Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.mft
File:                     TykazyCa9D3Yg9Sgofa8ibuGo7U.mft (raw, json)
Hash identifier:          oXME6uiIAqri62hGGLdrY3Blj7cbQ0zUnQx/aJCA8ps=
Subject key identifier:   8C:19:FC:3D:77:55:A7:FD:79:7B:05:67:26:39:44:69:EB:9F:6D:86
Authority key identifier: 4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5
Certificate issuer:       /CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
Certificate serial:       01891F16208A68646062B89CEAC57779D9AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.mft
Manifest number:          072F
Signing time:             Tue 04 Jul 2023 04:08:11 +0000
Manifest this update:     Tue 04 Jul 2023 04:08:11 +0000
Manifest next update:     Wed 05 Jul 2023 04:08:11 +0000
Files and hashes:         1: FH0Gnqj2_e3HwqcRRxse7HwdUbI.roa (hash: LQSBRnFQ+zI72hl59RrqNIlWumNwjW4AlvE1AKeE5Sc=)
                          2: N4HlmtfUx4kZ-dVDTPzU17klXJw.roa (hash: 1jZp4NPxWELR4Wye3qbnWXGj+k2zjR8tKdIrOzD4lDE=)
                          3: TykazyCa9D3Yg9Sgofa8ibuGo7U.crl (hash: O4q2/0a/afpOyIpheJHsqQRJE4jQoZnJGKh171fnAyY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1f:16:20:8a:68:64:60:62:b8:9c:ea:c5:77:79:d9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
        Validity
            Not Before: Jul  4 04:08:11 2023 GMT
            Not After : Jul  5 04:08:11 2023 GMT
        Subject: CN=8c19fc3d7755a7fd797b056726394469eb9f6d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:f2:b1:e8:89:61:68:be:6e:ea:bb:79:c5:
                    6e:e2:d6:67:22:c9:43:63:fa:cd:56:38:13:6f:13:
                    f3:ab:9a:21:fa:45:87:d2:9c:86:84:86:78:48:e6:
                    b4:1a:57:f3:af:b4:02:5f:af:d5:06:5f:dd:ff:2d:
                    88:5d:42:b9:68:3d:0a:a3:5a:60:2e:fc:49:ef:3a:
                    30:cb:af:b8:fb:50:00:c3:f5:82:35:29:96:5a:89:
                    42:f9:a7:07:3a:34:25:4e:31:86:32:3a:da:69:de:
                    7c:ca:a1:50:86:3a:78:f3:3c:f3:d3:c6:f6:bf:34:
                    63:ba:ed:f5:52:38:06:7f:1a:9e:09:2b:d8:f6:38:
                    5f:19:bd:6c:f3:75:b6:1a:0b:77:03:5e:b7:fc:8a:
                    5f:05:41:b8:5f:5f:1f:fb:3b:61:51:6b:a4:13:c3:
                    3c:c3:7e:d7:29:5a:88:6d:93:d4:7c:91:f7:d6:17:
                    ce:c0:9f:13:4e:18:c9:2b:f0:78:0f:73:78:0d:82:
                    0b:38:90:37:3f:40:81:79:9d:ac:b8:d6:91:d7:86:
                    d4:5d:85:79:6f:6b:4d:f9:46:7d:9c:b2:ac:95:5a:
                    86:7f:64:ac:30:0e:e0:d4:9e:d5:b3:59:d9:9d:33:
                    27:da:2c:29:fc:27:13:c4:1d:db:d5:f3:4e:7f:a6:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:19:FC:3D:77:55:A7:FD:79:7B:05:67:26:39:44:69:EB:9F:6D:86
            X509v3 Authority Key Identifier:
                keyid:4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9e:2a:18:80:33:af:4c:04:0f:4c:43:3f:98:f5:d7:5e:f6:
         9f:57:c6:b1:c4:d7:0f:11:fd:f1:6d:df:54:c8:c7:3a:c1:1c:
         ab:42:dd:e2:14:54:cd:b6:96:aa:65:b7:bc:3c:cf:bb:bc:61:
         b6:71:3f:e5:5e:0a:73:78:48:b9:d7:ba:ef:87:99:19:08:00:
         6b:02:cb:50:43:e5:d9:3e:d3:4a:69:20:b5:51:bd:48:02:1d:
         6a:3f:c8:78:a9:75:ab:c8:63:c8:2b:81:28:79:74:a8:c0:16:
         90:15:47:c4:19:1a:79:8e:fa:5f:73:62:6f:cc:6c:45:fc:68:
         ab:a1:d0:8e:66:0f:23:41:2f:40:87:a1:d4:29:30:a1:3a:f5:
         49:41:25:d0:7c:bc:1d:17:96:cd:13:6c:32:4d:8b:f9:98:d1:
         50:68:4d:be:b6:6f:67:d6:44:ef:0f:46:1c:f5:e6:82:91:89:
         a1:f7:28:bc:cd:6a:e8:1d:eb:45:8c:49:e0:b2:83:5b:49:1d:
         e7:f4:c9:0e:53:45:f5:ee:80:11:96:4a:bc:2b:1d:73:20:18:
         55:99:0d:2b:32:a9:9a:ef:8d:dd:6c:91:27:74:bd:11:fb:57:
         7f:04:f5:e2:97:94:4a:c5:91:07:e1:d0:22:53:7c:90:12:2f:
         d1:d9:e4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----