Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/007d5f-5b07-4eaf-a732-3ba436a3cc68/1/bTMY_9U-QZyltZJ9N-z41j-NAJw.mft
File:                     bTMY_9U-QZyltZJ9N-z41j-NAJw.mft (raw, json)
Hash identifier:          oisx20Z3hgMznyi/ntEf1Ic9n7JdIHUVIKfR7/h2D8c=
Subject key identifier:   7C:60:B8:AF:13:E0:2A:E2:62:E0:C3:F4:36:4C:CC:3A:22:F0:4B:94
Authority key identifier: 6D:33:18:FF:D5:3E:41:9C:A5:B5:92:7D:37:EC:F8:D6:3F:8D:00:9C
Certificate issuer:       /CN=6d3318ffd53e419ca5b5927d37ecf8d63f8d009c
Certificate serial:       018702D1DAC698F0A4154C5F145BC24479E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTMY_9U-QZyltZJ9N-z41j-NAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/007d5f-5b07-4eaf-a732-3ba436a3cc68/1/bTMY_9U-QZyltZJ9N-z41j-NAJw.mft
Manifest number:          091D
Signing time:             Tue 21 Mar 2023 06:18:40 +0000
Manifest this update:     Tue 21 Mar 2023 06:18:40 +0000
Manifest next update:     Wed 22 Mar 2023 06:18:40 +0000
Files and hashes:         1: bTMY_9U-QZyltZJ9N-z41j-NAJw.crl (hash: oG8SvLOLT0Bxka2ktP/S7YFoDn6hZFZCzOQUe96NYSI=)
                          2: uzsX5SF1dVvuO1_s47VuAXUSAyU.roa (hash: WoITMZVFqkG63Wb7oSDzr0axMN4aTE47+vr6THoCfgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:02:d1:da:c6:98:f0:a4:15:4c:5f:14:5b:c2:44:79:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3318ffd53e419ca5b5927d37ecf8d63f8d009c
        Validity
            Not Before: Mar 21 06:18:40 2023 GMT
            Not After : Mar 22 06:18:40 2023 GMT
        Subject: CN=7c60b8af13e02ae262e0c3f4364ccc3a22f04b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:7f:3d:8d:08:74:9e:9d:2c:13:c1:c0:c2:
                    ba:53:24:45:b1:99:bc:43:1f:38:9d:39:b0:b1:26:
                    f0:2e:d7:6c:72:31:62:0b:c5:ae:dd:14:93:59:61:
                    52:b8:88:b0:eb:c3:80:dd:a3:2f:5f:b8:4c:06:c3:
                    23:ce:fc:cc:85:7d:22:14:70:47:35:1e:e2:84:0c:
                    76:17:f8:60:9e:85:b4:1a:15:ae:0c:45:05:db:4b:
                    ca:fc:71:14:4d:7f:07:3f:c3:20:a1:4b:f3:ad:dd:
                    c0:69:4b:ea:be:4a:54:f3:05:84:e6:94:80:97:cf:
                    8c:e6:b7:88:e3:8e:43:2b:ea:3a:9c:c6:c0:16:f5:
                    3b:c2:2d:13:2c:7a:75:b9:8b:ab:9f:29:ce:ed:0a:
                    3f:85:90:42:a8:bc:74:0a:10:e2:b8:29:cd:5e:cb:
                    c8:3d:60:fd:bf:b9:d2:76:63:05:28:ca:f9:9f:45:
                    4e:25:e6:c9:e9:d9:fe:d4:c3:21:05:01:5e:bb:27:
                    56:76:3d:51:a0:cd:8a:50:be:63:b0:25:fb:bc:1d:
                    25:67:7f:fe:57:50:83:e3:d4:25:1d:8b:18:84:ab:
                    fa:0d:71:86:88:e7:01:ec:29:db:49:cd:b8:5c:5d:
                    06:91:e7:db:ca:24:72:72:31:33:c7:54:c6:2a:a2:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:B8:AF:13:E0:2A:E2:62:E0:C3:F4:36:4C:CC:3A:22:F0:4B:94
            X509v3 Authority Key Identifier:
                keyid:6D:33:18:FF:D5:3E:41:9C:A5:B5:92:7D:37:EC:F8:D6:3F:8D:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTMY_9U-QZyltZJ9N-z41j-NAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/007d5f-5b07-4eaf-a732-3ba436a3cc68/1/bTMY_9U-QZyltZJ9N-z41j-NAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/007d5f-5b07-4eaf-a732-3ba436a3cc68/1/bTMY_9U-QZyltZJ9N-z41j-NAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ec:e0:84:cb:d7:f5:93:74:bf:9e:dc:f5:53:b2:d1:5f:1e:
         38:57:58:0a:b7:b5:81:3d:f4:89:6e:29:00:c6:a2:4c:85:f0:
         ab:88:dc:aa:a2:18:ff:da:f9:90:22:07:fc:82:2f:b9:98:82:
         33:5d:f4:a8:18:1c:1a:07:ee:73:9d:bd:3b:79:1a:ee:02:f5:
         a9:0f:ea:78:80:a9:f8:42:90:e3:9b:a8:a0:bb:24:ef:41:e2:
         70:69:b4:89:59:85:3e:61:ba:29:93:4e:dc:eb:36:dc:fd:63:
         f5:da:d8:58:5b:3a:d6:ca:0c:76:29:46:d4:79:55:5d:51:58:
         1e:85:2e:ee:e6:10:02:8a:63:57:8f:45:f9:3f:b7:02:be:d8:
         10:8b:67:dc:83:ff:de:f4:33:c9:b6:74:a6:fa:8d:bd:14:79:
         0b:2e:b5:06:00:36:f8:a9:f5:d2:00:b0:1e:48:dc:27:7f:9d:
         4e:5e:2b:98:c3:47:76:bb:27:18:92:d5:a4:bb:85:c7:05:ac:
         92:4d:d4:01:c4:78:f8:73:6d:4f:b8:1c:d5:a7:a1:9d:d0:ad:
         f2:37:b3:a6:f8:42:04:04:cf:ec:9c:0c:35:65:d4:1a:1f:82:
         84:1a:39:9c:0f:98:d4:7f:dc:37:7b:97:44:f7:c8:d3:66:c2:
         78:f0:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----