Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.mft
File:                     30ZXgSQ1uxr0gC-WAy-RxXy8yTM.mft (raw, json)
Hash identifier:          i6kz1E2/IzqDFgBLaMFyiobEBdTp62UTrd/JAQhkMXk=
Subject key identifier:   0D:D7:2F:F6:B4:5A:48:62:C9:12:F4:E8:88:26:FD:E5:E3:7A:42:D2
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Certificate issuer:       /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial:       018920C4968F1147828AF2C343F3A6C22A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.mft
Manifest number:          091D
Signing time:             Tue 04 Jul 2023 11:58:21 +0000
Manifest this update:     Tue 04 Jul 2023 11:58:21 +0000
Manifest next update:     Wed 05 Jul 2023 11:58:21 +0000
Files and hashes:         1: 0o3mS-LiqYBdTL6ex7Sw43c5CZM.roa (hash: SjAc35jS9wW/uKvn74wuFiMpUfy5fj0Kww8FQOdEmDo=)
                          2: 30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl (hash: zq7fRbLWpKXdtrsp0+c9N9OJDs2vU6cq4ZBHo9qpu7U=)
                          3: 4V7hwKfKBDIny7Rs7Knn7-NMmp8.roa (hash: v83Iwy+9FxtL0iy3LnrMDZK3LUOALmEsiwhR/+S1nzU=)
                          4: BawwGc1dRoeW9aK5mt2sC4m75oE.roa (hash: MCzgKzNW//0WAvIKvdMh5W4wzneFVSQS1U3IUOgk/74=)
                          5: bXu4lG6GhcBdH_d52CkFD9QyND8.roa (hash: 8lMGQTiVWFC1FjyB0mX286o9Y+c93HngjBYu87LShTk=)
                          6: fU5nW_Uly9lhKFGZLa0MQwQ1KZ8.roa (hash: 0HTuuIgUAawNiVGTTAgiQYuO0v5wE0JeNPC0TMWtAO8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:20:c4:96:8f:11:47:82:8a:f2:c3:43:f3:a6:c2:2a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
        Validity
            Not Before: Jul  4 11:58:21 2023 GMT
            Not After : Jul  5 11:58:21 2023 GMT
        Subject: CN=0dd72ff6b45a4862c912f4e88826fde5e37a42d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:99:b4:d8:df:22:08:ac:b7:5e:24:fd:79:
                    93:29:57:61:e1:a0:b0:c2:45:17:de:a0:33:21:db:
                    9c:aa:0c:28:aa:51:c8:c6:1c:6f:e3:95:c1:70:b9:
                    ba:29:e3:9b:ff:c2:e9:33:44:9b:8d:4c:d4:3f:78:
                    81:7f:4e:4b:f9:cb:ca:d2:95:cb:0f:51:be:8b:1d:
                    d5:b6:a1:7f:81:5c:ac:02:fc:6f:4d:9b:49:67:6a:
                    b8:ee:03:d9:20:5b:b1:b4:86:f0:4c:00:4c:5e:ae:
                    e6:8a:38:15:d3:d9:47:65:9c:40:85:e5:92:ef:f9:
                    2d:56:5b:78:06:51:80:d0:0f:21:27:e8:94:9f:45:
                    7c:c8:9d:47:13:b7:7e:e1:1f:ca:15:d2:37:d1:56:
                    95:bd:f4:3c:f9:10:a8:44:fd:a4:a3:4a:38:ab:d5:
                    1e:72:cc:fa:27:f0:01:be:fa:60:2e:b7:8b:14:b4:
                    36:b9:67:9a:8e:64:18:80:71:85:67:42:7a:72:95:
                    10:e8:16:bd:c0:ee:c1:cb:93:a4:73:aa:e0:5a:91:
                    96:dd:e7:90:ca:4e:d4:6b:90:4b:2b:b0:52:33:18:
                    b2:ac:69:13:c2:c0:6b:8b:c0:f7:87:c2:b4:9f:8e:
                    b1:a0:04:fb:5a:3f:e6:0a:e6:03:1c:c5:1e:08:fd:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D7:2F:F6:B4:5A:48:62:C9:12:F4:E8:88:26:FD:E5:E3:7A:42:D2
            X509v3 Authority Key Identifier:
                keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:ff:58:55:76:fb:91:45:5c:b9:e6:fb:01:04:de:3a:1d:
         07:79:fc:d7:ab:d8:1c:d0:b1:cb:20:9d:04:c2:91:7b:2e:20:
         fb:65:44:bd:fe:12:07:17:e0:56:79:c6:a2:a5:dc:f2:c7:a6:
         b5:f6:3e:6e:e6:b3:bd:4c:1b:5b:31:b7:64:08:46:ae:23:47:
         58:e6:94:d4:17:7a:78:4d:10:e6:0c:7c:65:4a:57:e9:68:21:
         f5:e4:42:e3:b6:4d:c8:b0:21:ef:50:d6:cd:43:b8:ca:20:0d:
         90:b2:f9:c0:78:7c:87:45:4c:df:f9:54:fc:25:a7:c5:c8:f9:
         cf:19:ba:0f:a5:4d:48:15:82:fc:d0:14:7c:0a:b1:1b:63:09:
         b9:c2:7d:c4:82:f6:67:e5:00:d2:cd:09:5c:22:e6:4c:6b:fc:
         2b:01:eb:78:9a:12:bd:cb:83:e2:30:94:18:26:4e:05:ec:92:
         c3:b6:77:ff:0c:bc:f8:34:4d:63:0a:8e:9e:83:99:4b:bf:d9:
         b2:27:0e:97:9e:62:76:c1:85:60:ac:32:eb:40:57:c2:c0:5a:
         45:e2:7c:47:89:b1:87:37:44:df:f1:99:22:2a:76:33:da:7c:
         29:13:83:a9:72:b2:a5:53:06:6c:3e:f1:0c:44:8d:e2:37:6d:
         fd:2d:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----