Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.mft
File:                     MWHHvsHXHTSZITs7BVL-biUToyY.mft (raw, json)
Hash identifier:          rZJiayc+mA4Fv3SIPylZW8deuZTBICY31iV4WHxKdOA=
Subject key identifier:   2F:79:04:22:70:41:A4:F0:1A:F1:A8:89:4A:96:E4:21:1E:CB:54:08
Authority key identifier: 31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
Certificate issuer:       /CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Certificate serial:       018C8AF70E9604C03FB45A203F4F479348C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.mft
Manifest number:          064A
Signing time:             Thu 21 Dec 2023 06:01:35 +0000
Manifest this update:     Thu 21 Dec 2023 06:01:35 +0000
Manifest next update:     Fri 22 Dec 2023 06:01:35 +0000
Files and hashes:         1: 2nCLWPhVvhO_lULzLR6W0Rt-I_I.roa (hash: Ld8kFpWCwY7TeDy2EPzilh4/Rtl0848LmllX+Jz4Gds=)
                          2: J7QbNlrGkqmBPp4MAZ1qZNQ3RqE.roa (hash: hsGg9D6LosNiQVsj8T1+xyNSQeCCAMU635i12GKF/Ys=)
                          3: MWHHvsHXHTSZITs7BVL-biUToyY.crl (hash: 10yRdzMtjR/Wmyfz/JIlarsSiGNKMQw6wasPvjOB4GM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:f7:0e:96:04:c0:3f:b4:5a:20:3f:4f:47:93:48:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
        Validity
            Not Before: Dec 21 06:01:35 2023 GMT
            Not After : Dec 22 06:01:35 2023 GMT
        Subject: CN=2f7904227041a4f01af1a8894a96e4211ecb5408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:24:08:e2:60:b9:ce:78:4e:6c:c5:70:d1:
                    b3:00:4e:11:3b:01:40:e5:ba:cd:df:8a:df:38:e0:
                    d4:58:ec:d2:cf:37:27:ff:8f:4d:32:d1:8b:67:cd:
                    15:72:91:15:af:2c:2c:1e:a8:e7:06:0e:a3:26:9c:
                    09:0a:c9:e6:53:33:44:34:46:44:41:ff:e7:94:3c:
                    53:0f:df:57:b9:1d:ab:0c:96:15:97:bf:69:e7:85:
                    ef:5b:6e:98:39:b3:2b:54:fe:d7:22:a6:1b:e8:35:
                    1a:3e:f1:93:13:27:27:64:9c:2e:58:aa:8d:09:a2:
                    03:bf:73:09:a2:61:ac:c8:f0:29:4d:12:ce:37:0a:
                    41:5b:0e:a9:d3:12:8a:9e:f8:ff:c0:5c:f2:0e:12:
                    42:be:d2:88:5c:9a:46:50:74:d6:63:b3:37:bb:c7:
                    db:92:f4:df:2d:4c:64:b1:c5:2a:99:b9:d4:da:52:
                    99:8c:3f:87:2f:5e:06:85:49:81:e4:b8:93:a1:8e:
                    b9:1e:0f:4a:c1:36:ac:64:b9:3c:22:7f:81:65:51:
                    25:26:20:6d:26:b2:57:ad:05:0c:32:08:d4:4c:91:
                    68:d0:55:14:9c:20:0e:10:ba:93:70:51:fd:e3:2a:
                    5a:f5:ee:03:f5:af:ef:2d:04:7d:9f:17:6a:b9:c4:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:79:04:22:70:41:A4:F0:1A:F1:A8:89:4A:96:E4:21:1E:CB:54:08
            X509v3 Authority Key Identifier:
                keyid:31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:17:74:73:2b:da:3a:0a:04:85:60:0b:05:aa:6f:5d:2b:be:
         17:d5:a4:1d:9a:b4:53:1b:29:d9:7f:51:69:f9:e7:ce:04:dd:
         b8:7b:c0:25:c4:a5:c6:84:02:91:1e:cc:12:0f:97:e7:29:a7:
         14:76:be:88:b5:fe:30:11:50:01:e2:d5:45:b2:8a:ff:82:6d:
         52:b8:fe:3a:89:bd:4f:dd:5c:7b:35:69:d5:63:76:04:a9:be:
         5c:26:13:0c:72:7a:88:a7:c8:83:3a:d0:02:fc:27:a6:54:87:
         d9:49:18:c2:1b:57:64:64:bc:5b:30:93:de:3f:fa:a0:17:95:
         7e:79:b5:e9:84:18:d2:77:df:21:68:8a:ad:35:d8:7a:c3:48:
         f2:4d:d4:90:c4:a9:85:35:c6:a4:d5:23:95:cf:82:bf:5b:e2:
         30:6a:32:eb:04:3e:77:26:28:c6:99:d4:38:95:f1:ca:5b:cc:
         80:2b:c7:01:07:83:18:cf:18:31:c0:1a:e0:4b:43:fe:a0:68:
         c7:11:e2:1c:3e:b3:8b:8c:e4:98:a8:d4:7d:1d:ea:cb:bd:a4:
         82:30:aa:e1:c9:92:0f:fc:be:ac:31:da:99:0d:86:e4:ad:74:
         6a:f4:3a:7a:06:1e:11:d7:59:a0:cc:a8:ea:8a:36:44:21:f4:
         29:57:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----