Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.mft
File:                     bs8tPXJ_Sv-sMPqm0FcilK1CzJs.mft (raw, json)
Hash identifier:          DoOx/aHxSIwOPx0aFiVphGf+HbJQF1zumydjK5saaIg=
Subject key identifier:   C7:8E:EB:F4:FE:7D:63:E7:1A:DF:41:68:4E:81:99:84:DC:4D:D7:0B
Authority key identifier: 6E:CF:2D:3D:72:7F:4A:FF:AC:30:FA:A6:D0:57:22:94:AD:42:CC:9B
Certificate issuer:       /CN=6ecf2d3d727f4affac30faa6d0572294ad42cc9b
Certificate serial:       018528B757C741527A6070A12C31621ECF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.mft
Manifest number:          F9
Signing time:             Mon 19 Dec 2022 04:49:42 +0000
Manifest this update:     Mon 19 Dec 2022 04:49:42 +0000
Manifest next update:     Tue 20 Dec 2022 04:49:42 +0000
Files and hashes:         1: bs8tPXJ_Sv-sMPqm0FcilK1CzJs.crl (hash: upobXhhfzhyxelfP+45+wBz+YI8BtYwiEhW7TnaRKtk=)
                          2: keZZD_Ko7UGiqATpxTSO8b4wFOE.roa (hash: KQOU/WwqQMB0hbF7+h0gynLAacDe1yts+zodgc3PcBA=)
                          3: sGSwdkDF8KF_JkcfglmHglliOd4.roa (hash: DKEm6gItG85ISst26a4Bomklsxjpnw+2cAYznwGrMhw=)
                          4: wB4weCL5mIpyiw9RJF0vsFNO3H8.roa (hash: f1karvrdDEMqWUUmo2OFosuwNOpLHKLCr4oxtAWiZ3w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:28:b7:57:c7:41:52:7a:60:70:a1:2c:31:62:1e:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ecf2d3d727f4affac30faa6d0572294ad42cc9b
        Validity
            Not Before: Dec 19 04:49:42 2022 GMT
            Not After : Dec 20 04:49:42 2022 GMT
        Subject: CN=c78eebf4fe7d63e71adf41684e819984dc4dd70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:8a:de:9d:ac:3e:0d:ab:0f:ab:b1:4e:7e:
                    2a:d0:6a:a1:e0:ca:f8:07:08:de:53:39:4e:a2:4f:
                    1a:ae:14:89:c6:b0:6f:84:5e:dd:26:44:04:37:9c:
                    84:26:e9:9c:04:1d:ed:ea:47:af:07:24:7b:69:ee:
                    32:8b:54:a0:10:76:5c:59:8a:b1:65:c4:ea:7b:08:
                    f7:48:80:6f:61:e9:ea:d2:a4:06:b8:74:1c:ca:ae:
                    09:b0:47:f9:16:a6:60:67:4b:dd:c0:ee:c7:f0:99:
                    5e:25:ea:27:40:aa:30:eb:48:83:1b:78:49:f8:8f:
                    19:3f:1f:01:2e:cb:a1:d3:3d:1f:56:cc:fe:94:c5:
                    4d:4b:05:6c:8f:b5:7f:84:d8:28:ad:56:ba:d4:a9:
                    ea:b9:17:8d:79:f0:9b:d4:1b:eb:af:de:c3:74:27:
                    09:20:d5:45:02:07:45:bd:99:a8:0f:d0:7e:86:aa:
                    bf:5a:3d:3a:9e:2a:77:45:15:b7:75:90:fc:08:1f:
                    f8:9d:4c:ec:e3:b2:75:af:c3:e1:b4:29:82:e1:3f:
                    b2:06:35:b9:70:8c:5e:eb:b2:31:24:2c:3a:c6:37:
                    d9:1c:50:ed:95:5b:0b:7d:97:24:f8:77:cb:0a:1b:
                    6d:ac:f8:0e:98:c1:c0:84:f3:4a:5b:bc:dc:3d:0f:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8E:EB:F4:FE:7D:63:E7:1A:DF:41:68:4E:81:99:84:DC:4D:D7:0B
            X509v3 Authority Key Identifier:
                keyid:6E:CF:2D:3D:72:7F:4A:FF:AC:30:FA:A6:D0:57:22:94:AD:42:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:89:2c:d7:2f:78:2a:ad:5f:8c:04:8f:c4:f1:62:7b:e4:a4:
         e4:ce:c5:3c:60:fb:bd:b4:6b:a0:40:1b:97:aa:a2:1f:fc:2d:
         1f:1d:aa:9d:30:e5:16:f8:72:cd:8e:57:27:12:e4:75:6a:53:
         78:b0:9c:9f:f5:60:cc:60:1d:ab:dd:16:ce:1c:8d:fd:98:38:
         58:be:52:d9:aa:0d:fb:d3:df:05:25:a1:e2:17:d3:2b:de:e7:
         89:9c:9f:2f:c0:84:86:9d:29:35:42:ad:4a:76:6f:27:01:f4:
         1b:05:8a:a0:72:37:b7:8c:8b:6b:54:26:08:8c:d0:4f:44:8a:
         b7:20:60:a5:99:ac:55:af:a4:43:a7:30:b0:18:14:a6:f1:5b:
         21:28:b0:5d:32:e1:cb:3f:bc:e1:6a:ea:42:32:59:a1:dd:78:
         af:5f:9b:1a:57:3a:d9:07:81:d3:c7:e6:4f:3f:a3:58:e6:82:
         9e:3a:69:25:b0:0b:b0:d2:d3:af:c3:95:63:dd:89:d7:73:7d:
         de:d3:f0:c2:50:12:8c:fa:63:ed:1b:50:c0:5c:ad:81:b4:e3:
         32:a0:f5:78:59:46:05:f8:06:05:4c:25:9b:d9:49:2c:bb:8b:
         60:f5:d9:c0:5a:9a:60:7a:c6:ce:27:bf:2b:f5:4b:12:1e:b8:
         c0:c1:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----