Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.mft
File:                     grPc3zGvbvDJNOrySIStmVFu3XY.mft (raw, json)
Hash identifier:          HhjKu9i3Y7/yAEoNNzj061ORfkvRJl/nevZ14pFSS3c=
Subject key identifier:   5D:ED:82:79:B7:03:D0:76:E2:BA:DA:F3:7B:07:36:DD:CD:3A:52:F0
Authority key identifier: 82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
Certificate issuer:       /CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
Certificate serial:       018A3EF5CB05063357C38DADEDC328572ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.mft
Manifest number:          0E4F
Signing time:             Tue 29 Aug 2023 01:43:30 +0000
Manifest this update:     Tue 29 Aug 2023 01:43:30 +0000
Manifest next update:     Wed 30 Aug 2023 01:43:30 +0000
Files and hashes:         1: 7WbV2F37aSRZ8GkFwTG22CIUwE4.roa (hash: v6JmFXzxnKc2MDCEOAjo20rvM78/W0cjqUxSwmvDCf0=)
                          2: AG5hv6hwxjxngBmYesnlZ6a8Vvg.roa (hash: WjFJnaWH+tl+TL5BZ9VHWw3rFVAyOYBsiaedU7trLzw=)
                          3: XIxdT9dCyVMaPTycJFOsfZwntL0.roa (hash: zn5Vm3V5cmVpGzX1uEc4695BeoAuh4qIzD1lg9n+H10=)
                          4: Y5o3JVo3dNIv5Q-O8dardzPKvL0.roa (hash: lI9GzOUg6DT8UvGP+8cPUqEMnhH8q0PgTP869NqFYCU=)
                          5: grPc3zGvbvDJNOrySIStmVFu3XY.crl (hash: 8EPdYb/ni1Alqv0llaEXxWl/s8CsQJsd+BEWkIoyfn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3e:f5:cb:05:06:33:57:c3:8d:ad:ed:c3:28:57:2a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
        Validity
            Not Before: Aug 29 01:43:30 2023 GMT
            Not After : Aug 30 01:43:30 2023 GMT
        Subject: CN=5ded8279b703d076e2badaf37b0736ddcd3a52f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:5f:e5:4f:ec:3e:76:2f:e2:7a:71:85:1b:
                    fa:21:b1:06:b6:60:4e:fd:41:e9:62:5e:41:65:6c:
                    18:3f:e3:b1:8d:6e:2a:f3:b7:e1:a8:d6:26:11:c3:
                    83:cd:93:42:aa:3f:36:8d:b3:02:96:89:03:d5:96:
                    d4:86:19:f2:bc:47:e9:b5:3a:8a:b4:bd:d8:92:63:
                    c9:6a:c2:eb:59:d6:cc:6d:29:4d:4d:1f:0f:e6:1f:
                    1b:52:68:85:33:cf:5a:62:4b:de:33:b8:76:64:1e:
                    7a:65:a0:97:96:0e:42:e5:2e:7a:20:f3:69:b1:b4:
                    cc:02:11:b1:b1:b4:b5:cc:7d:54:ee:58:49:14:6e:
                    6e:25:e2:80:47:bd:84:45:c3:81:ed:ea:7c:6c:e1:
                    64:ef:fd:41:0b:66:aa:71:a6:d7:70:ff:27:01:8f:
                    c4:4c:aa:88:3a:3b:3a:48:90:8f:60:66:83:23:e9:
                    1e:9a:44:97:b0:35:e7:7a:ff:9a:8f:03:2e:0a:5f:
                    73:c3:20:8e:df:f4:66:36:1b:2c:91:6b:6f:9b:88:
                    ff:15:d6:b7:28:b3:96:51:76:48:8b:b9:19:88:1a:
                    bc:ab:4b:0b:0e:75:c8:13:0a:80:bd:04:6c:15:4f:
                    e5:bf:8d:64:bc:21:ad:4c:3d:24:6c:ab:88:27:e2:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:ED:82:79:B7:03:D0:76:E2:BA:DA:F3:7B:07:36:DD:CD:3A:52:F0
            X509v3 Authority Key Identifier:
                keyid:82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:2e:6a:53:77:66:39:dc:f9:9b:46:65:35:bf:2b:54:4a:
         4c:1c:23:f0:0a:ae:c3:63:62:20:b6:7d:c2:73:3b:d0:c3:ee:
         c8:01:9f:79:2b:99:88:78:fe:30:bf:40:12:4e:78:38:19:48:
         c3:04:79:2d:52:af:87:34:a9:8f:cc:f0:e7:95:ad:14:e3:76:
         e1:ed:bd:c2:55:77:e0:1c:19:3a:d5:3c:66:2c:e3:f0:77:27:
         82:2e:4e:20:0d:9f:07:3c:75:41:1f:44:f8:e9:3f:45:58:a1:
         46:90:71:7c:eb:57:e4:92:02:dc:79:62:49:3e:06:a1:ba:dc:
         97:43:4c:b6:68:d4:63:53:15:99:f0:64:6d:91:ad:2b:de:e9:
         94:2a:1f:80:63:23:4d:f0:1c:d6:28:12:36:5e:69:4c:18:b1:
         63:f3:70:a1:4c:d0:f4:3b:d6:2a:de:c1:8b:44:d0:3e:b1:1a:
         b2:e9:b0:70:8a:55:48:bd:3b:88:35:f1:73:d1:4c:27:0e:b6:
         0c:2d:bf:82:c3:44:b3:95:84:ef:63:d6:ce:74:7c:51:63:ad:
         13:1e:54:90:2a:46:65:a3:35:2d:fd:b1:33:0e:18:2c:63:21:
         1f:61:72:31:72:86:d6:0c:ed:0f:ad:a4:39:a9:a7:db:05:87:
         16:d4:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----