Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0e1f2a-38d8-4a0e-aa28-e2ef03d74af6/1/8MYFBA--3le-PFI1F_NbCIryRkc.mft
File:                     8MYFBA--3le-PFI1F_NbCIryRkc.mft (raw, json)
Hash identifier:          MHN7KxPqxr2Fl8GKifYWVnKtnNqGax5v0Hcf8mjFVBY=
Subject key identifier:   CF:66:AD:D2:31:BE:17:B7:66:35:C1:C4:0B:79:32:CB:AA:D3:42:2A
Authority key identifier: F0:C6:05:04:0F:BE:DE:57:BE:3C:52:35:17:F3:5B:08:8A:F2:46:47
Certificate issuer:       /CN=f0c605040fbede57be3c523517f35b088af24647
Certificate serial:       018363BC6A473B32A0E2EB5708F0B6B00CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MYFBA--3le-PFI1F_NbCIryRkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/0e1f2a-38d8-4a0e-aa28-e2ef03d74af6/1/8MYFBA--3le-PFI1F_NbCIryRkc.mft
Manifest number:          0614
Signing time:             Thu 22 Sep 2022 05:47:15 +0000
Manifest this update:     Thu 22 Sep 2022 05:47:15 +0000
Manifest next update:     Fri 23 Sep 2022 05:47:15 +0000
Files and hashes:         1: 8MYFBA--3le-PFI1F_NbCIryRkc.crl (hash: zz6MBB4dBBYXtf5P01gQ2fdDf6uvbnTYXTpf6C7AMPw=)
                          2: cDge5mfJfU-Dy52bhx2wI18ECSY.roa (hash: FOobC19QKjVdI2xN8CvpRRuwergBJ0QiwbuYNab8fG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:63:bc:6a:47:3b:32:a0:e2:eb:57:08:f0:b6:b0:0c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c605040fbede57be3c523517f35b088af24647
        Validity
            Not Before: Sep 22 05:47:15 2022 GMT
            Not After : Sep 23 05:47:15 2022 GMT
        Subject: CN=cf66add231be17b76635c1c40b7932cbaad3422a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:38:fe:ce:92:66:8c:2d:0c:7b:38:31:c2:
                    ae:47:ce:6d:57:ba:cd:91:06:bf:09:f8:10:cc:0e:
                    09:de:cd:63:8a:53:95:f0:7e:28:0e:14:f2:d1:ab:
                    ba:5a:fe:30:b2:74:1b:1a:ce:d8:a3:c8:fb:5f:9e:
                    8b:66:11:d3:f2:c4:c6:71:22:48:16:b3:38:7e:b2:
                    12:1a:af:a4:bc:2f:d1:de:2d:8e:61:13:55:74:5d:
                    4b:e2:30:9a:8f:33:ee:53:19:cc:f6:25:32:c4:13:
                    c7:42:47:e7:22:65:a2:5d:e3:a1:ec:05:14:a4:79:
                    2a:49:f8:28:45:43:9c:79:49:b4:cc:f0:07:53:7f:
                    a2:88:e1:e4:4e:0c:45:f3:25:6b:c6:c2:70:f6:de:
                    6a:60:24:0f:a2:f5:33:99:eb:fb:2f:af:94:26:d4:
                    45:5b:cf:60:fe:63:b9:13:f6:88:13:74:be:8f:29:
                    c8:56:e1:9d:bc:c8:b2:36:30:64:03:b2:82:eb:08:
                    cf:69:80:0b:5e:cf:bf:04:1d:53:44:b5:97:38:7e:
                    60:34:da:ef:fb:de:47:76:16:e7:ed:64:07:cf:c4:
                    46:8e:d2:3b:a2:e2:ce:ff:11:15:35:3c:3e:fb:ca:
                    7e:76:7e:9f:79:23:4e:c4:76:29:53:41:cf:a5:69:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:AD:D2:31:BE:17:B7:66:35:C1:C4:0B:79:32:CB:AA:D3:42:2A
            X509v3 Authority Key Identifier:
                keyid:F0:C6:05:04:0F:BE:DE:57:BE:3C:52:35:17:F3:5B:08:8A:F2:46:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MYFBA--3le-PFI1F_NbCIryRkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0e1f2a-38d8-4a0e-aa28-e2ef03d74af6/1/8MYFBA--3le-PFI1F_NbCIryRkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0e1f2a-38d8-4a0e-aa28-e2ef03d74af6/1/8MYFBA--3le-PFI1F_NbCIryRkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:8f:6a:34:2e:42:d0:42:03:84:f9:18:ca:a5:d3:17:f0:
         fb:34:37:af:a1:a1:6e:8d:a0:bb:68:02:8c:46:eb:d0:71:b2:
         b2:51:99:2c:b6:9b:83:28:d3:74:6a:57:b1:c2:df:aa:b2:a0:
         d3:5d:d6:d2:98:aa:c6:52:16:a9:5c:69:64:10:06:86:93:72:
         f9:90:1d:1b:53:98:22:51:d5:ed:19:67:07:cc:30:e4:1b:3b:
         50:49:83:93:3b:b4:19:fb:cf:28:c4:d1:1d:7e:e0:63:27:5c:
         5c:b0:a2:a7:3d:d3:d2:f4:80:1b:0e:2c:cb:ee:5d:c4:74:92:
         d1:fe:3e:d3:ef:8f:8c:a2:32:46:44:dc:4d:81:fc:7f:41:cb:
         99:dd:54:af:85:67:11:52:99:ae:27:ea:70:ca:2d:98:84:2e:
         74:dd:af:07:63:77:72:ca:99:13:21:0c:f7:65:1a:09:80:6c:
         ee:79:2e:48:8e:6a:6c:95:04:d9:d2:3b:a6:91:5e:ec:c0:38:
         50:67:d2:50:a0:36:16:38:ea:c8:74:6c:4e:fa:c2:96:0e:0c:
         24:af:b1:d9:ff:5d:1f:9c:e6:f6:b3:3a:39:15:6f:58:26:4f:
         c9:e3:06:f1:d3:f8:ac:c6:6c:75:3d:a4:63:ca:7b:e6:a4:c0:
         ee:3a:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----