Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/i9Bu_aKidjjzds1pGNorrLIBu-4.mft
File:                     i9Bu_aKidjjzds1pGNorrLIBu-4.mft (raw, json)
Hash identifier:          s07Cj967EXHWM9Rhp44RhV+a87Y1K21FKrq/dAx7k1s=
Subject key identifier:   E4:C0:45:A0:56:46:F4:E1:2B:DA:0E:04:67:91:48:6D:A8:53:D9:B8
Authority key identifier: 8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE
Certificate issuer:       /CN=8bd06efda2a27638f376cd6918da2bacb201bbee
Certificate serial:       07FADF58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/i9Bu_aKidjjzds1pGNorrLIBu-4.mft
Manifest number:          08DD
Signing time:             Wed 06 Apr 2022 03:59:34 +0000
Manifest this update:     Wed 06 Apr 2022 03:59:34 +0000
Manifest next update:     Thu 07 Apr 2022 03:59:34 +0000
Files and hashes:         1: 38vXiqQZPIB_ndIixqn9keJJdEQ.roa (hash: rt1m1n2VeEyXUVdG4uJu5Hypiou5BlpDHoOxZ/otlLo=)
                          2: D5vIk1n2T552uyR05MrIV-gxWsI.roa (hash: +PEZ6QgoUoykB9f6lFAV2zf8yffk3jtAvJnxUI2tliw=)
                          3: HVQcFGf5oSi5H0PASD7e2uKaCmc.roa (hash: vfiXQc+Uj7xWbXk2FzKwqL7N3faUh4C24NHVyLH4xko=)
                          4: i9Bu_aKidjjzds1pGNorrLIBu-4.crl (hash: G1mXrtDY3cKMN/9yXpVQtO+KfDni7qEec8ufzlnFkE8=)
                          5: qje2fbZow8-48dTJ4VLT7gO4eSk.roa (hash: tllFPlJIok2qZa6CWoj99sJrDfaZfRLppLyzB++sdLs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133881688 (0x7fadf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd06efda2a27638f376cd6918da2bacb201bbee
        Validity
            Not Before: Apr  6 03:59:34 2022 GMT
            Not After : Apr  7 03:59:34 2022 GMT
        Subject: CN=e4c045a05646f4e12bda0e046791486da853d9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:21:67:3c:66:e9:22:79:e1:64:bf:4b:b0:
                    35:dc:05:d5:42:fa:2a:be:77:68:f4:c6:fe:01:76:
                    b6:f3:38:56:8d:91:31:10:9f:a0:9f:7d:d6:f6:ef:
                    0a:b6:43:fb:eb:e0:ac:7a:7b:ef:4c:8e:ea:28:15:
                    e0:e6:aa:0d:87:fc:21:df:c0:7e:3f:6b:95:5e:67:
                    af:ff:d2:0d:68:ca:dd:fb:35:19:94:27:2a:24:46:
                    d1:eb:5b:eb:ad:a0:3b:9c:3e:93:fe:59:b2:54:da:
                    9a:8b:01:c5:06:06:c8:28:9f:1b:89:d3:bb:34:f9:
                    52:d4:7a:9d:92:f6:e0:7a:de:23:be:22:fc:ae:67:
                    1f:54:9c:08:43:67:2c:85:31:33:52:6a:d8:42:d0:
                    8d:1c:76:f6:86:2c:16:99:4e:f1:a6:14:25:96:ea:
                    a1:c1:48:c8:e8:4c:14:f8:98:f3:94:25:49:d6:ed:
                    54:0d:aa:49:24:83:6e:29:ea:b6:d5:75:04:a2:08:
                    e9:4e:e0:0d:e3:d8:26:33:ce:1f:73:48:f5:eb:25:
                    6a:e9:c7:93:5d:15:ef:29:66:45:ef:d9:84:f9:4b:
                    3c:88:7a:03:e3:88:42:5e:2d:ef:38:61:20:2c:1a:
                    40:71:cb:a0:c3:df:03:97:73:c0:3d:6c:b3:6a:d3:
                    b4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C0:45:A0:56:46:F4:E1:2B:DA:0E:04:67:91:48:6D:A8:53:D9:B8
            X509v3 Authority Key Identifier:
                keyid:8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/i9Bu_aKidjjzds1pGNorrLIBu-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/i9Bu_aKidjjzds1pGNorrLIBu-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:ac:44:ad:9d:ba:22:ff:c4:bd:d5:98:0a:9d:43:96:64:
         ef:02:47:e7:2e:90:60:de:a1:53:56:df:b8:6a:a5:cf:3c:10:
         9d:50:7b:5f:be:4e:19:0a:bd:7d:25:74:ba:3c:10:9a:1f:64:
         fa:ae:d4:0f:de:46:73:be:36:53:b6:58:3d:43:ae:44:b0:46:
         02:d9:3c:42:09:db:47:05:df:34:f5:0b:26:72:77:56:db:da:
         d4:9e:19:6f:27:e0:76:5c:17:98:45:a4:77:b6:41:b5:c7:db:
         94:75:12:55:d8:5b:92:e6:fb:f9:2c:7a:0e:17:b5:8f:d1:51:
         5b:19:cb:87:18:14:c3:fd:d0:f7:9a:3c:d1:fb:c2:ac:5a:21:
         6b:37:76:f2:89:fb:b2:84:b8:d7:88:95:d6:a0:eb:2f:48:50:
         88:cc:d6:29:da:5b:9f:80:5e:fd:fc:6e:ea:48:31:b5:e0:04:
         3c:7f:44:9b:32:83:7f:6b:8d:bc:28:11:c7:9c:5b:0d:ad:7f:
         fd:3c:ba:04:7b:52:11:fd:30:1f:f5:34:71:c7:77:55:eb:7f:
         ff:0f:b9:c0:d7:0a:4f:ae:15:36:a3:61:b1:8d:ce:70:10:b9:
         61:9f:a4:26:65:7d:7f:0d:a3:05:1c:74:5d:9b:df:c7:b8:4d:
         3e:0f:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----