Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.mft
File:                     ph95pHePT1U9Sm-LSn3aZ_Y4bAk.mft (raw, json)
Hash identifier:          qHnmPmYe7Nr1WKn2MBYpelBo86Qcd2qjxoZhogVTuo4=
Subject key identifier:   EC:47:64:19:F7:63:99:97:92:6D:94:4F:94:F7:E4:01:C8:15:B2:4E
Authority key identifier: A6:1F:79:A4:77:8F:4F:55:3D:4A:6F:8B:4A:7D:DA:67:F6:38:6C:09
Certificate issuer:       /CN=a61f79a4778f4f553d4a6f8b4a7dda67f6386c09
Certificate serial:       018727766B3D8C2AF0ECF541FF619CDB83D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.mft
Manifest number:          0384
Signing time:             Tue 28 Mar 2023 09:04:44 +0000
Manifest this update:     Tue 28 Mar 2023 09:04:44 +0000
Manifest next update:     Wed 29 Mar 2023 09:04:44 +0000
Files and hashes:         1: QXvTU8U0bwloXsFopg347oxpRdQ.roa (hash: frm7hBuemLZ1hXdr2cVf5V2C4kgdPWiL0ns834F2+xE=)
                          2: ph95pHePT1U9Sm-LSn3aZ_Y4bAk.crl (hash: 1wNCdisNteJb4jigp6vzcjWGwNdOHjKr0AJNsQkYKJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:27:76:6b:3d:8c:2a:f0:ec:f5:41:ff:61:9c:db:83:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61f79a4778f4f553d4a6f8b4a7dda67f6386c09
        Validity
            Not Before: Mar 28 09:04:44 2023 GMT
            Not After : Mar 29 09:04:44 2023 GMT
        Subject: CN=ec476419f7639997926d944f94f7e401c815b24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:70:4d:36:17:ea:c2:1d:64:cc:5e:5d:10:
                    ae:53:4b:c6:d8:d9:45:15:b2:25:05:3f:c9:4f:8e:
                    c2:24:7a:f3:ec:6a:c3:31:43:be:15:c2:98:97:93:
                    a2:8d:13:bb:89:d3:ac:21:4a:5b:0f:dd:b7:3a:3f:
                    d0:ec:85:48:40:d0:e7:bc:2d:a0:1b:01:f3:1c:5c:
                    34:ed:d1:a8:44:a5:a1:82:9a:0b:df:a5:a4:78:79:
                    cf:1b:98:57:73:5d:a8:b9:01:18:db:66:ab:b8:38:
                    7f:80:45:a4:7c:c8:79:90:37:24:5c:f0:cc:75:87:
                    33:43:12:52:b7:63:3f:d3:73:66:d2:10:b9:cf:d3:
                    93:2b:c2:e6:2a:37:89:bd:51:e1:32:ba:10:1b:9c:
                    bc:63:d9:3d:1f:5f:23:35:fc:e7:0f:04:23:43:a6:
                    63:18:95:f8:70:c6:d8:ce:f4:2c:a4:c8:38:bc:a8:
                    cd:31:8c:3c:6d:26:88:4c:59:e4:0e:dd:a6:c6:5b:
                    ef:18:33:f9:a6:fb:66:a0:50:52:47:ed:c4:bb:be:
                    16:0e:36:2c:48:d8:7e:17:59:57:92:b1:17:a2:9c:
                    c6:e7:a7:5e:f8:6d:9c:d3:47:1d:38:67:fa:d3:2b:
                    28:ec:7d:26:e0:0e:25:c8:34:2e:83:f5:8e:00:58:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:64:19:F7:63:99:97:92:6D:94:4F:94:F7:E4:01:C8:15:B2:4E
            X509v3 Authority Key Identifier:
                keyid:A6:1F:79:A4:77:8F:4F:55:3D:4A:6F:8B:4A:7D:DA:67:F6:38:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f0:da:54:92:56:17:81:01:1f:cd:08:cc:6b:59:8c:32:07:
         1c:ba:cc:5c:da:0f:18:9a:1e:12:d8:a8:c3:11:fa:a8:be:04:
         c4:50:d1:be:3a:3c:a1:6a:d0:cf:15:b3:ff:53:1d:b0:09:d8:
         48:6b:c7:d2:20:c4:eb:2d:ef:89:a0:cc:c8:9a:63:86:ee:01:
         13:db:27:74:29:78:1e:b5:bd:a7:fa:91:53:da:b6:04:ff:44:
         54:ff:65:6a:c4:c1:d5:03:78:fd:97:73:87:ed:22:a0:ef:3f:
         04:71:08:c9:7d:10:92:4c:7b:fe:82:d8:ac:8a:5d:77:2b:55:
         cb:65:f6:e4:b1:c3:60:1b:eb:99:e9:89:5b:a6:5e:60:61:66:
         cd:65:f3:cb:55:49:db:f1:1e:1c:77:8c:fe:17:40:69:1a:89:
         45:b2:ee:c7:dd:c9:6e:9b:16:35:15:00:a4:8e:23:d2:d5:98:
         00:19:af:1b:c8:fd:57:d2:87:8d:9c:77:40:4a:d1:a8:a8:d7:
         b6:7b:42:85:8b:2e:86:c7:ea:13:21:e5:54:ac:a1:f9:62:69:
         19:af:58:f7:24:fa:a3:70:b9:2b:80:2e:f9:a5:91:f1:84:47:
         06:57:25:24:e9:a3:00:f7:52:a6:5e:b8:f4:10:99:63:62:85:
         a7:41:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----