Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.mft
File:                     XbPKebuql1PeKlZEjEkB8wZ-Kao.mft (raw, json)
Hash identifier:          3bMtJ6LjCJ2yP2L5oimqWuwrTMJE51IfWg6/R7vL5mE=
Subject key identifier:   7F:5B:97:95:02:36:FE:6F:22:1D:E4:50:94:D9:1A:22:CE:74:0F:B6
Authority key identifier: 5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
Certificate issuer:       /CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Certificate serial:       018A83792E860926E85A324CB5487FFC01F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.mft
Manifest number:          0453
Signing time:             Mon 11 Sep 2023 09:01:11 +0000
Manifest this update:     Mon 11 Sep 2023 09:01:11 +0000
Manifest next update:     Tue 12 Sep 2023 09:01:11 +0000
Files and hashes:         1: 69Wst1M1_66RPuHPFPLvC0FWEwA.roa (hash: sLGmIRM5iLNGB8QPPrPyc2X2jbm9TjCVIh4El7n7wHg=)
                          2: XbPKebuql1PeKlZEjEkB8wZ-Kao.crl (hash: 0MyLp3zblKfS2BOiFUFImkcgWPmyvLonfS2THnS+RUo=)
                          3: Y4LSXTRGutd6vFojxdh18WhxYc0.roa (hash: r13kuOzVQWD9BKco8t5LXP0xQ6JZgjXF0Fv/RWBkuiM=)
                          4: mkWGOiQv8-zaJqV7AuXQ4StFsWU.roa (hash: 3bQg1m7y2d35Lg88DWfGvLLnUVyU6z8gAz0s8QL20NI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:79:2e:86:09:26:e8:5a:32:4c:b5:48:7f:fc:01:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
        Validity
            Not Before: Sep 11 09:01:11 2023 GMT
            Not After : Sep 12 09:01:11 2023 GMT
        Subject: CN=7f5b97950236fe6f221de45094d91a22ce740fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:1b:05:08:d8:7e:fc:f4:7f:f5:81:5c:a3:
                    36:df:2c:8f:19:8c:f0:7f:7a:d0:c5:42:17:87:dd:
                    bd:14:fe:c2:c9:84:85:ea:06:c2:f1:59:e7:c2:34:
                    35:23:33:bf:4d:b8:92:74:5d:2a:1c:b7:dd:42:9d:
                    55:fe:74:69:76:e0:9b:d5:b4:e1:fe:1a:26:0b:11:
                    5d:75:74:bf:22:31:49:63:14:1e:60:ce:e7:a7:4b:
                    a7:e1:87:69:84:6f:de:79:aa:f5:fd:1d:fe:76:47:
                    d5:da:8f:4c:be:02:d5:ab:aa:12:5f:fa:6e:49:eb:
                    94:79:76:3a:31:c6:83:63:c5:1a:e5:f5:a8:44:2e:
                    71:2b:d7:0a:8d:68:91:bc:92:5b:11:f1:e9:bf:50:
                    b5:4a:06:63:4d:88:d4:43:6d:6b:99:aa:09:31:b3:
                    f5:91:5e:6a:78:1d:bd:0a:c2:ea:b6:9c:94:ee:11:
                    38:44:e3:b8:b0:2f:02:49:f8:48:59:bd:fb:3c:8b:
                    55:d1:37:d8:bb:93:3c:ef:fb:9d:f7:e1:ef:1d:9f:
                    a5:da:f9:1e:3e:f1:81:79:fe:40:bc:3c:87:8b:18:
                    00:60:eb:5b:98:67:53:e5:7b:e7:06:b4:20:dd:0b:
                    60:68:e9:a2:7f:eb:c9:fb:33:49:44:95:a8:88:3b:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5B:97:95:02:36:FE:6F:22:1D:E4:50:94:D9:1A:22:CE:74:0F:B6
            X509v3 Authority Key Identifier:
                keyid:5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fa:c6:9a:dc:8a:be:49:d4:03:1a:23:a9:15:26:ff:2f:44:
         09:f5:ac:25:04:0b:a0:ac:2b:4c:fa:d9:92:9a:5b:d2:27:ca:
         cb:81:27:52:2a:24:d9:8e:3c:00:70:91:4e:a2:3c:c2:17:76:
         d9:12:15:a8:82:e9:ed:42:4f:02:da:68:50:83:81:48:f5:57:
         88:82:c1:1b:c9:67:9a:a1:2b:f0:05:d2:ad:d8:f6:f6:2d:de:
         88:b7:97:36:2e:c2:54:01:af:9d:0a:05:85:44:f0:5c:00:0f:
         e9:20:00:76:b9:08:a4:d7:32:9c:4e:11:34:88:8f:82:a3:03:
         b9:6a:b4:b6:15:23:85:dc:48:cb:c4:ac:60:1b:ce:cb:c4:da:
         00:23:e7:f2:09:04:43:5f:53:a3:e8:09:37:6c:3c:76:7c:58:
         60:46:6c:a0:6d:bf:9a:f9:e3:fd:e1:2b:f5:b2:e9:1d:61:23:
         86:91:14:3b:48:8d:05:13:da:b9:88:df:c4:05:68:79:ac:94:
         a4:5b:b7:9f:ce:59:3e:52:d8:0e:04:c2:f6:7d:94:a3:4a:dc:
         d0:35:11:6b:ae:c4:09:06:27:d6:8d:17:30:78:dc:2f:95:82:
         d1:8f:e1:a3:51:67:ca:a8:c1:6b:70:3e:92:fa:f6:75:1c:42:
         d5:b4:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----