Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/6E7dHco2r7d_-J6a6FgRCrMTiUo.mft
File:                     6E7dHco2r7d_-J6a6FgRCrMTiUo.mft (raw, json)
Hash identifier:          GXqUtvtSvfo4YseokDMmEmqx1hmCHUj3Z0Hvd50UCXg=
Subject key identifier:   30:D9:81:7A:1F:FA:E6:1A:C8:8A:4A:E2:B0:03:66:35:66:98:D4:FC
Authority key identifier: E8:4E:DD:1D:CA:36:AF:B7:7F:F8:9E:9A:E8:58:11:0A:B3:13:89:4A
Certificate issuer:       /CN=e84edd1dca36afb77ff89e9ae858110ab313894a
Certificate serial:       01870311F9DDC19EC090319F1A010B8FED6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E7dHco2r7d_-J6a6FgRCrMTiUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/6E7dHco2r7d_-J6a6FgRCrMTiUo.mft
Manifest number:          0A60
Signing time:             Tue 21 Mar 2023 07:28:42 +0000
Manifest this update:     Tue 21 Mar 2023 07:28:42 +0000
Manifest next update:     Wed 22 Mar 2023 07:28:42 +0000
Files and hashes:         1: 6E7dHco2r7d_-J6a6FgRCrMTiUo.crl (hash: ivDHBCpsJ9PGfAwNeZMJB3eRD2HJaM3sEna93WW/Z0U=)
                          2: CQERarp6ssFZK2GiBiypwJw-MEM.roa (hash: JQhmyg/+ilyVgogzTsLW71G2p29hB9jSg4w6KyZ6lx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:03:11:f9:dd:c1:9e:c0:90:31:9f:1a:01:0b:8f:ed:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84edd1dca36afb77ff89e9ae858110ab313894a
        Validity
            Not Before: Mar 21 07:28:42 2023 GMT
            Not After : Mar 22 07:28:42 2023 GMT
        Subject: CN=30d9817a1ffae61ac88a4ae2b00366356698d4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:97:e0:a2:d3:75:8e:2b:b7:62:22:c1:46:0c:
                    5f:26:c9:f7:12:3e:35:42:95:ac:70:79:73:eb:3a:
                    77:61:ec:53:d0:51:a6:97:25:b4:18:fe:47:28:de:
                    a1:7a:c1:9a:cb:74:89:e1:d2:0c:0a:7f:6d:74:b2:
                    55:58:e3:3d:75:5a:33:87:a0:8a:fb:33:cc:72:0e:
                    b5:13:c0:d3:26:6f:34:29:d7:c0:83:03:2a:cb:db:
                    7e:7b:e5:5c:c1:00:01:a1:cd:60:84:a2:6b:89:51:
                    e3:58:9b:7a:83:df:88:62:cc:39:6c:7f:96:6e:5b:
                    cc:b0:24:8f:74:97:a4:7d:83:31:d9:24:a2:2e:29:
                    eb:b2:d1:71:8d:6f:66:3f:e9:26:17:d5:50:e3:31:
                    23:be:4b:c0:6e:88:76:71:94:a6:2e:14:dc:cf:46:
                    34:51:87:87:1d:33:0f:de:44:98:3a:f5:3e:5a:5b:
                    0f:47:5f:fe:dd:f5:5f:06:50:6e:38:48:64:28:2c:
                    10:9c:b4:de:9a:b4:57:c2:18:86:4a:bf:e6:4b:62:
                    82:0c:95:30:97:e8:69:e6:85:68:d0:20:f9:5d:26:
                    40:52:a7:c5:92:b8:39:e3:41:88:ca:3d:98:00:ec:
                    d2:b7:3b:94:91:f4:89:a6:32:1e:79:69:72:ef:e3:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D9:81:7A:1F:FA:E6:1A:C8:8A:4A:E2:B0:03:66:35:66:98:D4:FC
            X509v3 Authority Key Identifier:
                keyid:E8:4E:DD:1D:CA:36:AF:B7:7F:F8:9E:9A:E8:58:11:0A:B3:13:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E7dHco2r7d_-J6a6FgRCrMTiUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/6E7dHco2r7d_-J6a6FgRCrMTiUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/6E7dHco2r7d_-J6a6FgRCrMTiUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:ad:28:7c:41:50:58:54:34:5c:bd:37:07:af:c9:ae:d7:
         ab:1a:c6:93:fd:d6:09:67:47:f1:c1:bb:7e:cc:00:9b:dc:02:
         8c:82:47:f5:82:52:f2:5a:7a:79:9d:0a:98:60:9e:54:74:ea:
         8d:12:7d:de:da:64:7c:76:88:9b:76:ac:99:71:75:68:c0:81:
         bc:38:d9:5f:fc:2d:18:83:0c:3e:42:c3:bf:bf:dd:23:50:a3:
         ce:a3:db:70:b2:95:00:0a:e5:b7:1c:4c:28:6c:85:56:2f:ed:
         f0:d6:f1:2a:8d:24:e7:15:17:c2:10:ed:64:a3:3b:c9:8e:90:
         80:ac:ec:f3:c7:4a:80:96:41:96:f8:5f:1f:fa:14:e7:27:8a:
         4b:72:1d:dd:33:f5:ce:9e:6c:ab:07:13:2e:28:33:50:b2:e4:
         5b:9a:25:ec:fa:c4:6b:30:fb:02:e1:d8:66:63:55:7e:d3:41:
         a7:7b:0b:ac:6e:07:b7:16:79:3b:06:6c:86:db:af:df:64:76:
         70:e5:f4:b5:c0:e6:6e:e2:ae:59:e6:8b:ff:8c:c5:7d:4e:be:
         dc:45:3f:94:51:dd:52:b5:9d:24:e2:24:74:df:d0:eb:c8:d5:
         47:18:82:d6:8b:8b:6c:b5:96:3b:42:c6:ab:f1:7c:8e:a6:a0:
         59:1f:c0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----