Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a059e3-6b86-4150-81c4-656c45a1c119/1/_JAkEv97aX-MoMPqqcE3bYoV9KE.mft
File:                     _JAkEv97aX-MoMPqqcE3bYoV9KE.mft (raw, json)
Hash identifier:          VKm99nVJbQmGjwluNYVknm8JNRGO8ao+zbif5olsXBk=
Subject key identifier:   65:C6:11:70:AB:16:56:85:EF:7F:1A:85:F0:E7:09:45:02:52:7A:08
Authority key identifier: FC:90:24:12:FF:7B:69:7F:8C:A0:C3:EA:A9:C1:37:6D:8A:15:F4:A1
Certificate issuer:       /CN=fc902412ff7b697f8ca0c3eaa9c1376d8a15f4a1
Certificate serial:       01860616CC88EE1716B2196CAC2C916CEE5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JAkEv97aX-MoMPqqcE3bYoV9KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a059e3-6b86-4150-81c4-656c45a1c119/1/_JAkEv97aX-MoMPqqcE3bYoV9KE.mft
Manifest number:          0993
Signing time:             Tue 31 Jan 2023 04:30:02 +0000
Manifest this update:     Tue 31 Jan 2023 04:30:02 +0000
Manifest next update:     Wed 01 Feb 2023 04:30:02 +0000
Files and hashes:         1: _JAkEv97aX-MoMPqqcE3bYoV9KE.crl (hash: 02BYEhpkeO/aSkN1KzYRsmmS/jSeyNUBXj4QlJe7YzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:06:16:cc:88:ee:17:16:b2:19:6c:ac:2c:91:6c:ee:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc902412ff7b697f8ca0c3eaa9c1376d8a15f4a1
        Validity
            Not Before: Jan 31 04:30:02 2023 GMT
            Not After : Feb  1 04:30:02 2023 GMT
        Subject: CN=65c61170ab165685ef7f1a85f0e7094502527a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:2d:c0:c1:3f:c4:08:de:df:ce:df:97:49:
                    7c:86:75:4c:1d:9c:4d:4b:3c:e1:0f:89:83:c4:b9:
                    3b:32:e8:c6:11:d7:7f:e4:95:00:42:a9:10:57:49:
                    9d:a4:ed:d7:3d:2c:b1:73:ff:55:89:85:f9:10:aa:
                    1d:a2:c3:ef:dd:eb:41:32:a6:9b:10:68:3a:ff:22:
                    5a:d9:7d:47:e2:12:87:cf:49:ec:b0:53:01:76:90:
                    1b:04:3c:ce:8a:b7:b1:e5:b0:69:3b:19:41:4f:7c:
                    d1:b4:c4:49:ff:58:c7:ea:67:b2:86:87:0e:de:86:
                    c0:8c:54:7b:6b:e2:c2:1d:80:71:e8:ea:32:02:e2:
                    d3:f5:17:4a:04:0e:27:15:51:21:53:21:a5:8f:e8:
                    a1:57:ae:6c:0a:df:21:81:f8:5a:f1:bb:cf:fe:2b:
                    ce:1e:d7:6e:ab:df:45:92:14:a4:78:3c:54:ba:f1:
                    18:9a:ef:11:f9:75:b9:7a:3d:be:ed:da:5e:80:b7:
                    d1:1a:b9:cd:b1:f8:02:62:56:88:17:c5:fc:1b:e8:
                    12:5f:b8:30:d0:1a:17:8d:1b:90:28:23:e4:e7:4e:
                    b6:a6:db:74:64:ca:7f:a4:49:f8:47:e4:8e:e0:df:
                    fa:b5:ce:2f:11:40:95:a0:96:bb:00:9f:eb:75:22:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C6:11:70:AB:16:56:85:EF:7F:1A:85:F0:E7:09:45:02:52:7A:08
            X509v3 Authority Key Identifier:
                keyid:FC:90:24:12:FF:7B:69:7F:8C:A0:C3:EA:A9:C1:37:6D:8A:15:F4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JAkEv97aX-MoMPqqcE3bYoV9KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a059e3-6b86-4150-81c4-656c45a1c119/1/_JAkEv97aX-MoMPqqcE3bYoV9KE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a059e3-6b86-4150-81c4-656c45a1c119/1/_JAkEv97aX-MoMPqqcE3bYoV9KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:80:f4:53:c1:bd:51:d9:90:a7:98:8e:14:f8:c6:95:0c:70:
         89:f6:ca:7a:ed:d8:1d:e7:1b:87:e6:0f:01:e1:92:ef:6a:71:
         8f:95:67:64:84:fb:f1:b8:f5:4d:bd:b2:60:89:b4:0e:57:3c:
         e9:d7:dc:cc:05:1f:cc:26:e0:6c:42:b9:92:89:e8:a1:0b:18:
         2b:4e:14:27:9d:2f:2c:5d:47:38:6d:ec:74:57:c2:03:e4:34:
         00:eb:ae:83:9f:31:67:78:6a:ef:78:fc:26:fa:21:0f:18:8d:
         77:56:0f:dc:87:ef:39:83:87:f9:58:d9:8a:86:9c:c2:89:fd:
         05:30:cd:53:bb:89:b9:f2:13:b6:55:3d:6d:8a:b3:03:8b:a1:
         b8:cc:01:a5:88:f1:0c:aa:5b:41:65:2b:10:db:a8:fc:e6:3f:
         cc:2b:3c:a7:56:bb:71:b3:47:e4:7d:85:fa:b4:8e:7c:24:dc:
         a3:b2:47:33:fb:3e:60:00:93:b1:13:b9:5a:d7:81:28:05:34:
         68:7f:26:22:54:37:e0:5a:e6:ff:f4:a4:26:27:7c:65:37:6e:
         02:93:a8:06:3e:82:ab:28:46:94:0a:1a:20:1c:4a:84:d0:34:
         43:9e:56:47:56:6c:55:d2:4d:86:47:11:b2:13:df:26:5c:f0:
         0a:5a:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----