec72acb3ec7328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fa:cc:c9:86:93:1b:4b:ca:0b:fd:03:c7:09:
                    7b:b7:3c:3f:9a:13:96:02:a5:95:72:c8:63:86:ce:
                    18:1a:20:b2:93:90:96:bc:84:c2:14:e8:a0:31:50:
                    4b:03:c3:2f:90:48:e9:29:48:b4:a6:03:70:82:74:
                    87:5d:4d:5b:7d:3b:4d:b5:35:69:fb:7e:94:b0:c2:
                    12:99:9a:85:2d:98:12:84:7e:f0:bb:ac:7f:1b:32:
                    3c:14:71:0a:f2:28:ab:23:74:64:3f:76:85:33:03:
                    c8:a8:2a:cc:64:10:63:65:52:d9:54:32:1d:52:ea:
                    b9:48:1d:13:20:e6:2c:c5:b6:7d:08:b7:3b:1b:48:
                    3e:71:ec:6e:60:99:b3:3b:fe:eb:f1:ab:46:3e:4c:
                    77:d6:1f:1e:54:83:c4:b6:52:ef:dd:97:33:6e:db:
                    09:0e:72:10:67:a3:6e:86:dc:a5:7a:46:86:2b:a2:
                    65:07:3d:c7:be:60:71:44:a3:c6:1e:4a:be:c3:f3:
                    28:58:8c:52:e6:4d:10:61:ae:21:5e:6d:6e:07:4e:
                    01:44:91:48:7c:bb:c8:71:e6:12:bd:09:25:ca:0c:
                    ce:11:24:15:2a:24:74:8f:d8:05:7d:2d:87:ac:24:
                    8b:bb:66:be:d0:ee:43:d0:bc:c4:39:b5:b2:a9:f1:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:94:4D:32:AF:70:F8:1C:B1:C1:59:84:EC:72:AC:B3:EC:73:28
            X509v3 Authority Key Identifier:
                keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:82:2d:b0:89:b5:d9:35:62:a8:8c:58:84:bf:8b:91:30:
         21:dc:98:67:d5:4a:2e:05:1d:69:f6:81:34:f5:07:4d:48:c5:
         2a:df:4f:ed:4d:47:6b:b4:ac:78:2e:c6:9e:f1:e0:2e:1a:f3:
         e9:05:ff:80:37:df:64:57:28:d7:54:27:bb:33:51:9d:80:9d:
         19:4d:01:2c:d3:ee:ce:16:ac:03:84:6b:1f:d7:99:54:5a:45:
         9c:0d:cf:11:58:64:5d:39:4e:ba:54:ce:7f:e2:0f:9a:2d:29:
         d4:b4:0b:11:17:e1:67:a7:1c:3c:03:da:b7:8c:e7:4a:78:d9:
         de:0d:d2:21:64:7a:93:0d:cc:80:54:b5:ab:4c:f2:0e:6c:9a:
         71:5f:29:03:7b:b3:60:d5:20:76:d6:8c:7c:96:37:69:40:a1:
         e1:46:55:be:de:9c:ae:50:97:55:22:c4:27:57:52:f2:cf:fd:
         8b:12:ec:f4:11:fb:7f:7a:5a:97:82:57:d9:87:97:8a:a3:27:
         da:a9:02:b8:9c:4e:07:fb:dc:77:6a:0c:41:fe:5f:88:ef:a3:
         2e:c4:9e:12:f8:6a:ba:89:ec:53:67:b1:ff:e0:a7:f6:31:da:
         7d:99:c6:91:b2:56:eb:71:5b:ea:08:23:46:ec:01:d2:81:a8:
         ff:7c:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----