Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.mft
File:                     ZA4tuMXg_Sxyawq0eA2XgRhDrXA.mft (raw, json)
Hash identifier:          BP5SVW+QOV/e17QUfAvTJHHx9OWfB3MVz2Igif7JTTc=
Subject key identifier:   C8:70:08:62:C4:77:2A:85:D2:8A:B1:D2:6B:71:C0:0B:38:0C:92:E5
Authority key identifier: 64:0E:2D:B8:C5:E0:FD:2C:72:6B:0A:B4:78:0D:97:81:18:43:AD:70
Certificate issuer:       /CN=640e2db8c5e0fd2c726b0ab4780d97811843ad70
Certificate serial:       018676DAA307BDF971642AC905DC1EC89DF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.mft
Manifest number:          048F
Signing time:             Wed 22 Feb 2023 02:01:25 +0000
Manifest this update:     Wed 22 Feb 2023 02:01:25 +0000
Manifest next update:     Thu 23 Feb 2023 02:01:25 +0000
Files and hashes:         1: K6aKOIW-1NSddcmGQED-lRQwj0w.roa (hash: v7gYWwseoKMltABOPqU3Qixh8CrsOMIdWsIeCwhrWxM=)
                          2: XJHoohkfx5BYdhsJowgWoEkn1PA.roa (hash: F0RXBzMpoBZF5WvFzv6z127wM4VSbPawIf2Kj5f0nR4=)
                          3: ZA4tuMXg_Sxyawq0eA2XgRhDrXA.crl (hash: d6mklYHUdvZ8CqHZzJl0md1+MaoCu1lTMy04HipzO3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:76:da:a3:07:bd:f9:71:64:2a:c9:05:dc:1e:c8:9d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640e2db8c5e0fd2c726b0ab4780d97811843ad70
        Validity
            Not Before: Feb 22 02:01:25 2023 GMT
            Not After : Feb 23 02:01:25 2023 GMT
        Subject: CN=c8700862c4772a85d28ab1d26b71c00b380c92e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:c9:43:41:38:96:a3:7a:9b:2c:b4:2e:95:
                    6b:ea:87:b9:7a:5f:2f:89:37:3e:eb:2d:a8:ff:15:
                    68:67:3e:fa:4c:c0:53:4d:49:23:00:66:91:58:72:
                    4e:73:2c:73:4b:c7:92:8a:e8:e8:e2:28:9f:74:96:
                    7c:65:27:43:dd:56:29:1c:ac:91:e6:3c:ea:85:d7:
                    dc:e3:b3:d2:73:db:cc:58:ed:9f:57:05:57:4a:c5:
                    2b:38:1e:71:45:62:4d:5d:33:d8:8f:38:4e:ad:1d:
                    a3:74:f6:fe:7d:e0:03:e7:0f:f0:af:ec:cd:7c:c9:
                    2b:92:56:31:33:09:bc:fb:17:bf:ce:3e:15:f5:22:
                    11:de:1e:0c:46:29:06:b9:33:42:13:bc:d0:22:e9:
                    f6:fa:cb:76:e8:65:b0:d8:04:0c:63:68:a9:c8:90:
                    2d:a6:49:24:d8:ce:f3:45:97:f4:7e:22:04:05:26:
                    3d:e6:f6:48:3b:b8:8b:6a:14:af:81:c0:6b:b4:82:
                    ae:a3:0e:91:fc:cd:13:92:69:1f:5b:c7:2e:25:d4:
                    e1:16:3b:3c:7e:ee:2c:02:f0:6f:3c:9d:eb:14:d5:
                    78:9b:1e:d9:70:c1:da:3a:c0:4f:6b:30:fb:55:98:
                    f7:7a:e2:5b:32:c0:96:b2:8c:45:74:9c:eb:56:0c:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:70:08:62:C4:77:2A:85:D2:8A:B1:D2:6B:71:C0:0B:38:0C:92:E5
            X509v3 Authority Key Identifier:
                keyid:64:0E:2D:B8:C5:E0:FD:2C:72:6B:0A:B4:78:0D:97:81:18:43:AD:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6f:32:5b:b2:24:87:84:d7:23:8f:54:ad:2b:ab:fd:35:87:
         fc:7f:fe:5a:0b:49:36:f3:95:3c:fe:84:88:d9:65:92:f5:ea:
         9b:ab:a5:45:24:3e:43:0e:3f:54:70:6f:b9:97:6d:48:5d:ab:
         bd:93:60:8d:81:66:2a:80:fe:85:ce:c2:66:90:1e:e6:f8:18:
         cc:0f:b0:4d:27:ca:a2:44:3a:b7:4f:18:4e:2a:c9:5e:c4:3f:
         40:e0:76:25:03:cf:db:69:be:34:0d:5b:ce:6f:54:4a:c3:36:
         bd:dd:c8:11:03:b0:a7:0d:57:1d:60:43:1f:2a:ad:3d:08:7c:
         50:2c:ce:26:fe:69:d5:1e:5f:5d:a0:37:7a:67:9a:8d:d7:e7:
         31:7b:16:64:e9:28:08:a0:b2:03:d2:89:1b:1b:ba:45:6c:f5:
         45:a5:29:b1:a6:1c:66:69:54:d7:d1:47:98:26:f6:14:0f:dc:
         47:e1:72:28:c4:d7:df:64:c6:1f:7d:bf:3b:64:69:b8:53:b4:
         ba:47:9e:e0:65:4e:38:e0:6f:38:a5:1c:14:02:64:39:b3:11:
         70:cb:4b:5b:68:d8:2e:22:19:73:f7:e3:48:53:41:36:ae:07:
         56:62:40:bb:39:e9:c8:45:93:12:3b:6d:2e:5d:eb:44:4c:09:
         74:3d:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----