Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.mft
File:                     RPK02TsqrzoCaXIjt5L2AhjK0rY.mft (raw, json)
Hash identifier:          oDw5W4fbb8fJhXEGFlVxUmX+qDY/bNeLF4Stu8H/G34=
Subject key identifier:   BF:B4:C5:C2:4B:A4:B4:A5:7B:3C:CB:34:DA:EC:EE:9F:FB:1B:3E:CB
Authority key identifier: 44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
Certificate issuer:       /CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Certificate serial:       0187731993541FFA1A5F6E6049B9E9420D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.mft
Manifest number:          06D7
Signing time:             Wed 12 Apr 2023 01:34:28 +0000
Manifest this update:     Wed 12 Apr 2023 01:34:28 +0000
Manifest next update:     Thu 13 Apr 2023 01:34:28 +0000
Files and hashes:         1: 1DKgRqwQVbucO4u5BqfOD4vTIzk.roa (hash: jRZVc4yEUu/cPve4ZcoEePcb//mN/tQ4wwYcc79Xh/E=)
                          2: RPK02TsqrzoCaXIjt5L2AhjK0rY.crl (hash: oXlUz7omLc9s5BWD8V9euUB5oGnqTCB/9Mudcl4ouFs=)
                          3: chCq3JtQiEo5pj5qio1I3XKA1tY.roa (hash: yKzzTA3sp6SAn661/GJPt7v1hmpeXJvRxhU1cfsZhPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:73:19:93:54:1f:fa:1a:5f:6e:60:49:b9:e9:42:0d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
        Validity
            Not Before: Apr 12 01:34:28 2023 GMT
            Not After : Apr 13 01:34:28 2023 GMT
        Subject: CN=bfb4c5c24ba4b4a57b3ccb34daecee9ffb1b3ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:12:07:d9:78:ab:89:10:31:26:85:4d:73:a4:
                    a2:07:33:16:5f:e3:2b:cf:5d:49:0b:4b:ce:ed:e5:
                    3b:96:8a:a9:5c:5c:66:b3:c1:b6:bd:db:2f:2c:c4:
                    cf:7e:90:8a:92:a0:26:4d:ee:9f:5a:2b:06:f7:5c:
                    f0:57:35:75:b4:20:11:e5:37:9d:cb:c6:3a:a8:cf:
                    04:c8:18:62:a8:e7:4f:59:7b:80:80:47:8e:d7:34:
                    54:21:d9:12:30:2c:0f:1c:ee:4b:1d:aa:44:3d:83:
                    bf:4b:b6:97:9b:7b:f6:9e:f5:98:ff:15:28:cc:e0:
                    af:a4:dc:4d:da:36:97:8a:0b:4a:ad:3d:d7:60:87:
                    f0:2b:68:4e:3d:eb:f2:e9:3d:20:92:35:be:d5:7b:
                    06:31:f5:70:12:08:a6:a7:4d:9c:2b:03:67:ca:30:
                    0a:e0:5e:90:8b:c5:48:6a:df:80:7b:0a:e7:b4:f7:
                    e1:95:55:18:75:ee:c4:7a:00:75:7c:a0:c6:01:f7:
                    3c:67:c4:1f:bc:53:9b:99:16:73:de:0c:d9:c2:83:
                    cf:d6:40:40:74:94:be:d4:9b:f3:e4:e4:aa:71:2e:
                    03:71:9d:4b:25:85:d1:be:96:0d:f6:43:13:4f:fe:
                    11:45:87:59:3c:59:4b:a5:c9:49:bc:f0:21:a1:5b:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B4:C5:C2:4B:A4:B4:A5:7B:3C:CB:34:DA:EC:EE:9F:FB:1B:3E:CB
            X509v3 Authority Key Identifier:
                keyid:44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:32:46:8a:73:51:dc:98:f9:8e:24:c9:f1:bc:80:da:05:41:
         05:bd:e5:6b:a4:a8:fe:d2:94:6c:85:ab:b0:75:41:b1:5a:10:
         4e:5b:b3:a8:60:e4:3f:ea:c4:51:6e:44:f3:e9:0a:d6:8f:08:
         a8:c6:4d:21:e1:59:8c:82:02:b5:b2:32:8d:04:cc:9a:2a:65:
         95:37:2c:60:80:0b:18:81:f1:5c:19:6b:40:b4:48:36:9d:fb:
         31:f3:26:70:f0:96:6c:8c:53:45:9d:b9:78:8a:b5:f5:da:77:
         fc:17:f9:8e:52:31:85:e3:e3:d7:69:2e:d9:3d:b2:92:36:df:
         4f:69:af:fb:e1:73:b5:37:b4:67:35:dd:38:b1:6b:db:7a:67:
         01:3a:09:d2:a2:92:ed:66:81:fd:28:f5:d5:81:21:97:9d:cd:
         10:8f:f7:52:6d:18:e4:56:be:01:4f:af:d8:54:2c:05:97:d2:
         1f:04:9b:b9:15:44:40:ec:c9:fb:a5:bd:96:eb:21:c6:f4:70:
         64:76:74:72:e9:92:37:0a:69:43:7f:dc:93:e8:6f:e0:8c:28:
         4d:44:30:54:a8:c4:63:dd:9a:2b:b3:e8:cd:70:cc:aa:a0:94:
         4f:81:32:f3:a6:66:27:6d:63:e6:45:e8:6b:b7:51:97:f5:a8:
         9f:3a:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----