Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bcfacf-0b1f-4abd-a947-1d3887006477/1/tyX1dbeFZ4d04ibcSfKeuxJpbRc.mft
File:                     tyX1dbeFZ4d04ibcSfKeuxJpbRc.mft (raw, json)
Hash identifier:          +BsG4aTTv3aUc96sLMrQwoi6pwdNFsbLO23W6eXWZ2I=
Subject key identifier:   B3:AE:46:FC:B4:0F:E6:BA:1B:2C:F8:B1:30:8F:CC:0A:3D:DF:17:4D
Authority key identifier: B7:25:F5:75:B7:85:67:87:74:E2:26:DC:49:F2:9E:BB:12:69:6D:17
Certificate issuer:       /CN=b725f575b785678774e226dc49f29ebb12696d17
Certificate serial:       01828AF6295FE163A75DDBD18EA1120659A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyX1dbeFZ4d04ibcSfKeuxJpbRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bcfacf-0b1f-4abd-a947-1d3887006477/1/tyX1dbeFZ4d04ibcSfKeuxJpbRc.mft
Manifest number:          0A53
Signing time:             Thu 11 Aug 2022 03:32:44 +0000
Manifest this update:     Thu 11 Aug 2022 03:32:44 +0000
Manifest next update:     Fri 12 Aug 2022 03:32:44 +0000
Files and hashes:         1: 6hpyoNA5vH-ChACKIP26g47wtl8.roa (hash: fSZ/9KxKSzbwTCXTWiFPfsB/c0iThL5Bcnt4SnYtUXU=)
                          2: tyX1dbeFZ4d04ibcSfKeuxJpbRc.crl (hash: x3WSgOUMq+b2FlIrTQjj0y5ZMKt6tKcYRJLPUU8ln0E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8a:f6:29:5f:e1:63:a7:5d:db:d1:8e:a1:12:06:59:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b725f575b785678774e226dc49f29ebb12696d17
        Validity
            Not Before: Aug 11 03:32:44 2022 GMT
            Not After : Aug 12 03:32:44 2022 GMT
        Subject: CN=b3ae46fcb40fe6ba1b2cf8b1308fcc0a3ddf174d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:ca:e3:9d:b9:71:cf:2e:3c:92:c6:9c:d0:
                    32:ae:a2:bd:dd:29:04:f5:b7:22:49:d5:3f:4d:04:
                    e0:39:a1:75:5a:cf:19:67:28:89:13:ca:4d:35:9b:
                    af:30:b0:08:6f:67:97:58:de:06:90:7d:0e:00:76:
                    de:8f:be:c4:31:5a:ca:a6:69:e7:93:ec:f5:18:69:
                    d8:ff:c2:dc:67:99:37:9f:f9:4c:f1:fe:c8:79:42:
                    a5:88:05:3e:00:7d:fe:31:6e:1a:e4:6d:f1:61:02:
                    55:89:97:64:6f:d9:30:f5:51:5b:83:e7:06:9a:fa:
                    e4:62:55:17:5d:1f:b6:58:6a:14:33:a4:b9:8d:ca:
                    1a:1a:5e:4e:2c:97:1a:83:11:0e:19:2d:42:9b:a6:
                    55:87:01:b9:c8:90:d7:14:c9:0d:ad:e0:55:82:ff:
                    45:e5:69:69:30:78:87:d9:28:f0:ad:a8:32:54:80:
                    2f:90:bf:96:42:34:2b:9a:03:b1:ab:70:6b:f4:42:
                    fc:cd:3a:49:ab:a7:91:c2:ca:48:04:e5:20:6f:fe:
                    e6:0a:2c:23:c1:39:1d:85:21:ce:2b:97:0d:b3:a8:
                    83:9a:e5:23:e6:0f:f7:37:a0:eb:b6:1c:f5:5a:36:
                    66:e0:42:08:ec:43:5b:7c:30:e8:ef:85:80:1c:a7:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AE:46:FC:B4:0F:E6:BA:1B:2C:F8:B1:30:8F:CC:0A:3D:DF:17:4D
            X509v3 Authority Key Identifier:
                keyid:B7:25:F5:75:B7:85:67:87:74:E2:26:DC:49:F2:9E:BB:12:69:6D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyX1dbeFZ4d04ibcSfKeuxJpbRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bcfacf-0b1f-4abd-a947-1d3887006477/1/tyX1dbeFZ4d04ibcSfKeuxJpbRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bcfacf-0b1f-4abd-a947-1d3887006477/1/tyX1dbeFZ4d04ibcSfKeuxJpbRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ca:70:35:cb:7d:fd:49:39:fa:f0:23:31:1e:66:d6:a1:ad:
         82:14:66:b6:db:9f:4f:68:4a:47:96:3b:26:d9:4e:99:fe:d4:
         3b:4a:93:c7:ed:84:d4:d3:b3:c5:95:4d:29:5c:72:fe:dd:b1:
         33:9a:41:50:92:6b:5f:7b:af:74:e8:b6:68:25:6f:bc:b1:ac:
         e7:81:81:93:ee:b3:7d:8f:65:32:79:93:8b:30:04:1c:cb:81:
         aa:06:74:24:be:bf:c9:3d:2d:60:59:23:e7:86:5c:d3:4c:e1:
         e3:fe:87:f8:9e:b4:ef:7b:98:bd:9e:12:88:9d:38:cf:14:93:
         cc:7d:4b:c1:2f:09:2b:aa:4a:56:f5:a8:64:d7:64:45:d5:ff:
         5c:b4:4d:b9:a8:48:ad:85:1a:67:66:fa:1e:74:b5:a2:5e:d5:
         9e:be:58:7e:11:75:51:40:fb:b7:ac:7d:5b:10:c9:2e:9e:f4:
         b6:32:b6:c2:b8:88:b4:0f:2d:e5:55:d8:26:32:9b:d6:6d:75:
         fb:05:f7:ac:a5:84:8b:47:f0:41:5c:24:bb:80:d7:3b:8f:0e:
         92:64:99:3c:d7:6d:ef:df:31:6b:a0:b4:52:c5:b7:bd:97:e2:
         af:a9:00:cc:3c:e5:4f:a9:15:a6:c4:75:ff:d4:8f:96:30:77:
         5b:2a:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----