Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b756-3622-4d61-845c-7de2b81df2a7/1/smHE2mY-NKyJDf31N_Dn6RLz_8w.mft
File:                     smHE2mY-NKyJDf31N_Dn6RLz_8w.mft (raw, json)
Hash identifier:          3arCMCNh6eSoPaVcDSY/5iZ4TEHemQjW/UPK+OnSeOI=
Subject key identifier:   29:DA:4A:1F:BE:9F:F6:5C:E3:0F:4D:E5:BB:D8:7F:DC:88:00:40:88
Authority key identifier: B2:61:C4:DA:66:3E:34:AC:89:0D:FD:F5:37:F0:E7:E9:12:F3:FF:CC
Certificate issuer:       /CN=b261c4da663e34ac890dfdf537f0e7e912f3ffcc
Certificate serial:       01864A83607B045E2D128E60A470A89B0686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smHE2mY-NKyJDf31N_Dn6RLz_8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b756-3622-4d61-845c-7de2b81df2a7/1/smHE2mY-NKyJDf31N_Dn6RLz_8w.mft
Manifest number:          0C79
Signing time:             Mon 13 Feb 2023 11:22:48 +0000
Manifest this update:     Mon 13 Feb 2023 11:22:48 +0000
Manifest next update:     Tue 14 Feb 2023 11:22:48 +0000
Files and hashes:         1: Ih20YD2zlfOYHEjPJjrZDihPmgQ.roa (hash: rv3i3OzAHr+tUPf1nFQ25Ix+T5QCTykOVbdU/UbAmrQ=)
                          2: smHE2mY-NKyJDf31N_Dn6RLz_8w.crl (hash: FGI/DgikXiDobsyxapD9KodiqwfwqVhbdyJoRJtXlnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4a:83:60:7b:04:5e:2d:12:8e:60:a4:70:a8:9b:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b261c4da663e34ac890dfdf537f0e7e912f3ffcc
        Validity
            Not Before: Feb 13 11:22:48 2023 GMT
            Not After : Feb 14 11:22:48 2023 GMT
        Subject: CN=29da4a1fbe9ff65ce30f4de5bbd87fdc88004088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:a7:c1:ef:b2:5a:03:2b:14:75:cc:1a:86:
                    d1:ca:e8:62:ac:08:04:63:99:24:ac:bc:23:0f:30:
                    00:be:24:f0:a1:eb:5f:0c:a1:1b:c9:d7:ed:a5:16:
                    7d:0e:a8:af:4d:d3:77:88:dd:cb:26:c0:fc:6f:df:
                    6c:d5:09:f8:88:13:25:f2:26:62:d0:95:7d:a8:35:
                    1b:21:99:9c:69:4f:22:3f:aa:51:dd:a0:c2:a6:ff:
                    ab:ba:4e:31:f8:c0:b4:95:cf:44:16:c3:b4:82:4d:
                    db:15:07:13:7b:cc:07:b6:ff:e1:b7:a1:81:0d:be:
                    e0:4c:1a:07:2c:4a:34:dd:dc:2a:d8:33:53:64:9f:
                    34:3c:e6:67:19:90:07:e7:1f:21:c1:72:d4:9b:e1:
                    f0:bd:bd:84:7a:fd:74:b8:68:11:69:30:c2:7a:95:
                    b4:a3:6c:df:56:d6:6a:a0:40:a2:d6:4b:2e:75:09:
                    3e:41:cc:e0:35:41:f3:77:96:84:12:09:3f:3d:35:
                    19:90:17:9c:2c:db:7d:23:ab:d3:99:56:c2:6c:40:
                    6e:c5:cb:19:53:b5:73:40:c5:85:6f:50:4a:84:3e:
                    ce:12:cc:40:bf:72:ef:b5:fa:16:5e:cb:f9:d1:d3:
                    e3:2e:f7:f5:8e:e0:a9:36:62:a2:13:44:90:ef:8d:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DA:4A:1F:BE:9F:F6:5C:E3:0F:4D:E5:BB:D8:7F:DC:88:00:40:88
            X509v3 Authority Key Identifier:
                keyid:B2:61:C4:DA:66:3E:34:AC:89:0D:FD:F5:37:F0:E7:E9:12:F3:FF:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smHE2mY-NKyJDf31N_Dn6RLz_8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b756-3622-4d61-845c-7de2b81df2a7/1/smHE2mY-NKyJDf31N_Dn6RLz_8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b756-3622-4d61-845c-7de2b81df2a7/1/smHE2mY-NKyJDf31N_Dn6RLz_8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:56:83:19:fa:53:dc:13:81:57:f0:e2:42:6f:68:a8:b5:ca:
         9c:8f:98:43:79:c3:8d:b3:bd:8e:3e:1b:f8:70:a1:bd:6c:fb:
         78:3e:13:df:f9:02:c2:ca:45:06:1b:1f:e6:63:64:81:93:93:
         1f:df:13:4f:fe:bd:a0:a3:31:c9:8b:1b:1b:7b:2e:4f:59:aa:
         51:a5:ac:64:84:99:18:c4:e2:57:2d:d9:7e:22:85:31:b4:a8:
         9d:53:81:2d:48:ff:07:17:c8:ad:e6:9f:3c:5f:df:5a:b5:3f:
         56:f1:d4:a0:ec:fd:91:a4:6a:1a:3e:a7:66:c6:c4:17:58:e6:
         79:49:9d:77:26:a1:34:8f:93:bc:bb:64:78:f9:5d:53:41:ad:
         8b:50:1b:ca:cc:4c:7b:75:4c:29:ca:48:de:0f:e7:9d:8d:56:
         e9:eb:4a:68:2d:63:9f:11:68:ba:53:86:ca:90:80:06:9b:b2:
         2f:98:92:2b:7d:f4:9f:83:5c:65:06:c9:90:48:8f:21:f7:d6:
         42:7a:6e:2b:55:6f:7e:40:de:ab:2a:68:45:e2:e0:58:3e:1a:
         1b:e9:5c:31:8d:aa:a9:6c:d6:8d:3e:fd:4d:41:b6:5e:36:0c:
         40:90:a9:09:b3:11:f2:ba:e8:97:3b:58:15:38:86:34:7f:72:
         d1:15:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----