Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/Il57qRBnns4omkZ4qt_w-dLB0aE.mft
File:                     Il57qRBnns4omkZ4qt_w-dLB0aE.mft (raw, json)
Hash identifier:          8gy/Nt8zR7CyN2hgcVfaxrRqH6dNKV883N0pZo5DirI=
Subject key identifier:   5D:A6:AB:9A:35:78:38:20:2B:82:10:6B:15:4E:E0:D2:7F:6A:7E:91
Authority key identifier: 22:5E:7B:A9:10:67:9E:CE:28:9A:46:78:AA:DF:F0:F9:D2:C1:D1:A1
Certificate issuer:       /CN=225e7ba910679ece289a4678aadff0f9d2c1d1a1
Certificate serial:       018CB272B4BB71B668ED6BF16CD05640BB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Il57qRBnns4omkZ4qt_w-dLB0aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/Il57qRBnns4omkZ4qt_w-dLB0aE.mft
Manifest number:          1003
Signing time:             Thu 28 Dec 2023 22:01:50 +0000
Manifest this update:     Thu 28 Dec 2023 22:01:50 +0000
Manifest next update:     Fri 29 Dec 2023 22:01:50 +0000
Files and hashes:         1: C0XMVJJGRTk7SAASkHfgBq8-SSI.roa (hash: /yu2aBLAXLq4HVp8Wr5AM2yOwoeZfo8lS1ksVOcF21Q=)
                          2: Il57qRBnns4omkZ4qt_w-dLB0aE.crl (hash: w4/91FcmR9Dh9XmEZQRZ/oGQtlz/V+zKlO+Nr4H0Kt0=)
                          3: wQFvZR--zvnQ81FW2EU7vphGGDI.roa (hash: gtc63WsYQByYyWJW3lnHz/Jwyx5zHS+otOK4oRW/j2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b2:72:b4:bb:71:b6:68:ed:6b:f1:6c:d0:56:40:bb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225e7ba910679ece289a4678aadff0f9d2c1d1a1
        Validity
            Not Before: Dec 28 22:01:50 2023 GMT
            Not After : Dec 29 22:01:50 2023 GMT
        Subject: CN=5da6ab9a357838202b82106b154ee0d27f6a7e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1b:53:0d:5e:ce:b4:90:c4:fa:d1:d8:56:42:
                    cb:a2:bd:9d:71:cc:5c:0d:c1:29:81:33:69:c5:ad:
                    42:17:99:ee:b3:ae:a6:3b:d4:e3:57:f4:31:54:db:
                    c9:58:73:26:35:0f:6c:4f:41:3f:61:68:99:5b:c0:
                    d0:20:ea:da:3e:6b:95:26:51:87:74:0e:27:5f:7c:
                    cf:e5:d1:89:e9:73:46:25:61:b7:5d:6b:ea:4f:b0:
                    9e:a0:9f:fd:fd:3a:61:a6:f4:86:63:7f:50:12:0a:
                    7c:1a:f2:db:8b:c3:a9:0f:f3:1a:b1:ff:2a:b2:a8:
                    2f:cf:f0:1f:31:9f:13:d2:30:60:22:1d:48:7d:ae:
                    50:55:c9:e5:d1:6b:7f:3b:e6:b5:19:c9:73:e9:da:
                    40:f9:f4:73:c4:58:22:d5:46:2c:1f:31:15:6e:c2:
                    07:a9:44:71:94:c8:a6:b8:80:88:48:49:c8:5a:f5:
                    43:6a:b2:a7:59:f7:44:fc:67:93:fb:29:d5:e1:3e:
                    c4:5a:76:67:6a:db:fe:7c:92:79:02:cf:1f:1b:55:
                    11:20:86:7a:6a:3f:c5:62:d8:d8:4f:4d:5c:71:8a:
                    cd:2a:2f:93:c2:09:ac:d2:b5:0e:03:88:d6:aa:d5:
                    85:64:cb:16:d9:b0:50:0b:c0:0f:5d:23:3b:38:41:
                    e4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:AB:9A:35:78:38:20:2B:82:10:6B:15:4E:E0:D2:7F:6A:7E:91
            X509v3 Authority Key Identifier:
                keyid:22:5E:7B:A9:10:67:9E:CE:28:9A:46:78:AA:DF:F0:F9:D2:C1:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Il57qRBnns4omkZ4qt_w-dLB0aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/Il57qRBnns4omkZ4qt_w-dLB0aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/Il57qRBnns4omkZ4qt_w-dLB0aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a9:8e:63:e4:dc:f6:e4:fb:a1:76:74:16:8f:86:84:df:07:
         28:b1:76:92:e0:7d:aa:4b:08:8f:b0:62:65:01:87:a2:b0:11:
         3e:77:1f:b3:57:6c:07:72:8f:f4:b6:b1:86:e7:68:a8:7a:d4:
         a0:d4:1d:33:c9:ff:ec:0d:7e:73:20:c1:13:9a:c5:99:c4:06:
         dd:35:c6:2b:01:59:a9:ab:87:5b:7c:55:b0:e6:01:76:77:71:
         c9:a0:a4:06:d5:95:81:25:e3:02:58:ac:76:8f:74:22:db:b5:
         7d:bd:d5:c2:6c:41:8d:74:e5:b4:75:94:97:f2:d9:6a:16:8f:
         2b:66:b4:86:c3:c5:cc:6f:1e:1c:3e:bf:1a:f7:86:cc:28:0b:
         28:aa:78:19:9c:fb:1b:25:2e:89:27:be:90:ce:5b:77:26:57:
         a7:5f:5a:59:fe:48:9b:93:42:da:58:9f:24:dd:29:02:27:5f:
         25:1f:d4:db:06:c4:85:55:0e:b0:6e:44:37:96:20:e2:bf:eb:
         4d:95:02:9d:33:39:1a:83:ad:09:d5:45:d8:30:67:29:81:03:
         fb:ec:e5:a9:d8:91:02:a7:96:01:77:87:22:f4:d1:4e:84:06:
         ee:08:93:15:24:1a:f0:94:c8:9d:cf:19:10:02:c4:1c:fd:7f:
         2c:31:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----