Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3edaea-e5ce-4ccc-8d97-9342eb771b6b/1/lyRVuw14H6sDfLSJ-JnUedKQkbU.mft
File:                     lyRVuw14H6sDfLSJ-JnUedKQkbU.mft (raw, json)
Hash identifier:          QGI5FmIH98XB8PApIKromwaQ1IWB/mN30AtBMAAQDE4=
Subject key identifier:   0C:15:B7:2C:8F:8A:C7:8E:93:61:B5:04:4F:2F:1F:A0:8B:E2:8A:53
Authority key identifier: 97:24:55:BB:0D:78:1F:AB:03:7C:B4:89:F8:99:D4:79:D2:90:91:B5
Certificate issuer:       /CN=972455bb0d781fab037cb489f899d479d29091b5
Certificate serial:       0185803F260495A1BF54470E9D27BF555859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lyRVuw14H6sDfLSJ-JnUedKQkbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/3edaea-e5ce-4ccc-8d97-9342eb771b6b/1/lyRVuw14H6sDfLSJ-JnUedKQkbU.mft
Manifest number:          045F
Signing time:             Thu 05 Jan 2023 04:45:00 +0000
Manifest this update:     Thu 05 Jan 2023 04:45:00 +0000
Manifest next update:     Fri 06 Jan 2023 04:45:00 +0000
Files and hashes:         1: lyRVuw14H6sDfLSJ-JnUedKQkbU.crl (hash: SR0meHc804fe1cD3td3yjlwFagtFK6HGFyawGXF6sco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:80:3f:26:04:95:a1:bf:54:47:0e:9d:27:bf:55:58:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972455bb0d781fab037cb489f899d479d29091b5
        Validity
            Not Before: Jan  5 04:45:00 2023 GMT
            Not After : Jan  6 04:45:00 2023 GMT
        Subject: CN=0c15b72c8f8ac78e9361b5044f2f1fa08be28a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:ac:37:61:ad:e8:a1:23:e2:9e:9c:9c:4f:
                    b9:b4:96:34:fb:34:b0:11:d9:64:7b:23:3c:24:b6:
                    9c:5f:47:b8:7b:e4:66:09:f7:52:02:22:26:89:86:
                    ba:8d:e0:1d:59:6c:39:75:b2:a0:18:90:ca:5d:d3:
                    75:cb:6a:79:bc:3f:5e:67:21:45:7d:31:15:28:35:
                    92:8d:2c:f3:20:38:67:85:0c:ec:65:8a:4d:8b:82:
                    01:70:fc:bf:9d:7d:f2:1c:99:3f:1e:d1:d0:0f:c3:
                    27:db:41:c4:89:08:d9:d4:68:34:98:19:a8:26:c3:
                    aa:a1:ef:cc:4b:41:5a:57:32:be:96:cd:5c:f6:2b:
                    40:f6:d7:93:ad:b5:88:d2:71:f5:eb:d1:25:58:93:
                    2a:73:bf:a0:28:9b:d2:54:a2:a4:e4:43:6c:76:b0:
                    34:63:e8:3c:c7:82:18:f6:74:43:c2:7e:85:20:fb:
                    17:40:05:d3:1c:a8:ff:11:9a:c8:72:fd:9f:be:c6:
                    06:15:2c:8a:4a:96:b3:37:34:15:64:41:0e:61:c3:
                    47:4f:ab:f7:ba:63:38:7d:c2:96:53:02:f2:f5:a4:
                    a1:0f:d6:59:7f:58:e3:c6:f5:41:46:3c:14:b3:7f:
                    f0:cb:6a:fc:0a:39:87:fd:bd:da:39:71:d7:ec:15:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:15:B7:2C:8F:8A:C7:8E:93:61:B5:04:4F:2F:1F:A0:8B:E2:8A:53
            X509v3 Authority Key Identifier:
                keyid:97:24:55:BB:0D:78:1F:AB:03:7C:B4:89:F8:99:D4:79:D2:90:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyRVuw14H6sDfLSJ-JnUedKQkbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3edaea-e5ce-4ccc-8d97-9342eb771b6b/1/lyRVuw14H6sDfLSJ-JnUedKQkbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3edaea-e5ce-4ccc-8d97-9342eb771b6b/1/lyRVuw14H6sDfLSJ-JnUedKQkbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ab:5a:49:08:91:81:af:d7:ed:82:25:a7:3e:71:b2:af:8d:
         e0:b7:df:34:25:be:22:e7:93:e9:92:c0:be:a7:31:dc:af:95:
         f9:9d:1b:25:7c:66:9d:33:cc:d3:8f:56:41:1b:e1:6f:75:b6:
         10:29:44:60:eb:cd:1e:73:b1:51:7f:ba:f1:b3:d4:be:c1:c3:
         62:ee:96:3f:b7:27:85:32:68:a1:9b:e6:b1:d0:f5:f8:38:b7:
         a3:10:ba:5a:94:60:8d:9e:76:18:14:f5:24:c4:4e:98:bd:1d:
         7a:56:4c:a2:df:5f:02:9d:17:18:f0:0f:b5:78:0c:d3:a4:e4:
         68:85:bb:80:0b:45:22:fb:ea:c8:d9:a9:1e:57:b0:01:ad:ec:
         a7:1d:6d:a9:09:8f:f7:ca:9d:2f:20:55:00:76:f5:32:71:57:
         0c:b0:b0:5d:e7:a2:1a:fe:6a:41:fe:78:c2:06:8a:b2:25:20:
         ee:dc:95:7c:10:72:9a:a3:43:54:6b:7c:36:a8:7e:46:d8:70:
         25:92:97:6f:1a:d7:6d:65:eb:9a:e2:cb:04:27:b7:27:53:46:
         57:5c:a8:a6:ab:55:ab:a0:0b:7c:e0:67:42:3e:05:14:29:75:
         34:44:bd:28:df:2c:6f:13:41:46:e5:f2:29:52:5a:21:80:18:
         9b:62:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----