Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.mft
File:                     Tx43cOcebuaLThb07saxkJ8dZoY.mft (raw, json)
Hash identifier:          r9VQ2nFYECQk0aPB/abP6lM8J66xDJzvDHt+5ENotQs=
Subject key identifier:   40:D1:5E:B7:EA:AD:6A:02:16:BF:4C:6B:D7:BC:28:0F:6E:63:7B:6B
Authority key identifier: 4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
Certificate issuer:       /CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Certificate serial:       0189963135B6EF767DBE9B5C73FEEE4E3C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.mft
Manifest number:          0A23
Signing time:             Thu 27 Jul 2023 07:12:34 +0000
Manifest this update:     Thu 27 Jul 2023 07:12:34 +0000
Manifest next update:     Fri 28 Jul 2023 07:12:34 +0000
Files and hashes:         1: DyCL1bSQCIADFiHN02LkN7msh3c.roa (hash: nnLekvFOsfALaEEsbLGE6y5dH+Pvb7SilFNT7lMZSAc=)
                          2: Tx43cOcebuaLThb07saxkJ8dZoY.crl (hash: iRzgXoiubVpKR3hLCz8wyzJspuWFaev7FDA3U9hllSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:96:31:35:b6:ef:76:7d:be:9b:5c:73:fe:ee:4e:3c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
        Validity
            Not Before: Jul 27 07:12:34 2023 GMT
            Not After : Jul 28 07:12:34 2023 GMT
        Subject: CN=40d15eb7eaad6a0216bf4c6bd7bc280f6e637b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fe:2f:ec:06:72:76:4b:ca:35:51:34:17:8a:
                    c9:10:1b:fe:7d:b4:48:bd:d8:19:fe:72:ea:c9:91:
                    3b:50:bb:5b:16:4c:b4:05:39:99:ff:83:02:76:57:
                    71:46:20:8d:63:f8:28:36:0b:48:3f:28:a7:a1:d7:
                    d4:0d:13:a5:d1:5b:6a:48:40:f2:d4:f6:66:cf:6e:
                    27:80:77:43:82:ca:ce:e5:42:ae:78:9b:14:f0:09:
                    fd:22:43:c0:1c:ed:8b:bf:3c:79:f3:cc:bc:1a:90:
                    c8:8a:f7:85:6e:2e:4c:cd:f8:d9:4c:c4:49:ce:83:
                    27:a9:aa:d3:46:21:e0:89:cd:57:01:2f:a5:6f:bc:
                    af:44:9c:68:21:81:dd:1d:30:65:de:3f:93:7d:db:
                    9e:51:26:cd:81:98:a0:6b:fa:5a:b6:33:a7:08:fb:
                    6f:bb:02:7e:89:61:94:0b:2f:5e:49:b5:43:19:43:
                    e6:59:ba:48:98:c5:91:05:bd:b4:4c:13:3a:9a:ab:
                    1a:8a:88:63:bc:10:5a:f6:87:1c:15:cf:ab:e1:f2:
                    e8:f5:fa:26:69:d3:b4:6d:dd:cc:da:9c:6c:e2:00:
                    bf:ad:f3:d5:c5:a4:05:66:83:bb:b9:b0:88:f3:43:
                    a0:9a:ce:92:b5:92:01:c0:e3:35:75:88:1f:1e:06:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D1:5E:B7:EA:AD:6A:02:16:BF:4C:6B:D7:BC:28:0F:6E:63:7B:6B
            X509v3 Authority Key Identifier:
                keyid:4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:30:59:91:9f:fa:8f:ed:d9:c4:b7:0e:18:1e:88:6b:bf:09:
         f9:80:ea:9c:63:ee:48:bf:a0:c4:3c:a0:53:65:af:32:b7:4c:
         36:36:bf:04:9d:f7:7c:ec:c4:54:e9:7d:9e:63:92:85:9b:64:
         05:f4:66:4d:1b:ba:9c:69:31:40:f2:5a:d8:c8:b0:29:11:27:
         70:25:c9:14:f9:04:f5:01:fa:fb:52:56:a8:48:55:4d:a3:6e:
         1b:ff:3a:b4:8f:64:d5:05:45:c6:81:bf:58:ce:42:77:1c:90:
         2e:08:2e:66:c8:a2:ff:97:94:49:d9:e7:c4:20:7c:d7:bb:ff:
         1d:c6:91:1e:ab:19:4e:2b:75:e9:48:81:25:de:74:55:5b:7d:
         22:63:22:53:83:8b:22:aa:24:b2:8e:7e:b9:52:f8:7c:0b:aa:
         01:94:9b:ab:d8:74:b7:a9:32:fd:52:a1:92:95:ba:55:5b:ee:
         4f:4f:fe:a0:31:ff:43:ba:36:ae:6f:4f:99:8e:ca:80:9a:bb:
         1e:d7:3f:82:24:79:7f:c2:d7:06:a5:88:2c:05:97:ef:f4:46:
         d5:da:bb:af:94:fb:a3:9f:f0:89:bb:3e:82:9d:b0:a2:34:3d:
         ea:21:ca:ab:d6:b2:5d:2d:ef:a7:95:3c:65:45:ee:b0:04:f2:
         49:d7:44:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----