Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.mft
File:                     oqyTBEcJC_mDoZHgp2MXq_QMc-M.mft (raw, json)
Hash identifier:          FFsGNM+Nh9h7SimwX43K73SYhmrOO9Op8qnj7D3SCvI=
Subject key identifier:   B2:3A:02:96:86:68:B7:E9:E4:69:C6:79:83:B5:CC:6E:1A:C5:B3:1F
Authority key identifier: A2:AC:93:04:47:09:0B:F9:83:A1:91:E0:A7:63:17:AB:F4:0C:73:E3
Certificate issuer:       /CN=a2ac930447090bf983a191e0a76317abf40c73e3
Certificate serial:       018C908BA575D3D2628E37960A1EA094EA38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oqyTBEcJC_mDoZHgp2MXq_QMc-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.mft
Manifest number:          0FEE
Signing time:             Fri 22 Dec 2023 08:01:59 +0000
Manifest this update:     Fri 22 Dec 2023 08:01:59 +0000
Manifest next update:     Sat 23 Dec 2023 08:01:59 +0000
Files and hashes:         1: TBGcTtg-S3ES1kYrpfjUKSrugzg.roa (hash: vsa5Dgijnd7bLynbXL+borN2ma8DDZBYZcHmI6E36fQ=)
                          2: oqyTBEcJC_mDoZHgp2MXq_QMc-M.crl (hash: l+swuS65/I34oCebShFOz/qa7pwkXpNhXh/T1pHAZLw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:90:8b:a5:75:d3:d2:62:8e:37:96:0a:1e:a0:94:ea:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ac930447090bf983a191e0a76317abf40c73e3
        Validity
            Not Before: Dec 22 08:01:59 2023 GMT
            Not After : Dec 23 08:01:59 2023 GMT
        Subject: CN=b23a02968668b7e9e469c67983b5cc6e1ac5b31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:26:57:bd:7c:f0:ac:6b:92:46:8f:7c:4b:
                    06:2a:5c:d6:46:ea:d2:4c:3c:f8:60:8f:8b:25:fc:
                    18:a6:55:08:f6:2e:fb:10:19:10:8f:5f:58:3d:8b:
                    8d:04:15:70:1f:76:85:b7:5b:67:d2:36:fb:34:fb:
                    89:cd:20:2a:96:59:3f:7c:4a:d3:bf:03:2e:68:a4:
                    a5:25:ad:9a:32:b8:0a:55:bb:bb:ef:60:b8:9a:ed:
                    aa:bf:fd:9f:e1:bc:e6:c3:c2:16:81:7c:02:cb:f4:
                    95:74:25:ce:d9:6d:27:ee:ae:54:86:36:08:d9:11:
                    53:74:20:d1:b2:f0:e7:e3:1a:01:7f:ae:28:c4:3d:
                    22:2b:29:ff:04:7a:af:f3:3e:5c:11:77:18:0e:c6:
                    af:c1:d1:3e:61:cb:97:ac:70:0a:73:42:d2:17:52:
                    bf:92:79:7e:5d:6e:67:66:2a:8e:28:4f:45:02:14:
                    14:0b:1e:d5:8a:53:a1:99:53:97:fd:26:cf:65:81:
                    b3:fd:4b:44:d5:63:44:5c:33:30:b2:42:22:52:f5:
                    a6:fd:7f:2d:b8:00:6b:36:e9:f6:8e:02:c1:e7:03:
                    8f:df:c0:bf:18:42:79:dd:c1:b8:42:76:93:e0:b0:
                    c8:eb:66:f9:08:34:d0:29:bd:ba:16:66:18:a3:28:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3A:02:96:86:68:B7:E9:E4:69:C6:79:83:B5:CC:6E:1A:C5:B3:1F
            X509v3 Authority Key Identifier:
                keyid:A2:AC:93:04:47:09:0B:F9:83:A1:91:E0:A7:63:17:AB:F4:0C:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqyTBEcJC_mDoZHgp2MXq_QMc-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:d4:ad:92:8b:95:f4:5e:d3:7a:02:72:c4:55:ff:70:8d:
         2a:16:fc:8d:16:89:96:7b:e8:4e:a5:de:05:ac:cf:86:68:eb:
         6d:50:f3:a9:7d:d3:25:ae:fd:bf:75:e6:52:c8:a8:d1:e2:2d:
         90:c8:5f:83:87:fa:42:de:c6:31:a8:da:c9:02:03:0c:b1:a9:
         6a:fa:4e:a0:b8:e3:05:e4:dd:aa:d1:1e:cb:7e:6b:89:74:a2:
         96:1d:af:bb:e8:74:c9:c7:6e:69:b5:03:3d:8f:7a:6e:7c:c2:
         0a:50:10:7c:0d:e0:04:4b:f9:12:f8:42:17:8e:5e:98:3e:ab:
         3a:d0:63:f2:b9:a8:fb:6c:5c:2e:fb:9d:24:86:a9:fc:6b:58:
         2e:b0:1e:b0:78:76:bf:f5:19:78:12:23:eb:50:fd:de:33:83:
         62:f8:27:34:03:c6:95:1f:f3:ab:3e:ce:13:9a:39:aa:56:1f:
         32:67:e9:eb:cd:aa:b7:ae:b0:4f:72:58:cb:be:7e:af:35:1f:
         87:62:ec:75:22:d5:31:d7:50:84:bf:7a:42:5a:35:68:9f:d5:
         79:01:0c:66:6b:c8:7b:da:b2:dd:a2:13:ca:02:6a:13:2e:f4:
         5f:33:56:04:3b:38:cf:99:a1:58:a6:ca:94:64:59:52:fb:ba:
         9b:4b:71:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----