Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/ho6Jx6tOFRKptG1TibXenGodfpk.mft
File:                     ho6Jx6tOFRKptG1TibXenGodfpk.mft (raw, json)
Hash identifier:          82ixsw1FE33Ct0XGCKjMojS8qnsuKTxdBP5otKUgD6M=
Subject key identifier:   D1:BE:FC:02:6B:E4:45:CC:D0:06:73:30:D1:AA:F3:CF:5E:AD:4B:F0
Authority key identifier: 86:8E:89:C7:AB:4E:15:12:A9:B4:6D:53:89:B5:DE:9C:6A:1D:7E:99
Certificate issuer:       /CN=868e89c7ab4e1512a9b46d5389b5de9c6a1d7e99
Certificate serial:       3884AE21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho6Jx6tOFRKptG1TibXenGodfpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/ho6Jx6tOFRKptG1TibXenGodfpk.mft
Manifest number:          0853
Signing time:             Fri 18 Feb 2022 03:26:03 +0000
Manifest this update:     Fri 18 Feb 2022 03:26:03 +0000
Manifest next update:     Sat 19 Feb 2022 03:26:03 +0000
Files and hashes:         1: 2gfwezai5BIQ-m1CrbAdKgdniTY.roa (hash: fO5GdtJXv2Aqp85eK2VdLNwZTSsN2h8LJAY736FEeuk=)
                          2: M5UnjkjdDIA4Wq7IZJeGum1YMV4.roa (hash: 9NayAwcxCW1n3/8BOCRZU8yd2dDJoUwqM77msxRe3S4=)
                          3: VVfmYagkryesIckOE84dOphnD3o.roa (hash: nCmFVjoR/pvWlCZ/bXcGZCCuVvqKOfVxSbnPFfrEdeg=)
                          4: ho6Jx6tOFRKptG1TibXenGodfpk.crl (hash: 8+IaxOVRSC1LerbJiZ6JqyH5cr+OLwHMJpnncX7GEmY=)
                          5: ndJ2MhkoQuhgQvlyuxM5yOAHIio.roa (hash: ysAnvngJtyyl1mDS8/bs2ZRrKR4OY4G71xPqT6qLdyg=)
                          6: tGsnD0ErM4m3G3OyuZsRF3rAk08.roa (hash: 1ulLLM2swrVXwoHGWG90/2I7oEmO5aXyc7s/CBAFdww=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948219425 (0x3884ae21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868e89c7ab4e1512a9b46d5389b5de9c6a1d7e99
        Validity
            Not Before: Feb 18 03:26:03 2022 GMT
            Not After : Feb 19 03:26:03 2022 GMT
        Subject: CN=d1befc026be445ccd0067330d1aaf3cf5ead4bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:a1:30:15:b4:c9:e3:98:32:27:ff:73:9e:
                    b3:84:b2:e3:80:f9:10:b1:0e:38:ca:cc:bf:93:d5:
                    09:ba:a4:4c:7b:8b:db:74:37:80:75:c3:81:68:1d:
                    e9:d8:74:2b:0a:82:85:2e:b0:93:8a:cc:ae:7d:2a:
                    07:2c:35:d6:ac:3a:6c:d6:88:10:8d:39:5d:8f:0c:
                    2a:1b:6a:4d:45:11:d0:b8:f8:f4:a9:21:e6:4a:7a:
                    b7:75:5b:ac:cb:49:5d:ee:b0:79:b3:ca:cb:f0:aa:
                    00:3e:16:e6:fe:e8:29:bd:1f:64:05:b2:4a:97:44:
                    e7:c8:61:d1:d1:ec:49:8e:ca:e9:07:8a:68:af:e1:
                    b9:5d:a7:78:d0:3c:8e:a6:32:77:63:c1:dd:89:0e:
                    fc:1a:f3:33:19:b3:b5:23:b7:b7:32:22:6a:11:3c:
                    72:86:43:3f:2d:6e:10:31:3c:53:b1:2f:24:ad:d1:
                    fc:08:08:9b:5a:ce:f6:b2:77:42:fe:00:75:f4:6e:
                    45:70:4a:3f:ab:a4:96:cb:2b:34:93:5e:d9:d2:77:
                    50:5e:0a:82:0d:59:56:1b:e9:49:2b:10:68:eb:e0:
                    8f:13:d4:b8:0e:bf:01:d8:c6:8f:2b:38:18:c3:ca:
                    4a:2f:14:c9:30:38:ca:fb:6c:e4:fc:4c:28:0e:f1:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BE:FC:02:6B:E4:45:CC:D0:06:73:30:D1:AA:F3:CF:5E:AD:4B:F0
            X509v3 Authority Key Identifier:
                keyid:86:8E:89:C7:AB:4E:15:12:A9:B4:6D:53:89:B5:DE:9C:6A:1D:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho6Jx6tOFRKptG1TibXenGodfpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/ho6Jx6tOFRKptG1TibXenGodfpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/ho6Jx6tOFRKptG1TibXenGodfpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:9f:09:e5:0b:49:47:5d:0b:eb:40:20:7d:7f:d2:35:b5:
         4b:7c:e2:40:d4:8c:27:fb:80:57:43:37:75:b6:c5:50:43:19:
         67:d3:72:84:cf:b0:08:fd:49:e0:78:27:96:e1:da:41:e0:43:
         c2:b8:d8:78:ef:67:1d:19:38:c1:96:dc:38:b5:7f:57:07:58:
         11:bb:b8:85:3e:dc:ea:6f:1e:48:5f:86:38:68:9a:6e:99:53:
         5d:fe:e2:0d:c3:0a:59:42:17:c3:c4:e7:10:0d:9b:51:95:88:
         95:40:6f:8f:cb:03:9d:d6:d0:53:cc:6d:5b:8a:8c:d1:d2:5e:
         1b:a7:8b:b2:5d:e9:c9:f3:36:c1:4f:01:0f:8a:a2:a6:ab:f2:
         bc:63:58:72:8a:a6:67:c8:85:12:e8:8a:00:7b:c1:71:a8:a6:
         73:cb:53:80:50:e8:88:86:19:8d:e0:1a:6e:cc:8f:4a:af:bb:
         35:19:62:11:68:d0:19:bc:37:1a:3c:03:53:4a:02:35:66:7a:
         1a:a5:8e:1b:18:07:02:07:19:56:2c:e3:07:a6:e4:63:a7:4a:
         02:aa:77:89:2b:8e:99:bb:2d:54:2b:b4:f9:33:05:ec:0b:54:
         28:55:27:06:62:e4:a6:01:2b:14:3f:39:83:f4:9d:51:f6:f2:
         b9:01:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----