Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/84913f-840b-489d-8c85-f89c033bf152/1/YC_y7_Ljdv5AkvweiNcA1wMFUis.mft
File:                     YC_y7_Ljdv5AkvweiNcA1wMFUis.mft (raw, json)
Hash identifier:          Obgx60LWDiVTsAW3yewPzR4FF8c52LP7a7WdcZoEiGk=
Subject key identifier:   F2:A9:0A:F6:B0:7B:E4:CF:55:60:62:57:CC:8A:24:F5:56:E8:12:5B
Authority key identifier: 60:2F:F2:EF:F2:E3:76:FE:40:92:FC:1E:88:D7:00:D7:03:05:52:2B
Certificate issuer:       /CN=602ff2eff2e376fe4092fc1e88d700d70305522b
Certificate serial:       0184BB51E7E34E3E6F678A71BDA6FE6DB8AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC_y7_Ljdv5AkvweiNcA1wMFUis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/84913f-840b-489d-8c85-f89c033bf152/1/YC_y7_Ljdv5AkvweiNcA1wMFUis.mft
Manifest number:          024B
Signing time:             Sun 27 Nov 2022 23:00:17 +0000
Manifest this update:     Sun 27 Nov 2022 23:00:17 +0000
Manifest next update:     Mon 28 Nov 2022 23:00:17 +0000
Files and hashes:         1: YC_y7_Ljdv5AkvweiNcA1wMFUis.crl (hash: hDh+uqa30wWtUT/BMajFUKUp4/jbchV2TMDykmMueO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:bb:51:e7:e3:4e:3e:6f:67:8a:71:bd:a6:fe:6d:b8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602ff2eff2e376fe4092fc1e88d700d70305522b
        Validity
            Not Before: Nov 27 23:00:17 2022 GMT
            Not After : Nov 28 23:00:17 2022 GMT
        Subject: CN=f2a90af6b07be4cf55606257cc8a24f556e8125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:76:be:f5:6c:cb:fa:1f:7f:22:e4:51:d7:
                    75:3a:34:1f:48:0a:e9:b5:c7:b6:0d:c9:37:fb:8c:
                    a6:8d:d7:0f:e5:c9:fd:ab:bd:aa:75:5b:99:88:42:
                    bf:9e:a1:9e:3b:d6:15:4e:7b:43:53:36:f9:a7:05:
                    35:da:5a:86:50:05:a4:65:4a:87:82:a7:16:3d:45:
                    a1:c8:25:ae:c4:3b:1e:bb:69:9c:97:48:85:ea:4d:
                    62:08:e6:70:59:b9:39:5b:fa:8a:16:b4:57:b9:d7:
                    9c:37:d1:24:a4:de:41:da:3c:45:22:16:e4:2f:65:
                    c6:59:23:ca:e8:a7:50:88:ff:58:e3:53:53:36:28:
                    44:ec:89:78:e8:5f:fd:46:d9:1e:ef:47:ea:09:04:
                    12:bb:a6:2b:b6:7e:68:5e:8d:40:dd:77:f9:81:e0:
                    c3:07:bd:40:ac:d9:e9:0a:0d:af:10:f9:4e:00:0e:
                    82:77:46:0a:75:ea:c0:c6:09:96:84:55:a3:a6:04:
                    18:fb:13:9b:1e:dd:fb:55:66:37:8e:38:4b:98:a8:
                    ba:12:93:1e:13:4a:b8:7a:74:e5:cb:52:ca:ae:4a:
                    5b:24:81:86:f0:dc:f9:da:d5:d1:b7:da:1f:8d:29:
                    ee:bd:b2:b7:54:53:27:19:bd:f9:b6:a3:88:da:d8:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A9:0A:F6:B0:7B:E4:CF:55:60:62:57:CC:8A:24:F5:56:E8:12:5B
            X509v3 Authority Key Identifier:
                keyid:60:2F:F2:EF:F2:E3:76:FE:40:92:FC:1E:88:D7:00:D7:03:05:52:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC_y7_Ljdv5AkvweiNcA1wMFUis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/84913f-840b-489d-8c85-f89c033bf152/1/YC_y7_Ljdv5AkvweiNcA1wMFUis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/84913f-840b-489d-8c85-f89c033bf152/1/YC_y7_Ljdv5AkvweiNcA1wMFUis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:93:03:33:4f:5f:02:31:8e:c0:4c:73:34:64:8b:27:c8:f8:
         03:89:c1:85:d9:52:5d:bf:06:9e:32:70:43:3e:59:2c:b6:bf:
         0d:ff:e8:c5:5c:31:18:a7:5a:a7:3c:af:78:74:1d:44:24:71:
         92:6b:e4:3d:b8:27:33:42:ce:05:b9:69:24:61:c8:6e:ac:ea:
         33:84:5a:c3:14:4e:35:a1:37:b7:7d:fa:38:85:0a:3a:10:28:
         05:dc:d8:8b:fb:7d:d2:a2:6f:5e:4b:5c:e2:e2:b4:65:f3:8e:
         f7:c5:3f:2f:d7:ce:b8:b7:6c:3f:35:b7:30:61:9a:da:8f:a1:
         c1:cc:60:a6:ef:ab:c1:e5:31:70:ed:b9:92:c0:5f:88:e7:5f:
         96:96:1a:06:44:af:45:12:da:39:4d:09:77:12:e0:a9:ba:3b:
         6a:19:04:1c:17:80:25:77:bc:df:e6:8f:c5:c9:ac:50:c5:fa:
         ab:d4:4c:46:5f:10:6d:15:2a:1a:ed:25:94:2e:b7:75:ea:14:
         00:4b:e9:8e:c6:9e:85:75:6d:6c:21:46:3c:0d:84:f0:d7:48:
         51:66:b9:6c:85:90:08:70:f7:52:a7:6d:5f:cc:ac:ad:a0:e5:
         11:e1:d9:29:ae:42:09:0d:67:9c:2d:55:15:cb:62:cf:a3:5d:
         f4:40:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----