Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ccdbe0-17c9-41cd-8e97-42bbfa991a35/1/3KbD0_hdg_bbdBuy9E8RTiJgrqE.mft
File:                     3KbD0_hdg_bbdBuy9E8RTiJgrqE.mft (raw, json)
Hash identifier:          sky/xb5eqWp3LqFqljcnTVWvh87liWRfFRJ4omDU7o0=
Subject key identifier:   61:D8:CD:D9:4B:CF:A2:30:B5:FD:39:C4:9F:41:03:03:DD:77:F4:D2
Authority key identifier: DC:A6:C3:D3:F8:5D:83:F6:DB:74:1B:B2:F4:4F:11:4E:22:60:AE:A1
Certificate issuer:       /CN=dca6c3d3f85d83f6db741bb2f44f114e2260aea1
Certificate serial:       0186FF357A36E8B5CCD623FEB4869BF4C904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KbD0_hdg_bbdBuy9E8RTiJgrqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ccdbe0-17c9-41cd-8e97-42bbfa991a35/1/3KbD0_hdg_bbdBuy9E8RTiJgrqE.mft
Manifest number:          083D
Signing time:             Mon 20 Mar 2023 13:28:59 +0000
Manifest this update:     Mon 20 Mar 2023 13:28:59 +0000
Manifest next update:     Tue 21 Mar 2023 13:28:59 +0000
Files and hashes:         1: 3KbD0_hdg_bbdBuy9E8RTiJgrqE.crl (hash: 2WORgmDfNVHrmWVeE94vVuSFFKjtbilJRdSApaUXbLc=)
                          2: XwsTZ3J0v4IcyVTu-AO5Lw69Q-8.roa (hash: 2HXuJcty4wLuLeTR/V1ZUZtGm+FMJ6cE4YSLy1RVOJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ff:35:7a:36:e8:b5:cc:d6:23:fe:b4:86:9b:f4:c9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca6c3d3f85d83f6db741bb2f44f114e2260aea1
        Validity
            Not Before: Mar 20 13:28:59 2023 GMT
            Not After : Mar 21 13:28:59 2023 GMT
        Subject: CN=61d8cdd94bcfa230b5fd39c49f410303dd77f4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:46:e4:46:77:f4:d9:3a:59:e4:0f:02:90:
                    92:d4:67:75:c5:71:1c:f7:02:9c:e9:03:95:81:93:
                    b3:97:33:8f:b6:af:45:19:06:3f:ed:4c:e5:5e:8a:
                    08:c6:44:70:90:f1:92:34:b2:c0:a1:1b:9b:b2:2c:
                    97:15:52:5d:4d:8f:50:8f:75:99:48:8c:2e:98:bb:
                    d3:85:77:f3:02:5e:3b:2f:8a:3d:46:c1:3d:60:37:
                    05:47:9f:f9:9a:8b:47:5f:52:e4:61:56:e3:64:6a:
                    0a:e8:51:65:be:69:df:0b:7b:39:c6:85:e7:eb:07:
                    ed:f5:f0:f1:f1:a0:0d:1f:92:dc:e7:59:64:42:12:
                    25:e6:41:05:17:15:53:ce:4b:16:d2:53:32:03:e8:
                    39:01:e8:91:c8:b5:ea:f9:8a:33:1c:4d:bc:fa:cb:
                    53:3c:24:c8:bd:65:0c:0e:23:be:a7:b9:f1:52:09:
                    fc:3c:66:d6:1b:dc:a2:1c:dd:38:e2:77:0c:2b:40:
                    ce:d9:88:32:48:30:8b:55:0c:b6:9a:47:52:e0:57:
                    41:d1:c0:0e:b1:f3:e2:e7:1b:e1:03:9e:92:a6:10:
                    a1:b2:f4:69:23:67:23:99:32:b9:fa:0d:0e:c9:26:
                    c4:c8:59:a1:96:05:73:23:14:db:49:7c:ac:8a:96:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D8:CD:D9:4B:CF:A2:30:B5:FD:39:C4:9F:41:03:03:DD:77:F4:D2
            X509v3 Authority Key Identifier:
                keyid:DC:A6:C3:D3:F8:5D:83:F6:DB:74:1B:B2:F4:4F:11:4E:22:60:AE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbD0_hdg_bbdBuy9E8RTiJgrqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ccdbe0-17c9-41cd-8e97-42bbfa991a35/1/3KbD0_hdg_bbdBuy9E8RTiJgrqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ccdbe0-17c9-41cd-8e97-42bbfa991a35/1/3KbD0_hdg_bbdBuy9E8RTiJgrqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6f:38:b8:a2:77:5f:d3:9f:7a:97:40:0e:ba:a5:fa:ea:a3:
         19:44:ba:92:f8:1c:b6:4d:b9:bd:92:f4:67:2b:8d:8c:c2:cb:
         51:7c:1c:f2:82:4a:8f:17:f3:ba:7b:90:ed:e0:0c:ab:6a:fc:
         ff:29:67:93:f6:4a:80:3a:6d:67:06:65:ea:d2:6b:d0:43:1d:
         63:48:56:a4:6c:8a:8e:3f:25:f5:61:eb:d0:6c:67:e5:49:fc:
         f4:bc:31:55:63:a3:d6:f5:33:24:61:0b:7e:0a:38:49:b8:62:
         a2:75:a4:19:d3:e7:6d:ef:55:a9:8a:ff:14:22:f4:ba:25:25:
         e1:c9:be:b3:5f:7a:12:0e:f6:44:b4:09:a8:3e:4f:8c:fd:23:
         67:9f:bc:96:1f:de:ec:3c:19:f9:2c:da:af:49:ef:e6:e4:52:
         ad:f1:a5:6f:c2:9b:56:fc:6e:47:29:92:93:e1:a1:d5:79:b8:
         8f:0c:27:e2:60:3f:af:cf:69:7f:b1:ac:ed:c9:8d:a4:7c:8e:
         f3:48:69:4a:bc:67:a8:63:b6:9b:ae:47:d1:15:e4:04:db:39:
         30:0f:00:65:03:e5:ff:71:7f:aa:4b:93:cc:cb:82:18:21:75:
         b4:c2:fc:63:ab:ad:aa:c6:31:0c:09:d0:2a:6f:5b:2d:97:b6:
         74:cd:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----