Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.mft
File:                     NtAOt1th3SwEDMIAoCPjddEumvQ.mft (raw, json)
Hash identifier:          Ve2ozKvb9vGwGr45iY22BDU/GXy5/+S8kQPWnnMVv98=
Subject key identifier:   E0:D3:BC:2C:25:22:D7:79:27:2E:9A:72:CB:A6:49:2E:02:27:40:F5
Authority key identifier: 36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
Certificate issuer:       /CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Certificate serial:       01870A795D0C83CBBE51101A482A0EBF9D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.mft
Manifest number:          05BB
Signing time:             Wed 22 Mar 2023 17:58:58 +0000
Manifest this update:     Wed 22 Mar 2023 17:58:58 +0000
Manifest next update:     Thu 23 Mar 2023 17:58:58 +0000
Files and hashes:         1: NtAOt1th3SwEDMIAoCPjddEumvQ.crl (hash: wAkiQ+8gbYlV28rqs6ld+jBsV0dzEWdWMdyjq6qPRWo=)
                          2: nnCtaU-IlsvejRD165i2Z_v8VgM.roa (hash: QLR08CyC5LM0rXmk2AdRWKpEcBxzVRswr2e3KTmsSX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0a:79:5d:0c:83:cb:be:51:10:1a:48:2a:0e:bf:9d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
        Validity
            Not Before: Mar 22 17:58:58 2023 GMT
            Not After : Mar 23 17:58:58 2023 GMT
        Subject: CN=e0d3bc2c2522d779272e9a72cba6492e022740f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:5f:39:b3:64:6a:ca:ab:3c:91:0c:a1:15:
                    cc:18:17:e1:fa:18:ac:5a:4d:91:29:c9:08:6b:b9:
                    c1:e3:40:b7:ce:3e:8b:c8:ec:2e:49:f0:6d:4e:b1:
                    49:9b:9f:b4:65:0b:cb:37:82:c2:fb:d9:51:74:30:
                    64:ff:3b:d6:0a:09:90:20:a1:5f:5d:e6:1f:87:30:
                    85:84:15:ac:96:9e:68:3a:cb:b1:f6:16:96:65:a4:
                    2a:68:76:f3:f0:38:26:26:7f:7b:20:99:14:b0:bd:
                    97:8f:1c:25:b3:86:b7:e2:10:86:aa:6e:02:91:fb:
                    e3:ba:20:9c:c2:89:80:50:2e:d7:5a:a4:6c:60:1b:
                    25:15:26:38:43:3a:35:74:c2:76:f0:13:d5:df:83:
                    84:e6:78:50:a9:92:af:a2:9a:b0:df:6a:bc:84:c5:
                    43:4c:36:8d:9e:73:67:b4:c5:41:da:9b:70:9c:ae:
                    f5:5c:32:95:f1:49:a7:6c:6f:b4:2a:9c:22:47:c4:
                    0e:fa:da:0e:e1:d1:d0:16:d5:ef:53:6a:a1:35:81:
                    00:f2:94:8d:bb:1e:c3:d5:4b:26:57:9a:ae:28:58:
                    f4:d0:7c:0b:a4:c0:45:19:0a:4b:3b:15:0b:fe:8b:
                    2d:fb:47:2c:2d:d2:63:35:fa:47:b7:d2:6d:bd:1c:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D3:BC:2C:25:22:D7:79:27:2E:9A:72:CB:A6:49:2E:02:27:40:F5
            X509v3 Authority Key Identifier:
                keyid:36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1c:fb:78:9b:a1:f4:a3:c7:e9:ff:cb:30:73:6c:81:89:c1:
         88:6c:ae:b7:dd:96:74:ca:af:ea:27:1c:4e:b6:72:2a:cd:f7:
         ce:d7:e1:a2:1a:90:07:b0:bd:d2:2a:26:e5:58:99:14:5e:8d:
         11:78:53:a2:92:da:cb:9d:25:b2:81:6f:5a:e8:0c:7b:7a:5f:
         4e:18:fd:d6:0e:a4:d6:2b:8d:38:a9:2b:62:31:1b:20:7a:0c:
         df:41:ad:69:89:aa:c6:f3:60:26:4a:47:f2:3f:41:0f:fd:eb:
         86:69:77:03:85:fc:68:09:e2:de:20:9c:26:42:83:e7:07:ec:
         3e:ae:d5:97:44:d8:ae:1a:d7:bf:51:ed:e5:4f:49:0e:e9:1d:
         e5:ae:9b:7c:d5:4f:2f:be:87:7d:4f:d6:e3:ae:dc:12:1d:40:
         a3:fd:a9:63:37:a2:46:a5:b5:46:d4:93:a9:05:f7:26:4a:b2:
         8c:16:6c:e6:dd:6c:0e:b6:03:88:c6:97:76:83:63:db:42:98:
         77:7e:bd:66:2b:43:ee:9b:20:f0:f2:07:e2:3d:db:47:14:8f:
         da:1d:08:c9:65:94:0b:4a:6a:35:7d:60:ae:91:71:ee:17:ee:
         f5:83:21:25:42:40:61:0f:4a:b9:83:1b:ae:dd:eb:f6:c1:a2:
         fd:00:e8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----