Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft
File:                     YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft (raw, json)
Hash identifier:          pL1RsXuDlYmIojABdRAhwd1pT5/7o2v1O5Aw0sFiS3c=
Subject key identifier:   2A:C9:94:4E:9B:A4:A3:B2:84:BF:63:60:24:AE:6E:11:80:A7:18:52
Authority key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Certificate issuer:       /CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Certificate serial:       018C8A8991B7F9645D9E5E4F4A5A56F9CB22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft
Manifest number:          0FEC
Signing time:             Thu 21 Dec 2023 04:02:00 +0000
Manifest this update:     Thu 21 Dec 2023 04:02:00 +0000
Manifest next update:     Fri 22 Dec 2023 04:02:00 +0000
Files and hashes:         1: 6o5ziaCqPYUgesFhqsVIRscUMq4.roa (hash: 8+18cMZ5zZgOEAvwOmImjlw/TciUDrapDRuXqtth95I=)
                          2: OzhygOuF9d4cEmcItZhlJcXhayg.roa (hash: Q/pwXUpHjGbPpE1zhLVZ95X1xE9OthCqX0RXfHgQP14=)
                          3: YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl (hash: lXWQ3uA9pP9ACQJtPXZtw55TNK7ymG+92J1CwsyILvY=)
                          4: iVMFJ6mZbVV-sc4fA6ffqIwKPT0.roa (hash: z43gPKGcxdxQrjef29vA0RCLn2AYtEtJDTBLsSmM/As=)
                          5: nnxcgt04kH1RTUfycq2nkpNB8Jo.roa (hash: lIQYviT6YcojHZlHYWjq82fcuKAH2SBa053jQZ7lWUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:89:91:b7:f9:64:5d:9e:5e:4f:4a:5a:56:f9:cb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
        Validity
            Not Before: Dec 21 04:02:00 2023 GMT
            Not After : Dec 22 04:02:00 2023 GMT
        Subject: CN=2ac9944e9ba4a3b284bf636024ae6e1180a71852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:3f:6c:d7:1f:5d:75:35:02:a9:67:3b:81:
                    c6:88:ee:6d:43:d0:7c:40:71:10:47:83:fe:5a:b3:
                    01:f8:ef:3f:63:2b:b9:c3:56:6d:f3:03:ba:a4:e9:
                    02:31:34:73:1a:eb:a4:e5:f3:4c:76:cd:28:a3:f0:
                    f9:03:b0:02:0b:ea:a6:51:20:0b:fe:50:ff:8a:87:
                    2a:0a:06:e6:b6:5b:d2:7b:47:36:6c:7f:08:f3:13:
                    a3:06:63:a6:39:62:96:d0:9f:a8:97:12:7e:e2:5c:
                    06:61:43:8c:6c:dd:20:80:f0:6a:c5:f5:57:aa:81:
                    02:1c:0c:ac:70:0b:b7:ec:60:fb:55:2d:bb:00:5e:
                    d7:20:b5:d9:d1:25:2b:9e:11:8a:a0:aa:84:6c:f1:
                    d6:b9:3f:c6:fd:b8:68:4a:82:bf:f5:f0:9d:b7:0d:
                    b7:2a:78:38:46:16:3a:b2:cd:a4:c3:29:36:df:af:
                    61:64:a7:0f:a9:65:ae:4a:28:62:d3:73:2d:81:96:
                    d4:b4:86:5f:fe:ac:4f:00:37:06:40:7b:63:f7:cf:
                    39:bb:1c:ce:5f:28:d6:a0:50:1c:65:4b:22:18:e9:
                    14:6e:5f:27:34:b2:08:45:3e:6a:df:1f:bc:bb:90:
                    28:f3:33:44:f0:e5:26:12:d2:30:a8:99:ba:bc:f0:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C9:94:4E:9B:A4:A3:B2:84:BF:63:60:24:AE:6E:11:80:A7:18:52
            X509v3 Authority Key Identifier:
                keyid:60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:95:5d:92:47:13:ef:8e:bd:c9:8d:75:22:73:ed:50:d4:8b:
         41:36:ab:44:c4:e4:8b:02:c3:3b:b6:e4:d5:16:a7:92:7e:c5:
         02:ef:83:5a:8b:4d:74:11:95:61:f8:50:e9:13:8a:91:6f:48:
         1b:ac:0d:37:93:0c:e7:af:b0:7e:65:82:81:a6:5a:26:58:bd:
         84:9e:1e:9c:00:fb:68:94:fe:2a:b3:15:c8:32:db:ce:e9:c3:
         8b:a6:43:fd:4b:4b:d4:60:2e:dd:ac:3d:da:60:26:4b:69:c7:
         77:6a:37:4d:66:c6:06:57:06:9b:0c:43:09:7e:7a:2c:90:db:
         7a:05:ad:4c:40:91:4b:3c:86:e2:73:6e:03:ad:7f:1c:f7:87:
         2e:0c:25:1c:2e:90:50:03:83:f5:12:c9:54:9c:d8:40:0e:1b:
         1c:88:5f:59:3b:5c:c1:50:78:4c:77:d4:a4:cb:20:79:8c:30:
         aa:65:dd:21:41:ec:68:e6:a7:ac:f2:5e:1d:93:7f:27:97:a2:
         4c:90:79:f7:b1:2b:94:3b:ae:0e:16:d7:26:72:d1:c8:e4:a8:
         49:74:20:a9:db:91:b1:a9:43:19:d0:52:b1:63:85:f0:d6:55:
         d7:3a:ff:e6:c4:dd:b0:07:1f:96:81:fe:10:ae:ce:94:a1:97:
         39:cf:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----