Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/sF5qZBdFdXa5rFoGlEqf4qxGJ30.mft
File:                     sF5qZBdFdXa5rFoGlEqf4qxGJ30.mft (raw, json)
Hash identifier:          KmGsNMs6IWsAwWnrwNdAXbNCVJxwt5sq2T9FeZuS6vU=
Subject key identifier:   D0:95:77:D2:BA:21:42:28:58:27:71:E1:00:E4:2E:8F:9D:C0:61:71
Authority key identifier: B0:5E:6A:64:17:45:75:76:B9:AC:5A:06:94:4A:9F:E2:AC:46:27:7D
Certificate issuer:       /CN=b05e6a6417457576b9ac5a06944a9fe2ac46277d
Certificate serial:       0187A35EC337AB5785560A7624F05D1BA434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF5qZBdFdXa5rFoGlEqf4qxGJ30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/sF5qZBdFdXa5rFoGlEqf4qxGJ30.mft
Manifest number:          0B77
Signing time:             Fri 21 Apr 2023 10:31:49 +0000
Manifest this update:     Fri 21 Apr 2023 10:31:49 +0000
Manifest next update:     Sat 22 Apr 2023 10:31:49 +0000
Files and hashes:         1: q9reRbPM0BEgoDumAqK5MZsm-PU.roa (hash: 0SU9DLPYdOhLJFZNe8Ty6a2o+KB6rdSIcEwd+uBovvU=)
                          2: sF5qZBdFdXa5rFoGlEqf4qxGJ30.crl (hash: sPAZLZ3U5h1A7Z1YQQ9vWNcIZ6kHfowVahz4411L19U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a3:5e:c3:37:ab:57:85:56:0a:76:24:f0:5d:1b:a4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e6a6417457576b9ac5a06944a9fe2ac46277d
        Validity
            Not Before: Apr 21 10:31:49 2023 GMT
            Not After : Apr 22 10:31:49 2023 GMT
        Subject: CN=d09577d2ba214228582771e100e42e8f9dc06171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:a6:79:86:d5:49:87:9b:3a:f0:74:9f:de:
                    bf:7c:4c:be:98:15:8d:d6:78:89:7d:28:fd:25:72:
                    fa:f0:9a:a2:9e:89:f2:d2:8b:d2:28:c3:f9:b9:18:
                    ff:38:ca:38:f3:c8:d1:3d:12:1d:da:29:7a:de:67:
                    60:c8:f6:e2:e0:93:0e:4c:e3:5f:d3:8a:d9:7a:34:
                    05:5f:6e:b2:cc:c5:24:b8:fc:d4:5d:21:83:1c:79:
                    83:ef:11:7d:78:ae:bc:7d:74:87:4a:92:94:67:18:
                    0b:0f:63:de:18:38:d4:8e:24:6a:46:cb:41:e7:9a:
                    39:3a:ff:48:23:f0:43:83:01:42:8b:9a:d4:ab:73:
                    ee:7b:90:56:d0:ec:72:f6:b7:1d:fc:62:46:3e:b8:
                    c0:48:06:21:18:db:d1:ec:7e:a8:7c:74:c7:55:be:
                    65:49:36:0a:e4:55:b0:e5:60:47:d0:46:f3:f4:32:
                    a2:4e:84:3e:a6:8b:8f:20:ea:7a:c1:8d:f8:ed:cb:
                    e7:bd:07:5c:33:56:ce:b8:4b:ef:69:6d:96:3b:94:
                    6c:c6:3a:ad:28:ee:76:ff:2d:39:bf:ff:8d:ca:ba:
                    c3:bb:b5:d8:53:92:cc:ea:03:26:5d:80:8e:15:c6:
                    7f:62:80:93:dc:8a:db:c2:c8:08:7c:bd:90:64:58:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:95:77:D2:BA:21:42:28:58:27:71:E1:00:E4:2E:8F:9D:C0:61:71
            X509v3 Authority Key Identifier:
                keyid:B0:5E:6A:64:17:45:75:76:B9:AC:5A:06:94:4A:9F:E2:AC:46:27:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF5qZBdFdXa5rFoGlEqf4qxGJ30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/sF5qZBdFdXa5rFoGlEqf4qxGJ30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/965bf3-e86c-4078-8f92-0c9198be2669/1/sF5qZBdFdXa5rFoGlEqf4qxGJ30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:12:18:3f:02:52:bd:db:3d:6f:29:44:51:5a:b9:84:d0:
         2b:ec:dd:99:a2:ff:9a:24:7f:10:eb:56:30:ac:a3:f1:23:b2:
         e5:2c:26:d4:46:88:23:3f:87:5d:2f:4d:80:bb:b6:91:df:8d:
         6b:3f:90:78:9e:3c:2f:22:68:76:77:a7:a6:e8:f5:63:dc:35:
         83:9e:d9:cc:3c:8e:92:d9:e4:cf:cf:5b:cc:a1:94:1e:de:25:
         fa:79:8a:20:96:2b:90:e1:73:44:c3:8b:ea:00:07:df:21:59:
         56:b1:74:f1:3a:e3:f5:7b:4d:25:9e:a2:35:fb:0a:f0:1c:ae:
         87:b3:d8:fd:63:c8:41:e8:22:7d:b6:58:8e:27:19:3f:c9:df:
         2c:f9:55:b3:bd:17:fe:6f:04:cb:72:89:a3:22:02:4f:10:fb:
         c9:f4:eb:e4:47:e4:92:19:9d:00:1f:6f:c3:2a:44:e4:3e:61:
         af:24:69:22:5b:2f:48:e4:3e:d1:fa:00:24:7e:ad:c0:3e:9f:
         08:b7:5e:77:dd:02:08:55:48:3a:63:e1:b3:5b:9d:08:0a:b4:
         06:b8:b3:a7:f6:04:2e:6e:15:cf:7d:22:ea:1f:34:a5:ce:58:
         ef:ae:47:4d:6c:e8:09:c2:73:ef:10:2e:24:fc:cc:a3:e6:18:
         16:0f:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----