Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.mft
File:                     zwtOQgEqslYSSLwY8EQsIAfIyqI.mft (raw, json)
Hash identifier:          5Yg+QwlbJZgOpuhXL3/aUUf1WxR9/u0EqogmNmcKk9U=
Subject key identifier:   C5:B0:EB:6A:B3:BF:C6:25:9B:71:B5:C2:3E:EA:2F:92:F7:28:3E:AB
Authority key identifier: CF:0B:4E:42:01:2A:B2:56:12:48:BC:18:F0:44:2C:20:07:C8:CA:A2
Certificate issuer:       /CN=cf0b4e42012ab2561248bc18f0442c2007c8caa2
Certificate serial:       0188B87C932E3B6B95E12AAB7750A0ACD341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwtOQgEqslYSSLwY8EQsIAfIyqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.mft
Manifest number:          02AD
Signing time:             Wed 14 Jun 2023 05:59:11 +0000
Manifest this update:     Wed 14 Jun 2023 05:59:11 +0000
Manifest next update:     Thu 15 Jun 2023 05:59:11 +0000
Files and hashes:         1: rVdZo4dTzsfhpQ6QNxn9MdXihNg.roa (hash: IdR2LGNSltiWZjT1s8s2sf9Y0pygwqob9p+fX22nvTU=)
                          2: zwtOQgEqslYSSLwY8EQsIAfIyqI.crl (hash: gxcIXEbjtO7YGb69dp4F4A6KB47c2Z8zNjPZXEDG7qA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b8:7c:93:2e:3b:6b:95:e1:2a:ab:77:50:a0:ac:d3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0b4e42012ab2561248bc18f0442c2007c8caa2
        Validity
            Not Before: Jun 14 05:59:11 2023 GMT
            Not After : Jun 15 05:59:11 2023 GMT
        Subject: CN=c5b0eb6ab3bfc6259b71b5c23eea2f92f7283eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:fc:7a:c6:1f:35:6f:35:cf:10:30:3c:9d:
                    97:3f:e7:19:21:8f:9a:f9:a4:86:96:e4:9f:71:de:
                    3e:95:ce:a4:11:c8:42:37:9e:8c:3c:18:a9:6d:e7:
                    72:7b:a0:ea:84:5f:0a:32:94:89:59:94:3b:ba:9b:
                    87:5d:e7:a2:bd:5d:8a:68:b4:e5:02:48:7b:f4:0b:
                    8b:8f:1d:f3:01:74:d4:72:17:ef:a4:02:57:30:b5:
                    45:c2:79:98:9d:13:26:f7:42:4f:4c:4b:1b:c0:7d:
                    ff:54:a7:b3:cb:bd:7e:6f:71:b1:e7:80:40:05:9c:
                    40:c7:fd:ed:b3:06:22:7b:df:1b:90:d8:36:92:91:
                    f7:fd:c0:0f:d2:be:8f:d9:5e:00:1f:63:cf:c3:5a:
                    1f:9a:08:49:23:f1:0d:86:8b:9c:15:24:ba:2f:77:
                    9f:bf:0f:a9:d2:0c:11:72:8c:6e:f2:d1:ed:9e:47:
                    e1:e8:76:ff:c3:79:d1:37:ca:7e:35:32:02:b9:36:
                    1a:18:ec:b9:bd:48:43:ee:d7:9a:ee:01:8b:ec:8b:
                    40:08:04:7b:7c:41:06:16:d7:2a:ff:1c:f7:0e:35:
                    0f:55:38:28:3b:96:f8:86:2d:e8:fb:92:41:33:8b:
                    cb:1b:1b:b1:28:ca:67:7c:5a:b3:55:38:b0:ee:04:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B0:EB:6A:B3:BF:C6:25:9B:71:B5:C2:3E:EA:2F:92:F7:28:3E:AB
            X509v3 Authority Key Identifier:
                keyid:CF:0B:4E:42:01:2A:B2:56:12:48:BC:18:F0:44:2C:20:07:C8:CA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwtOQgEqslYSSLwY8EQsIAfIyqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:65:ec:ec:d0:3d:4a:1b:7b:e8:26:49:43:4c:27:8a:08:
         e4:58:9c:61:d0:2c:ac:5e:4b:e5:b8:4f:01:c6:fb:76:87:58:
         65:81:43:b9:08:31:02:e8:9e:75:09:cc:93:f1:76:90:2b:04:
         f1:7f:0f:ef:6b:c2:c8:30:b0:cd:2a:ad:98:7b:db:7c:f2:8a:
         1e:f0:04:b9:65:30:74:ab:b6:21:b9:7f:89:5e:64:d9:fb:6b:
         c8:0c:67:59:98:41:d3:52:3c:2a:52:d5:92:ac:fe:ed:e3:97:
         68:20:ab:0a:0a:76:eb:0e:d4:7e:be:f8:46:9b:b3:2b:ba:e8:
         6a:96:13:b1:0e:ac:52:bc:ae:d9:7d:52:89:2f:f0:cc:3d:72:
         c6:44:e7:2a:3e:b1:a2:55:f3:5c:b1:3c:90:cd:23:13:8c:f9:
         fd:44:f0:ba:96:3c:47:42:08:f9:e1:d3:7d:74:83:3a:b2:01:
         76:48:c9:b4:dc:ed:6c:1e:17:40:c8:13:87:98:cd:e8:2f:7c:
         0a:de:83:a8:e5:6e:f8:39:79:4d:6b:b3:f7:12:ea:e2:c8:c6:
         c8:1b:7b:81:da:b2:a4:e6:f3:f6:74:1c:72:c8:4f:5d:4a:5e:
         cb:1f:4d:ae:ef:1c:61:a8:0a:eb:6f:00:85:57:05:6b:5e:1f:
         97:49:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----