Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.mft
File:                     XgnAoHQRyUcw4NLy2girl5Y621s.mft (raw, json)
Hash identifier:          8tdrejZkRA2+FOOGx56+Tft7RMSPTN4mo0WZeA6hBn0=
Subject key identifier:   9D:6D:F1:63:E8:9A:1F:60:C1:0B:AE:C6:AE:33:E6:CC:C5:CB:45:22
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Certificate issuer:       /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial:       0185521CAFE1696AF4C6802866E9BE897FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.mft
Manifest number:          0BEF
Signing time:             Tue 27 Dec 2022 05:44:49 +0000
Manifest this update:     Tue 27 Dec 2022 05:44:49 +0000
Manifest next update:     Wed 28 Dec 2022 05:44:49 +0000
Files and hashes:         1: 0exmX8VPEY-o38ZZicFluzPgvn4.roa (hash: SysyNGJQvqeNGGZ12PoiOf1GQBzWlmyYXpFX9m7E6d8=)
                          2: 1-bxYdZvXsmmI0chD1aA1tjZVQNk.roa (hash: vj/Ws89J3Gn0o0o1ePxb+CE5qjJ56c8QgeZmBmWSOlM=)
                          3: OmVKcdrdoXLiQqS9LZnKrqKKj1Y.roa (hash: n+5eWvqWX0xQLUEa4SfnAqZUw3QtDbKP6MSTJ21WyUA=)
                          4: WOfkZrSCU-Ok39dpgRnf0L04Cpg.roa (hash: dQUHGOKFvEGype2yzxj0TSVbLVOyNje0/2fNGDnGlsw=)
                          5: XgnAoHQRyUcw4NLy2girl5Y621s.crl (hash: x++8R9OBJpc+ef2j1FmKnujLAiITSoljqduMTPI9Hq0=)
                          6: k-Hwld7ITprc8YagICVdY53VvLQ.roa (hash: 4RADwj3yJ1bK+A1LSi04PUoLWPkZQ4ZfMaOqpcIG+7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:52:1c:af:e1:69:6a:f4:c6:80:28:66:e9:be:89:7f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
        Validity
            Not Before: Dec 27 05:44:49 2022 GMT
            Not After : Dec 28 05:44:49 2022 GMT
        Subject: CN=9d6df163e89a1f60c10baec6ae33e6ccc5cb4522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:80:32:b0:11:ec:5f:4a:79:06:6e:48:2a:
                    0e:e8:26:4d:37:9f:03:d3:35:85:47:41:83:6b:ec:
                    72:11:3b:cd:53:e9:5d:9b:ab:79:bb:e5:7c:ca:bf:
                    6e:45:e7:43:70:a3:a2:31:18:77:6a:59:f4:20:8b:
                    7d:35:49:30:ab:16:fe:d1:9d:eb:12:9c:1c:c7:cc:
                    35:b0:02:83:a0:a9:ec:48:62:71:61:fb:8b:c9:7e:
                    0e:06:bc:ca:e4:e0:c7:05:81:b1:ad:db:c1:ad:b9:
                    14:8b:1f:cc:da:05:ff:47:ea:47:ae:f8:d6:c8:83:
                    0c:f3:6e:9a:15:98:7d:21:89:e7:7b:bb:dc:20:98:
                    75:21:39:50:5a:5c:6d:7e:17:07:d1:e0:99:d3:4f:
                    c8:e2:0d:81:35:9f:be:9e:c3:f3:94:7a:a4:b2:69:
                    88:56:cd:46:8d:ee:94:fc:02:9e:b3:f0:12:95:3b:
                    24:b9:2a:8d:25:a9:c2:94:c5:5e:cf:53:62:9f:60:
                    39:37:63:9c:52:15:b9:43:a1:ae:a9:1b:4a:a9:d3:
                    6f:1f:19:ea:c8:75:d1:7f:81:1a:87:f0:e3:48:87:
                    53:cc:2a:63:72:9e:38:40:92:72:25:1a:af:15:b4:
                    14:53:23:1a:54:6a:d9:e6:43:c0:e6:c9:ab:ab:99:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:F1:63:E8:9A:1F:60:C1:0B:AE:C6:AE:33:E6:CC:C5:CB:45:22
            X509v3 Authority Key Identifier:
                keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c5:0a:c7:f0:f5:fe:05:c7:0a:22:b7:96:ff:39:1d:ed:5f:
         9d:7d:3e:f6:a3:be:98:72:6b:dc:fa:1a:cc:da:07:b0:2d:b7:
         df:39:20:e5:da:71:0e:8d:56:69:27:9a:e0:a2:3a:7d:06:67:
         2c:b2:17:9b:26:55:54:d6:1e:21:22:62:3f:e0:59:24:8d:e6:
         07:f3:dc:96:38:1c:20:0a:ad:23:08:3e:15:4c:9c:e1:e2:20:
         66:f5:41:92:21:aa:ad:d0:38:9b:a7:07:eb:02:8b:f1:d5:e7:
         c1:5d:a8:56:5a:e0:8c:11:b5:a2:6f:9e:b3:7b:fb:02:4a:44:
         dd:96:3f:b9:dc:0d:47:e6:89:4e:1e:e1:1d:bd:a1:6e:e5:7c:
         7e:bb:94:26:4f:51:3b:65:9b:50:25:a6:fd:e4:6f:d3:2a:9d:
         3c:86:42:1d:1f:66:cf:9d:c2:62:b5:73:b8:73:a0:99:99:1a:
         f8:46:f4:5a:17:2e:03:59:3e:26:0c:8e:fa:3b:ce:b5:7a:40:
         09:59:8e:87:bd:a8:d2:52:34:e6:df:a2:4b:f1:ae:21:cd:50:
         0b:84:ee:82:d3:af:41:cf:56:2f:99:91:c4:32:d5:08:c8:e3:
         35:d0:65:79:77:83:33:70:91:1a:37:a0:24:50:9e:ac:e4:f8:
         a2:8e:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----