Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/mgT_Ou5hfBwekHSwaChWGzAgMHA.mft
File:                     mgT_Ou5hfBwekHSwaChWGzAgMHA.mft (raw, json)
Hash identifier:          JjwrwulAPa0rKV86RkuWaLgwK3Z79Jp4V9kCAWMM7uA=
Subject key identifier:   37:79:84:88:53:3C:77:0A:CD:88:40:01:A0:0F:A5:A4:5B:1B:C6:90
Authority key identifier: 9A:04:FF:3A:EE:61:7C:1C:1E:90:74:B0:68:28:56:1B:30:20:30:70
Certificate issuer:       /CN=9a04ff3aee617c1c1e9074b06828561b30203070
Certificate serial:       0186E8F0C6FBD8E52B6B81EED5CB82A803ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgT_Ou5hfBwekHSwaChWGzAgMHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/mgT_Ou5hfBwekHSwaChWGzAgMHA.mft
Manifest number:          082C
Signing time:             Thu 16 Mar 2023 05:42:18 +0000
Manifest this update:     Thu 16 Mar 2023 05:42:18 +0000
Manifest next update:     Fri 17 Mar 2023 05:42:18 +0000
Files and hashes:         1: I_2z-_hY6Nnvcl0wdObyeBAeE3Y.roa (hash: OD2W0fkOaWEMS8Fw/TTHnhizAnzlqonv2Y7MQFyHCzU=)
                          2: mgT_Ou5hfBwekHSwaChWGzAgMHA.crl (hash: V1Ej/2lNlh7aYGcQKgAjoHerk4m40FKU5c+sEQZnLGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e8:f0:c6:fb:d8:e5:2b:6b:81:ee:d5:cb:82:a8:03:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a04ff3aee617c1c1e9074b06828561b30203070
        Validity
            Not Before: Mar 16 05:42:18 2023 GMT
            Not After : Mar 17 05:42:18 2023 GMT
        Subject: CN=37798488533c770acd884001a00fa5a45b1bc690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:94:38:c6:27:28:d0:6a:8a:f5:ff:83:f1:
                    6e:31:59:18:6d:70:2d:3a:1a:d1:0e:9c:90:c6:6e:
                    b8:47:0b:3f:48:bf:a1:d6:d8:99:91:1e:a4:fe:4d:
                    66:09:79:c8:90:d3:40:5d:d1:cf:9e:52:24:94:49:
                    4a:fc:40:b6:2e:d8:43:9b:a4:75:61:36:60:99:7c:
                    3a:a9:83:b6:9e:30:1f:d3:e2:c5:0b:22:c2:c2:bf:
                    73:13:a1:53:de:75:e4:20:db:27:83:6a:2c:bc:94:
                    9e:b2:46:97:ff:62:bc:6d:d1:dd:16:36:ad:94:e6:
                    57:1a:dc:8d:70:ac:05:20:98:3a:93:f2:2e:5d:4c:
                    c9:10:c5:cb:d7:cb:80:01:c8:29:ca:26:e3:66:19:
                    ed:18:ed:1a:65:26:74:8e:c3:ed:a8:e8:af:e2:24:
                    48:62:e8:0b:0c:6d:dc:88:3a:2e:7a:dd:29:9f:d8:
                    bf:fb:9c:b7:9f:dd:21:c3:00:2a:f8:ec:c0:e2:4c:
                    9d:c2:9b:a1:98:58:c4:aa:33:ca:77:31:c4:eb:ef:
                    e6:1c:ba:15:29:bc:b7:7d:0b:90:66:c5:ca:15:31:
                    c2:7e:53:50:64:9f:93:fb:52:6a:72:41:43:cd:6d:
                    a4:d9:45:f7:82:43:f9:d8:66:fa:c6:5b:3b:2d:22:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:79:84:88:53:3C:77:0A:CD:88:40:01:A0:0F:A5:A4:5B:1B:C6:90
            X509v3 Authority Key Identifier:
                keyid:9A:04:FF:3A:EE:61:7C:1C:1E:90:74:B0:68:28:56:1B:30:20:30:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgT_Ou5hfBwekHSwaChWGzAgMHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/mgT_Ou5hfBwekHSwaChWGzAgMHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a757da-acf8-4d9c-a708-8d1db62315cb/1/mgT_Ou5hfBwekHSwaChWGzAgMHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:68:38:71:1d:01:30:6f:eb:2f:c0:34:03:48:dc:8d:73:44:
         0e:27:10:c6:c9:6c:5b:84:32:42:5a:2c:e8:1b:6b:6b:9d:16:
         15:6b:40:5f:cd:8b:42:ef:37:c6:87:f9:10:37:8f:6e:e4:13:
         2c:34:91:14:0a:da:ad:7f:82:35:59:37:af:ce:f9:cb:d3:74:
         a8:2b:3e:db:12:fe:c1:30:58:09:fd:0a:a3:12:11:37:39:ce:
         94:58:ab:e8:01:31:d0:e2:fa:43:ef:5a:76:03:e7:ea:30:be:
         ae:54:23:ac:3d:82:7e:8d:cd:6f:2c:a7:47:62:9f:98:d6:30:
         24:db:1c:16:0a:93:66:87:90:a7:55:54:a2:3e:95:e6:95:27:
         e9:09:1e:6f:86:9b:2f:a5:79:db:b0:bb:10:b3:c9:4c:ea:78:
         e7:e0:c2:31:29:05:08:e7:52:52:90:47:94:d2:9e:e5:6d:9f:
         ce:0c:a8:c4:80:de:a2:05:13:a7:c2:78:06:24:3d:4a:48:47:
         54:18:5c:37:7b:05:d4:80:97:13:e0:42:c2:a8:76:0d:1a:c9:
         02:6e:5d:30:3c:fe:13:83:75:20:c4:3f:de:11:be:ad:fe:ad:
         30:40:60:c1:46:27:23:9f:c3:c8:b6:7e:c6:b5:a2:ab:c3:bb:
         7b:1a:9a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----