Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bb6001-402e-43b7-b794-c6150b8f2489/1/YZQp08RH5DAamkEUQKqaFk8Mukc.mft
File:                     YZQp08RH5DAamkEUQKqaFk8Mukc.mft (raw, json)
Hash identifier:          wAU+bZD0Lzh7/vNmS7klVvevrwT2n1pPIGbYDFDTzcs=
Subject key identifier:   73:61:E8:92:23:99:7C:8F:A6:7D:10:09:EB:65:2A:47:DB:3B:7D:33
Authority key identifier: 61:94:29:D3:C4:47:E4:30:1A:9A:41:14:40:AA:9A:16:4F:0C:BA:47
Certificate issuer:       /CN=619429d3c447e4301a9a411440aa9a164f0cba47
Certificate serial:       0188B9216A1ADD82E9CC653D8ED7EB5AF347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZQp08RH5DAamkEUQKqaFk8Mukc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/bb6001-402e-43b7-b794-c6150b8f2489/1/YZQp08RH5DAamkEUQKqaFk8Mukc.mft
Manifest number:          0DDE
Signing time:             Wed 14 Jun 2023 08:59:14 +0000
Manifest this update:     Wed 14 Jun 2023 08:59:14 +0000
Manifest next update:     Thu 15 Jun 2023 08:59:14 +0000
Files and hashes:         1: UJzI2acH31F1ALTqoeowuk0inp4.roa (hash: 2FCeTNSdU7CMfmlvFZty7KlsOCYNFIZEOYTzbcoZwEI=)
                          2: YZQp08RH5DAamkEUQKqaFk8Mukc.crl (hash: fY2YVL6otIxboZaBGVrmXOl+MRDVUM0qqPCD92Afb8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:21:6a:1a:dd:82:e9:cc:65:3d:8e:d7:eb:5a:f3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619429d3c447e4301a9a411440aa9a164f0cba47
        Validity
            Not Before: Jun 14 08:59:14 2023 GMT
            Not After : Jun 15 08:59:14 2023 GMT
        Subject: CN=7361e89223997c8fa67d1009eb652a47db3b7d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:14:17:a9:cf:7a:40:43:67:8f:93:95:27:
                    5d:a0:89:c4:a2:34:d9:ce:ac:9f:ce:c0:f2:18:7e:
                    f1:fe:9e:c8:10:74:2b:d1:72:df:36:8a:74:3b:03:
                    75:7a:2d:57:f2:e2:7a:d3:ba:28:15:6d:cd:e9:2f:
                    f1:12:28:44:a6:ae:31:3c:9e:b9:38:6c:d2:f6:b1:
                    08:e9:88:3f:23:21:4d:22:72:11:66:35:50:e7:8c:
                    11:74:7f:a1:38:2e:c8:be:ce:48:b0:78:a5:f2:a9:
                    55:3d:b9:47:af:65:d4:9a:6b:32:3f:f7:a2:a6:1b:
                    df:48:8d:da:df:4a:9f:e9:3b:d2:e8:cc:61:ed:c9:
                    d5:a8:30:82:f6:e0:a3:f0:75:a2:7d:48:7c:6d:b0:
                    02:7c:c6:ef:6a:db:e1:74:d3:7f:df:06:e7:85:85:
                    15:6a:07:b3:73:c0:f4:14:84:cb:f0:26:f1:19:e0:
                    0f:b6:bd:e2:aa:9c:28:04:63:1e:a6:1f:16:72:47:
                    45:82:33:21:f9:06:a8:60:9a:ef:15:e0:86:95:32:
                    eb:55:45:81:67:2d:d1:3b:61:2e:6f:fa:7b:c7:dd:
                    89:ec:ae:c3:3b:88:f2:ae:44:25:ef:5b:64:e3:fe:
                    37:87:99:4b:36:b9:6c:8e:56:29:b1:ce:b8:a7:1c:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:61:E8:92:23:99:7C:8F:A6:7D:10:09:EB:65:2A:47:DB:3B:7D:33
            X509v3 Authority Key Identifier:
                keyid:61:94:29:D3:C4:47:E4:30:1A:9A:41:14:40:AA:9A:16:4F:0C:BA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZQp08RH5DAamkEUQKqaFk8Mukc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bb6001-402e-43b7-b794-c6150b8f2489/1/YZQp08RH5DAamkEUQKqaFk8Mukc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bb6001-402e-43b7-b794-c6150b8f2489/1/YZQp08RH5DAamkEUQKqaFk8Mukc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:57:df:72:42:7b:28:23:23:a0:02:80:3e:bb:e0:1f:4c:84:
         1a:ac:b0:75:fb:20:39:5a:a5:15:3a:ef:88:0a:a7:2c:34:e0:
         ef:0c:a3:cf:d7:22:09:b7:5a:03:1b:c9:d4:c1:11:cd:b9:93:
         13:de:ef:80:09:62:56:8a:7d:cc:67:72:ee:8e:9e:03:8c:8b:
         3b:a5:df:e8:73:2a:3b:a1:32:60:4d:ff:6e:3b:08:59:ab:8b:
         f7:b3:70:bb:09:db:e6:74:61:cd:8e:3b:77:41:3f:2a:dc:bb:
         b3:b5:f4:63:e3:c4:77:cd:c5:4c:72:ff:97:63:8c:cb:b9:82:
         6c:64:99:92:7e:7c:52:1e:55:f0:6d:2a:30:3b:78:97:b7:c9:
         45:ad:e3:fe:28:c3:40:38:18:ba:56:70:01:ea:12:10:a4:18:
         b9:4e:75:5e:5e:32:2c:3d:1e:94:70:7e:59:37:ee:8f:16:18:
         bc:3b:84:ef:30:17:bf:80:45:a9:08:d0:19:a1:a4:c2:04:d6:
         3c:a3:61:49:cf:26:6c:37:8d:2b:d4:13:e3:07:af:1c:50:62:
         c5:26:d0:85:66:9a:32:65:72:d8:35:25:9e:49:27:bc:cb:a5:
         01:bd:43:ea:e9:cf:e9:da:1f:ce:6e:f6:ba:38:05:92:d3:58:
         55:5f:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----