Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/aWeAx6YRG5-hybEeg7YJaBW5V6Q.mft
File:                     aWeAx6YRG5-hybEeg7YJaBW5V6Q.mft (raw, json)
Hash identifier:          EfHbM9UItR16WEppKDxezXnXldG0AGeO88wE6XXiH0g=
Subject key identifier:   2B:92:2F:DF:79:22:3C:52:1B:AF:98:5D:F4:59:03:38:34:14:D8:D8
Authority key identifier: 69:67:80:C7:A6:11:1B:9F:A1:C9:B1:1E:83:B6:09:68:15:B9:57:A4
Certificate issuer:       /CN=696780c7a6111b9fa1c9b11e83b6096815b957a4
Certificate serial:       018BD124B60F30D8327E7F4EAD4AD9DAFC65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWeAx6YRG5-hybEeg7YJaBW5V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/aWeAx6YRG5-hybEeg7YJaBW5V6Q.mft
Manifest number:          0DF1
Signing time:             Wed 15 Nov 2023 04:02:05 +0000
Manifest this update:     Wed 15 Nov 2023 04:02:05 +0000
Manifest next update:     Thu 16 Nov 2023 04:02:05 +0000
Files and hashes:         1: 81s5U2W3VjMlwzgJYg74p9C-Bfs.roa (hash: Ctpe7cbMgL6v4VvCVz/MKuwTdONMfDqCZIozvTwmeNg=)
                          2: aWeAx6YRG5-hybEeg7YJaBW5V6Q.crl (hash: Aoq1Z70XCtel/vQ2zwhMsKpPR/0IrKF7SUeoH+3lKW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d1:24:b6:0f:30:d8:32:7e:7f:4e:ad:4a:d9:da:fc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696780c7a6111b9fa1c9b11e83b6096815b957a4
        Validity
            Not Before: Nov 15 04:02:05 2023 GMT
            Not After : Nov 16 04:02:05 2023 GMT
        Subject: CN=2b922fdf79223c521baf985df45903383414d8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ed:42:ff:e8:44:84:ce:6a:0d:99:4a:de:0d:
                    7a:8d:90:07:d5:fb:c4:5d:2f:31:df:0f:75:10:69:
                    17:6c:5f:66:e5:ad:fd:96:7d:87:c9:fd:18:69:23:
                    bb:12:c0:b0:80:ed:77:62:cf:c4:0f:ba:2f:28:e9:
                    bc:67:95:0c:00:dd:78:5d:2a:d7:79:90:04:45:0c:
                    9c:57:cd:9e:a7:d6:ac:f1:3e:4f:af:68:8c:23:93:
                    b8:ee:24:15:0c:a5:27:02:08:da:ff:dc:38:da:24:
                    70:e3:84:47:73:ea:5d:55:53:32:1d:cb:e4:5b:a7:
                    e0:75:af:f5:cb:d5:76:be:2d:29:eb:b9:1e:2e:4b:
                    c6:af:81:98:ab:ae:ab:38:e0:1b:a6:ea:9d:da:a4:
                    23:ef:10:37:96:f9:0f:65:3e:4f:74:9c:26:f8:61:
                    9d:8b:f7:32:4e:5c:37:ef:47:c6:e1:81:8b:3b:35:
                    ae:f1:11:8a:53:e7:d0:7b:95:fd:b2:50:cd:e5:f4:
                    c3:ac:a9:a1:d6:1e:ab:71:8f:ff:bf:6c:b4:9a:90:
                    fc:6b:74:6c:59:ea:d8:64:c1:9f:b4:bd:cf:b5:c6:
                    77:5e:d3:b3:3e:3a:0e:a8:8d:b8:8e:42:cf:81:1b:
                    ad:fa:9a:9b:d5:90:c8:bf:bb:45:e5:d3:6c:93:89:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:92:2F:DF:79:22:3C:52:1B:AF:98:5D:F4:59:03:38:34:14:D8:D8
            X509v3 Authority Key Identifier:
                keyid:69:67:80:C7:A6:11:1B:9F:A1:C9:B1:1E:83:B6:09:68:15:B9:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWeAx6YRG5-hybEeg7YJaBW5V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/aWeAx6YRG5-hybEeg7YJaBW5V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/aWeAx6YRG5-hybEeg7YJaBW5V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:a8:45:c9:ca:0d:4e:38:1d:dd:8c:28:08:f1:19:c7:1e:
         e5:49:3e:b6:47:77:ff:ce:cf:5a:85:4a:e2:e9:ff:e8:86:20:
         ff:22:f0:98:f5:57:23:e5:7e:86:b0:f1:73:29:78:0a:46:7f:
         35:9a:55:8e:18:73:63:d8:8a:49:df:e4:f9:9c:2f:24:fa:91:
         e7:fc:3f:85:45:1d:5e:77:96:56:83:62:f2:5a:34:2b:3a:28:
         06:72:fb:9b:3f:df:51:3b:7e:91:c3:a0:b2:99:7a:c4:d4:b4:
         3a:12:28:37:e6:4b:fe:98:c5:f4:05:e9:8c:b7:b5:21:4d:1f:
         9f:a0:c6:2b:8d:a1:f3:18:a6:64:6e:a9:86:34:19:c7:4e:08:
         6a:d3:a8:86:fd:26:63:35:34:f5:bf:a2:22:46:65:13:ef:bf:
         40:17:12:10:5a:44:29:f3:ce:23:ee:0c:58:35:22:5c:b7:7b:
         1a:f9:5c:20:9a:0c:ba:eb:1f:a5:c7:83:8e:73:2d:3d:44:26:
         ac:71:bf:33:89:f5:76:1a:e4:ef:d3:1a:50:ae:36:0f:99:d6:
         f6:12:78:53:ef:37:29:17:30:f4:1f:b5:04:ca:e9:17:a9:ab:
         87:88:bd:ce:33:c3:c4:bb:de:1b:0f:4d:bb:0d:21:fc:ec:26:
         b0:2e:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----