Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.mft
File:                     STJPPZXRubltD68N-S2vqEmtR5Y.mft (raw, json)
Hash identifier:          AcSqy+1EabFbR2qZahgvAfq5ED4mWo/nVH7jcpCpWhE=
Subject key identifier:   58:C6:F5:46:6B:99:B6:18:B8:A4:5B:12:E7:07:51:A2:2D:38:A6:F6
Authority key identifier: 49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
Certificate issuer:       /CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Certificate serial:       0186CE5C99657272B56D36F3DEE1643B750C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.mft
Manifest number:          0CC6
Signing time:             Sat 11 Mar 2023 01:50:20 +0000
Manifest this update:     Sat 11 Mar 2023 01:50:20 +0000
Manifest next update:     Sun 12 Mar 2023 01:50:20 +0000
Files and hashes:         1: KV2Yn1hbMLp6b5j4AfZL8bqnGa8.roa (hash: IHZ4aqCnlu2l1DSbgMgczEnbxbOnA1A6eoCJSYcVxWM=)
                          2: STJPPZXRubltD68N-S2vqEmtR5Y.crl (hash: fHbRuWgMllsKxEPeBxrABZvoa8QokVnIl8Ek38KBlwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ce:5c:99:65:72:72:b5:6d:36:f3:de:e1:64:3b:75:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
        Validity
            Not Before: Mar 11 01:50:20 2023 GMT
            Not After : Mar 12 01:50:20 2023 GMT
        Subject: CN=58c6f5466b99b618b8a45b12e70751a22d38a6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:d6:73:b6:a9:f1:5d:45:0c:a6:ec:b1:d0:
                    f1:14:2a:45:7c:e4:2b:2a:43:a5:42:de:21:04:f8:
                    ee:52:d6:d2:74:3e:67:bf:bb:73:9c:ff:56:dd:83:
                    2d:59:a5:39:f0:14:09:8b:2d:d5:b7:9b:4b:fd:ab:
                    5b:4f:7e:ee:71:49:b5:bd:3a:a7:c4:6b:22:6f:00:
                    dc:0e:b4:62:07:59:62:2c:82:94:33:1b:91:81:05:
                    a7:09:81:83:d4:d8:42:20:cf:b0:a1:34:e1:52:83:
                    a5:eb:a0:0b:76:d1:b3:75:c8:82:77:0f:46:68:63:
                    9c:3b:be:91:fa:f8:a8:c5:f0:10:de:c0:94:06:db:
                    01:5f:1d:9a:da:e0:8c:ee:55:5c:1a:66:5e:50:0f:
                    61:b1:82:b9:95:4a:29:a8:b1:39:bf:d9:da:6d:be:
                    66:fe:f2:a3:8f:2a:67:9c:7a:55:ce:4f:17:55:1c:
                    d5:b2:75:94:5d:9f:aa:32:c7:f8:cf:16:b3:e7:f7:
                    ab:31:41:2e:62:3a:b6:a7:46:f0:ec:d4:26:38:ef:
                    9f:aa:98:b6:38:90:96:ee:93:93:97:fc:f0:a3:92:
                    d2:2d:f1:b3:9b:8e:5f:50:d5:42:95:ad:32:f7:b7:
                    9c:90:9a:c4:0c:01:5d:0e:6a:da:9c:6a:1c:c2:80:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:F5:46:6B:99:B6:18:B8:A4:5B:12:E7:07:51:A2:2D:38:A6:F6
            X509v3 Authority Key Identifier:
                keyid:49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:77:79:55:07:66:78:ef:bf:f8:56:2c:57:a4:5a:b3:80:
         36:22:78:21:76:c2:c3:e3:3a:08:9e:42:5d:4a:13:95:81:f5:
         29:7f:cc:8d:5d:68:ac:4a:fc:96:65:79:89:fe:0c:bd:fb:04:
         81:03:91:21:3c:53:3e:01:21:ef:58:ca:57:83:ef:04:ed:25:
         ee:52:7b:ab:01:92:82:55:6e:3b:a1:79:84:c8:e9:24:f3:69:
         d4:52:ae:ab:65:1a:ea:22:e9:df:d8:71:5d:8c:e2:bc:3b:05:
         8a:8f:0f:fe:39:8a:f3:97:33:74:9c:82:a8:d1:71:a7:0b:cb:
         78:86:e3:40:83:b4:9c:00:ee:ba:84:ee:68:6a:c7:9b:b8:89:
         28:33:a7:9a:1f:c1:be:1c:c6:69:86:33:3a:a1:dc:1d:37:82:
         d7:5d:e0:b2:25:1d:36:80:c0:e7:df:f1:ff:0a:11:d7:36:1a:
         20:94:bb:2d:68:f7:2b:50:e5:35:8e:2c:fb:6c:f7:d9:ab:48:
         24:e7:52:4f:87:29:6d:1e:ae:b1:87:73:40:1a:a1:b2:bb:09:
         bc:f9:3d:f4:13:cb:51:db:73:65:08:9e:c3:a4:fa:fd:59:d6:
         32:a7:9b:f5:bf:4c:b7:13:20:2b:dd:25:19:d3:9b:0e:ff:de:
         c9:e7:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----