Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/rE1gLjC5gGyEech7L1tM2S1HhPI.mft
File:                     rE1gLjC5gGyEech7L1tM2S1HhPI.mft (raw, json)
Hash identifier:          mBkTZDaqVqCsyDl9p3lSXdrfLYbGTQH3dN91rbh8Jws=
Subject key identifier:   1C:88:6E:16:51:63:44:E9:55:58:96:01:B6:19:07:0D:2D:51:35:DC
Authority key identifier: AC:4D:60:2E:30:B9:80:6C:84:79:C8:7B:2F:5B:4C:D9:2D:47:84:F2
Certificate issuer:       /CN=ac4d602e30b9806c8479c87b2f5b4cd92d4784f2
Certificate serial:       0184EFD92B7B3B1B56B72D076EA75BA9577B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rE1gLjC5gGyEech7L1tM2S1HhPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/rE1gLjC5gGyEech7L1tM2S1HhPI.mft
Manifest number:          0434
Signing time:             Thu 08 Dec 2022 03:48:17 +0000
Manifest this update:     Thu 08 Dec 2022 03:48:17 +0000
Manifest next update:     Fri 09 Dec 2022 03:48:17 +0000
Files and hashes:         1: 9A9S3gV-jV6rwyrVIwx4JV01SWc.roa (hash: NdUBmnHLyFoqugHQikQKyolANwutXwsxdQfSbDkhOh4=)
                          2: HNPJ-K2wY2jIf55lIZZ44HreIIQ.roa (hash: QwAIKwO46y1bMtxJRDLOgPjyIulgCxDe3ZEJwUvJ+Yc=)
                          3: rE1gLjC5gGyEech7L1tM2S1HhPI.crl (hash: DzQtvRATNd9NQEpEzf7ulLDzBoQPZU4WsQz3eht4XOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ef:d9:2b:7b:3b:1b:56:b7:2d:07:6e:a7:5b:a9:57:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4d602e30b9806c8479c87b2f5b4cd92d4784f2
        Validity
            Not Before: Dec  8 03:48:17 2022 GMT
            Not After : Dec  9 03:48:17 2022 GMT
        Subject: CN=1c886e16516344e955589601b619070d2d5135dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:d0:c9:15:f9:01:53:e1:40:ab:12:23:8f:
                    8b:43:b4:6b:5f:aa:64:de:30:a8:7e:6f:f7:b2:a0:
                    14:4d:df:93:53:2e:4c:d9:39:b3:0d:5c:e0:33:21:
                    ef:a9:81:af:b8:65:8b:86:20:c9:7f:f6:e6:22:bc:
                    84:c9:a5:6c:35:2c:7a:47:1d:af:e6:51:41:ae:21:
                    3a:74:05:25:8d:00:a6:a9:cf:99:e4:6b:98:e9:b6:
                    cc:6f:b8:1c:c1:9d:6d:fd:96:79:27:64:1d:0e:12:
                    23:fd:24:c6:af:33:8c:ff:78:fb:f1:b0:42:23:88:
                    52:dc:8f:a5:6b:22:d8:ac:a0:05:96:6c:12:d6:31:
                    6a:aa:77:ed:5f:bf:16:0e:de:9a:80:78:be:c3:7a:
                    cb:26:c7:7a:6e:12:ee:ee:cd:f3:3f:72:a3:a1:7a:
                    61:09:c5:f3:21:b8:ab:b7:41:10:37:65:c2:ad:25:
                    ae:4f:2b:d5:75:de:ba:15:2c:aa:2f:05:fc:ab:83:
                    20:f3:5b:af:a3:9b:e0:c2:b2:69:2b:9d:94:41:0a:
                    58:98:24:f4:9c:6c:80:f8:44:4b:4c:59:85:f3:88:
                    23:b9:96:34:70:ca:19:6e:21:e3:f0:58:ea:d5:67:
                    d5:31:6e:fd:84:f0:a4:78:1e:45:a3:49:d3:1f:c3:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:88:6E:16:51:63:44:E9:55:58:96:01:B6:19:07:0D:2D:51:35:DC
            X509v3 Authority Key Identifier:
                keyid:AC:4D:60:2E:30:B9:80:6C:84:79:C8:7B:2F:5B:4C:D9:2D:47:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE1gLjC5gGyEech7L1tM2S1HhPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/rE1gLjC5gGyEech7L1tM2S1HhPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/rE1gLjC5gGyEech7L1tM2S1HhPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:f5:ce:e3:09:e2:7b:ab:bb:01:ad:94:60:85:f2:1c:de:
         19:7e:67:2e:28:9e:d5:f8:09:49:18:4d:e7:61:da:9f:7c:79:
         7c:88:6b:cd:9e:7e:f1:6e:e8:d9:e9:11:30:f8:6a:fd:c9:80:
         35:0b:38:49:7c:57:7c:0f:66:bc:9f:72:22:70:78:b5:57:cb:
         66:2f:fe:36:00:d7:85:8e:68:23:42:45:38:cc:00:5e:a5:fc:
         16:56:5f:df:41:11:ee:59:60:61:3b:86:77:8b:e9:09:66:ac:
         e7:f0:11:60:33:4d:4c:8a:db:8f:c2:8a:37:8e:d7:96:74:78:
         6f:14:df:14:5d:e0:11:ec:95:7a:59:77:ff:3b:be:1d:45:b1:
         31:6b:9e:c9:4d:2f:98:55:85:63:0f:65:19:db:6e:fa:e6:91:
         06:7c:37:f7:c8:75:8b:ea:25:21:58:db:a0:66:4e:07:1b:0e:
         46:81:b5:78:df:4f:dd:50:4b:e4:65:02:72:5e:41:80:75:c9:
         e7:06:99:35:a8:1a:3e:24:e8:3d:3b:3e:19:02:90:1a:a5:46:
         53:0f:ca:b3:99:b5:89:3a:e4:4d:49:84:7d:c6:00:a7:8f:a4:
         f2:0e:c2:9b:63:47:39:3a:a8:d7:c3:d6:2b:e3:6c:55:7c:8a:
         8c:4d:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----