Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
File:                     c9BuvTmqjedLVlMsnatAaU-hyOg.mft (raw, json)
Hash identifier:          hx1vHN78+Q9C6aOHcNRQgIPKYM3R/puUMIR+e4sZprs=
Subject key identifier:   76:84:09:5D:B6:85:5C:4E:4E:BD:75:07:70:1C:A9:CE:91:9A:7E:EF
Authority key identifier: 73:D0:6E:BD:39:AA:8D:E7:4B:56:53:2C:9D:AB:40:69:4F:A1:C8:E8
Certificate issuer:       /CN=73d06ebd39aa8de74b56532c9dab40694fa1c8e8
Certificate serial:       0186FBFD42D31C5008E1018ACC6D31D3A3BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9BuvTmqjedLVlMsnatAaU-hyOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
Manifest number:          0866
Signing time:             Sun 19 Mar 2023 22:28:44 +0000
Manifest this update:     Sun 19 Mar 2023 22:28:44 +0000
Manifest next update:     Mon 20 Mar 2023 22:28:44 +0000
Files and hashes:         1: M8p_6JZpABWFBYPIG9TkxwUk-F0.roa (hash: Em4WqgkYMPpyx99yhclGM/2iAR9BnHKeY7Pd6F4//3o=)
                          2: c9BuvTmqjedLVlMsnatAaU-hyOg.crl (hash: u6bQ4iv3mEVoQBZsStB1d2LBBUDrfZtwTUHkeNgwTuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fb:fd:42:d3:1c:50:08:e1:01:8a:cc:6d:31:d3:a3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d06ebd39aa8de74b56532c9dab40694fa1c8e8
        Validity
            Not Before: Mar 19 22:28:44 2023 GMT
            Not After : Mar 20 22:28:44 2023 GMT
        Subject: CN=7684095db6855c4e4ebd7507701ca9ce919a7eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:86:cd:4b:ae:30:92:60:6d:de:44:60:8e:
                    87:36:df:76:a0:86:20:4a:3a:4a:96:6d:6e:7c:a1:
                    a4:93:3b:2c:e1:f4:3e:10:16:21:ad:22:e5:8f:f3:
                    59:9b:81:b5:c2:89:69:08:79:76:59:98:f5:d4:e5:
                    58:8f:9b:cc:31:db:9b:ef:ee:ed:e5:b4:cf:10:9d:
                    35:c9:6f:ab:f3:8f:b6:f2:17:75:8f:94:a6:36:a9:
                    1d:37:7e:70:9b:c7:8a:e4:88:0e:b4:ac:f1:74:99:
                    f6:46:db:94:75:17:dc:ee:03:d2:3a:01:0d:dd:db:
                    cb:47:4f:fa:13:1b:3b:44:b9:28:d1:16:be:14:2c:
                    95:f6:9f:73:dc:b9:29:6f:10:2f:a2:d2:eb:5c:85:
                    b5:ea:70:5c:2d:d5:0a:41:23:6a:c8:8c:ef:e2:08:
                    57:41:a6:52:ae:fc:e2:57:ea:58:0a:3f:67:c3:cc:
                    f3:d4:2d:f4:96:31:5f:dc:85:05:9a:56:fe:09:38:
                    c7:f3:dd:01:67:f8:db:83:7b:33:7f:7a:6e:83:51:
                    6d:e6:88:74:58:a9:1c:e4:2e:c5:9a:58:6e:fa:36:
                    df:60:5f:14:a5:67:d4:ac:c6:7e:f5:40:98:b9:3e:
                    b7:a0:52:80:83:f2:2a:40:8f:e5:ca:ac:2d:26:55:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:09:5D:B6:85:5C:4E:4E:BD:75:07:70:1C:A9:CE:91:9A:7E:EF
            X509v3 Authority Key Identifier:
                keyid:73:D0:6E:BD:39:AA:8D:E7:4B:56:53:2C:9D:AB:40:69:4F:A1:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9BuvTmqjedLVlMsnatAaU-hyOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1a:5b:ca:7e:db:5a:6f:2f:47:26:ba:75:8a:10:fa:f5:a1:
         c0:c8:7c:ac:27:7b:be:86:d3:f0:e0:0c:0b:ee:e2:61:02:f1:
         cc:8b:9e:03:fa:70:52:d5:5b:39:e5:c8:49:d8:7a:ba:dc:1f:
         ec:fa:13:7d:f9:7a:a1:88:b9:94:4c:4f:83:fc:d0:28:1c:df:
         9f:d4:ae:4f:27:41:bf:35:ad:e3:36:5b:12:c5:b2:ce:29:d8:
         50:29:aa:fb:58:1e:0f:bc:fd:94:28:85:6f:35:29:54:79:12:
         e3:ca:9e:60:2d:43:18:bd:2a:d8:05:36:d2:35:68:36:6a:84:
         a8:0c:51:04:78:16:fd:a0:14:bf:c6:8a:ac:48:67:1b:bc:4f:
         36:d0:68:7f:0d:f4:7a:de:91:e3:8b:73:ba:03:67:eb:59:72:
         0b:81:c1:09:34:58:cb:f2:5d:60:4e:fc:e2:4d:7e:86:80:80:
         11:0c:c2:40:15:62:46:d4:cc:f9:1b:56:43:36:0a:1f:a8:87:
         f0:1b:86:28:41:eb:a3:bb:7f:55:9c:72:28:e4:64:fd:bd:64:
         13:62:3b:22:79:ac:6b:9b:20:af:0b:85:23:d7:e3:df:9f:54:
         29:3c:54:37:8d:8d:80:fb:e1:7b:4c:7a:af:97:6b:06:70:71:
         35:67:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----