Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1f761c-6da1-4352-ab87-1b4e10c186bc/1/0hz5I7o-PR9krLxqXvJsJEYkKmo.mft
File:                     0hz5I7o-PR9krLxqXvJsJEYkKmo.mft (raw, json)
Hash identifier:          W1Zf0URfaOH7GpKOC35ZP9ri/kD3+xFTOsI9Q1tluSk=
Subject key identifier:   92:4B:FE:34:74:97:06:B1:C9:2E:64:08:96:5D:22:18:8C:41:B4:A9
Authority key identifier: D2:1C:F9:23:BA:3E:3D:1F:64:AC:BC:6A:5E:F2:6C:24:46:24:2A:6A
Certificate issuer:       /CN=d21cf923ba3e3d1f64acbc6a5ef26c2446242a6a
Certificate serial:       0184A82510053F63BB9A236BD19D1C8576A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hz5I7o-PR9krLxqXvJsJEYkKmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1f761c-6da1-4352-ab87-1b4e10c186bc/1/0hz5I7o-PR9krLxqXvJsJEYkKmo.mft
Manifest number:          06C5
Signing time:             Thu 24 Nov 2022 05:38:31 +0000
Manifest this update:     Thu 24 Nov 2022 05:38:31 +0000
Manifest next update:     Fri 25 Nov 2022 05:38:31 +0000
Files and hashes:         1: 0hz5I7o-PR9krLxqXvJsJEYkKmo.crl (hash: YTtaLo0DFz+hxYo9C0L4t2M2EgoX5/J5bZgTnHvcWq0=)
                          2: m3eT-qiBOS0rLPBDOZLBp9xiLCI.roa (hash: 7bxu6PwrHYQtUA2VzMO+hN9UsB89a1wrYGLrhcGGxg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a8:25:10:05:3f:63:bb:9a:23:6b:d1:9d:1c:85:76:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21cf923ba3e3d1f64acbc6a5ef26c2446242a6a
        Validity
            Not Before: Nov 24 05:38:31 2022 GMT
            Not After : Nov 25 05:38:31 2022 GMT
        Subject: CN=924bfe34749706b1c92e6408965d22188c41b4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:21:bc:86:ff:20:c8:6e:b2:b5:a5:ab:19:
                    6b:a3:7b:1d:06:2c:85:d2:cc:fb:09:a7:27:6e:4b:
                    a9:49:3b:3e:79:25:26:ac:a7:5c:8f:96:34:6d:9d:
                    76:64:08:5b:84:e3:ec:77:ff:9f:1b:29:28:bf:88:
                    39:8e:e3:42:10:9b:be:9e:03:1c:20:b5:0b:aa:d1:
                    a2:26:fd:41:c1:df:87:a1:34:78:43:ab:12:60:91:
                    a0:a0:76:7a:86:9d:99:12:ca:c1:2f:b5:f1:cd:b0:
                    70:1c:c6:ae:16:60:a1:2d:c1:c3:36:1e:f1:35:ee:
                    dc:3b:0d:ac:93:8b:f0:49:75:2e:ff:b4:36:5e:cb:
                    63:0c:4d:00:1e:3e:57:ee:6e:ef:6e:fb:cb:6d:05:
                    8e:52:64:0b:05:b8:dc:f6:1a:56:c8:fc:39:4c:61:
                    8e:e8:93:69:61:c7:df:3c:d6:bf:09:c2:ee:c2:ad:
                    db:b3:e8:be:95:74:d3:9c:dd:a3:a3:e2:0c:93:47:
                    0c:fe:c1:6f:45:bf:e6:47:e0:a8:31:f3:49:d5:21:
                    1f:a3:7d:e9:02:cf:63:15:40:71:6e:c0:e2:11:1b:
                    47:91:6d:47:ef:66:86:87:57:d4:48:b5:f9:f6:9f:
                    82:70:d0:74:92:a8:ba:93:3c:1b:61:49:b8:e5:d9:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4B:FE:34:74:97:06:B1:C9:2E:64:08:96:5D:22:18:8C:41:B4:A9
            X509v3 Authority Key Identifier:
                keyid:D2:1C:F9:23:BA:3E:3D:1F:64:AC:BC:6A:5E:F2:6C:24:46:24:2A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hz5I7o-PR9krLxqXvJsJEYkKmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1f761c-6da1-4352-ab87-1b4e10c186bc/1/0hz5I7o-PR9krLxqXvJsJEYkKmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1f761c-6da1-4352-ab87-1b4e10c186bc/1/0hz5I7o-PR9krLxqXvJsJEYkKmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:aa:7a:79:ec:72:a0:8c:bd:67:44:97:7b:b0:b1:b9:79:
         a9:1f:13:59:b0:07:0f:f6:2a:a3:46:34:90:3c:ae:c3:b0:38:
         ef:3e:6c:d8:26:f8:5e:63:91:64:8e:88:94:df:a7:dd:0d:7d:
         1f:3d:cb:e5:e9:97:bc:9a:e9:c9:15:1e:e0:56:64:b0:7f:44:
         60:b1:51:ea:e9:bb:31:1c:8e:c3:44:42:0c:ac:52:43:e7:92:
         88:86:d2:5a:2a:33:e1:5f:1c:40:4c:f4:c5:ab:2a:45:f4:d0:
         ad:a8:90:fb:e5:26:69:0f:3c:49:08:96:2c:6e:85:bc:4c:4b:
         43:09:df:b3:93:ba:03:8a:39:3d:24:a9:10:ae:2d:07:6f:93:
         e6:04:20:9a:83:fc:dd:af:05:13:76:05:b8:ce:1c:05:ad:0d:
         63:e0:a0:1d:70:17:05:b2:9a:aa:e0:be:e7:cd:cb:9a:f9:bc:
         a0:94:c7:61:2b:55:a0:ed:34:5e:ef:2b:cc:da:0d:90:98:5c:
         5f:af:0e:69:75:73:7c:24:ee:a2:dc:64:1b:d7:de:d6:27:6c:
         a0:0b:a9:d7:cd:4a:a7:58:6c:8a:57:9a:35:47:91:c0:98:82:
         af:36:fb:06:53:36:e6:98:bb:62:50:1a:fe:a3:67:82:f2:2c:
         f0:4e:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----