Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/yRu8xaTlz5otKOco37wTD2iLuN0.mft
File:                     yRu8xaTlz5otKOco37wTD2iLuN0.mft (raw, json)
Hash identifier:          LUzx7lW3cu4BGcM6gyK4GVBMXGLGDtI32BAML/0ZD8g=
Subject key identifier:   A0:57:00:CC:68:6D:A7:06:FB:35:0F:1E:46:FA:2E:64:CC:A4:4F:6E
Authority key identifier: C9:1B:BC:C5:A4:E5:CF:9A:2D:28:E7:28:DF:BC:13:0F:68:8B:B8:DD
Certificate issuer:       /CN=c91bbcc5a4e5cf9a2d28e728dfbc130f688bb8dd
Certificate serial:       01835951224B20356A554B7075FFEB19FF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRu8xaTlz5otKOco37wTD2iLuN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/yRu8xaTlz5otKOco37wTD2iLuN0.mft
Manifest number:          0ACA
Signing time:             Tue 20 Sep 2022 05:13:52 +0000
Manifest this update:     Tue 20 Sep 2022 05:13:52 +0000
Manifest next update:     Wed 21 Sep 2022 05:13:52 +0000
Files and hashes:         1: G711R_PeEa4fUsAK7XfrDCif_CU.roa (hash: CHR63F8/q/smC21yvwX7LXOUd3QZvOvyjLGqu5oUvnI=)
                          2: o5i124tpm05ZCCTshMA0peohcSo.roa (hash: 6/Kai7D0chg169NZGpJTDcjT7zm7NkBGZIDstIMgVLs=)
                          3: pCtRKxSfxVqF5m9mFq3_DukdJBc.roa (hash: 1I8LMPrWAm2oLFYzreNOGdAdVTvz+P3nTZOASccwaqw=)
                          4: sigfd6lad2KjMcTIgBf7sNrBBHE.roa (hash: uSqf9YFsgeXkundRoEiYY+t99VYx5P8HWvPXJCUoHlY=)
                          5: xzTAe3bJau73y5DHzpW-T9bDxzw.roa (hash: m8L4muVkl73bpOfeUid8rP0VwDIzNFeXedYJaRnBn04=)
                          6: yRu8xaTlz5otKOco37wTD2iLuN0.crl (hash: Vt9fXMPw6M48cMbTKjJFzVpHhJEo5f4TcvLOePYIovk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:59:51:22:4b:20:35:6a:55:4b:70:75:ff:eb:19:ff:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91bbcc5a4e5cf9a2d28e728dfbc130f688bb8dd
        Validity
            Not Before: Sep 20 05:13:52 2022 GMT
            Not After : Sep 21 05:13:52 2022 GMT
        Subject: CN=a05700cc686da706fb350f1e46fa2e64cca44f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:44:46:a9:e6:76:06:d9:37:a9:a3:06:6f:
                    dc:4e:d5:21:ac:27:f7:2a:24:be:fc:c5:ee:64:63:
                    6b:cd:68:a2:03:f8:7c:76:bc:7b:cb:8c:2f:3b:6d:
                    ec:4e:50:7e:ca:85:ca:65:80:5d:fa:35:d2:98:f2:
                    ff:1b:fd:d9:e2:7f:89:44:ff:aa:87:32:68:ca:6a:
                    5b:42:be:7b:d3:8b:90:7f:b7:68:d4:e9:eb:9a:90:
                    b4:c7:b1:e4:30:fa:c5:b2:84:2d:9d:1e:24:a0:a9:
                    e3:3f:10:56:d6:13:67:2d:cf:58:f5:69:d1:07:0d:
                    09:33:99:1d:27:18:86:19:da:cf:19:60:97:de:22:
                    f3:1f:ce:9e:d2:f6:0c:19:54:a0:2a:f0:cc:14:cc:
                    49:ae:d3:f4:1d:bd:58:4c:62:5e:f6:68:9b:aa:19:
                    45:fc:2b:d4:be:69:bc:17:f3:3a:80:d7:b4:5a:49:
                    d0:96:30:85:5a:f5:63:78:d5:fa:b0:a1:54:d3:af:
                    53:5c:2b:3a:22:7b:bb:f4:87:d6:27:2d:fa:d4:a9:
                    7a:7c:22:5a:80:99:8b:6d:55:29:eb:96:32:29:fa:
                    fa:9b:99:bb:c8:44:b2:79:26:aa:6c:53:94:92:ef:
                    f7:0e:af:b0:7e:e0:22:c6:04:ed:ee:58:65:f4:d7:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:00:CC:68:6D:A7:06:FB:35:0F:1E:46:FA:2E:64:CC:A4:4F:6E
            X509v3 Authority Key Identifier:
                keyid:C9:1B:BC:C5:A4:E5:CF:9A:2D:28:E7:28:DF:BC:13:0F:68:8B:B8:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRu8xaTlz5otKOco37wTD2iLuN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/yRu8xaTlz5otKOco37wTD2iLuN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/yRu8xaTlz5otKOco37wTD2iLuN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:96:73:9a:7f:c5:0e:56:e5:2f:ac:84:d1:6f:77:b2:e7:
         48:82:42:1e:cb:42:2a:68:73:e0:ef:c0:7e:0d:91:6b:cb:b2:
         b4:60:08:04:61:2e:22:bf:75:19:f4:ec:62:2c:aa:f1:2f:31:
         b7:cd:1c:aa:cf:ec:4c:6b:50:72:df:03:7b:52:26:9c:cb:34:
         58:5e:d2:b0:fa:d5:5f:87:f4:04:d0:38:eb:9b:37:ec:43:84:
         17:88:78:4a:b1:f4:f2:20:41:6e:2f:f4:a7:60:62:cb:4e:7b:
         05:df:3a:5e:7a:76:6b:51:3b:c2:d1:56:a4:48:94:79:53:f5:
         8d:60:9c:f5:a2:7f:3c:d2:ca:34:54:5d:e2:0e:97:dd:93:f6:
         26:1f:91:09:e7:10:bc:13:22:26:98:49:b6:f2:22:17:b9:8b:
         af:ef:fb:5f:3c:9b:09:ba:9d:a0:6a:f9:d6:7f:c2:7e:3e:8a:
         fb:ce:ee:ff:a1:88:e4:9e:03:56:cf:c3:6d:5f:91:fd:0c:b9:
         8a:ad:44:73:5e:ca:17:11:c2:ae:28:f3:5b:4d:71:a8:4a:a6:
         70:06:45:1d:5a:ce:3b:03:b5:2a:36:f6:e1:96:30:4d:c3:0b:
         29:4d:29:de:81:0c:fd:20:de:f7:bf:28:cf:2f:47:c9:90:a4:
         ab:9c:dc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----