Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/TiWdgGE5-VPkfDUJBKrO7GzDmh8.mft
File:                     TiWdgGE5-VPkfDUJBKrO7GzDmh8.mft (raw, json)
Hash identifier:          CUo5ufAK1CSxDyTtNspn84iOpZdat++JFLZ0VyrDzN4=
Subject key identifier:   4C:38:40:05:2A:AD:05:2B:79:88:22:91:9B:C5:67:B3:4D:8E:B7:53
Authority key identifier: 4E:25:9D:80:61:39:F9:53:E4:7C:35:09:04:AA:CE:EC:6C:C3:9A:1F
Certificate issuer:       /CN=4e259d806139f953e47c350904aaceec6cc39a1f
Certificate serial:       018BB91B75E20178777749B18C8FC8A6116C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiWdgGE5-VPkfDUJBKrO7GzDmh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/TiWdgGE5-VPkfDUJBKrO7GzDmh8.mft
Manifest number:          091B
Signing time:             Fri 10 Nov 2023 12:01:06 +0000
Manifest this update:     Fri 10 Nov 2023 12:01:06 +0000
Manifest next update:     Sat 11 Nov 2023 12:01:06 +0000
Files and hashes:         1: RM8XI7vpMPUUW0BbBUTG9d0TmlY.roa (hash: MVjEjLNH0nwv4NWGLY5hdwwGSkU+FtPFP8HXKf3k/kU=)
                          2: TiWdgGE5-VPkfDUJBKrO7GzDmh8.crl (hash: Kk+AP2wXd6oL8Lejz4Fb9034Dvnak3c3OTvHwO0cTDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:1b:75:e2:01:78:77:77:49:b1:8c:8f:c8:a6:11:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e259d806139f953e47c350904aaceec6cc39a1f
        Validity
            Not Before: Nov 10 12:01:06 2023 GMT
            Not After : Nov 11 12:01:06 2023 GMT
        Subject: CN=4c3840052aad052b798822919bc567b34d8eb753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:47:20:bd:4f:8a:4e:38:aa:8c:d4:42:ce:
                    2b:ff:3c:30:e6:71:b9:21:23:55:13:1e:40:83:dd:
                    a6:08:43:b7:7c:00:56:74:9a:03:08:4e:36:bf:dc:
                    3b:52:f2:1b:a3:37:11:38:31:7b:77:73:46:16:f0:
                    a6:34:3b:e0:ac:fb:13:39:bd:fe:33:44:a0:7b:e4:
                    37:9c:05:b0:fe:fa:ac:69:53:3b:0c:d5:df:1d:e6:
                    9a:f4:c2:60:1a:fc:d0:c8:a1:50:5a:22:2f:6b:e0:
                    c0:f0:53:04:13:ed:91:25:39:04:21:6e:89:cc:66:
                    fd:5d:fd:98:20:65:f1:39:b3:8f:da:d1:e6:3c:fb:
                    93:ed:a0:a5:9b:40:bf:55:ad:b9:4c:37:ce:a4:2c:
                    16:d0:d3:32:55:f9:02:19:b9:48:be:33:fb:cb:86:
                    25:0e:16:d2:10:db:c4:f3:d6:5b:b6:16:b8:4f:b2:
                    9d:40:ba:04:23:58:10:f7:6f:69:80:78:6d:f9:ac:
                    26:80:c0:f8:a8:c4:99:81:69:d7:8c:23:81:09:41:
                    9b:ec:60:0d:3b:43:ab:25:99:ce:92:41:b6:fa:98:
                    0b:d5:41:3b:a1:57:d5:3d:4d:41:96:3c:1b:cd:b7:
                    43:03:a0:93:5a:d1:9a:86:b5:b9:0c:e2:6d:ae:74:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:40:05:2A:AD:05:2B:79:88:22:91:9B:C5:67:B3:4D:8E:B7:53
            X509v3 Authority Key Identifier:
                keyid:4E:25:9D:80:61:39:F9:53:E4:7C:35:09:04:AA:CE:EC:6C:C3:9A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiWdgGE5-VPkfDUJBKrO7GzDmh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/TiWdgGE5-VPkfDUJBKrO7GzDmh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/TiWdgGE5-VPkfDUJBKrO7GzDmh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:66:80:97:00:46:b6:1f:4f:aa:3e:b1:98:ed:c8:92:18:
         fe:83:80:83:e9:e7:e3:64:89:2b:bc:18:00:5e:01:21:94:db:
         6d:6c:d8:a6:bd:2c:63:15:8d:c8:a2:38:45:64:fc:09:5a:66:
         44:4b:f6:ff:d5:54:98:0e:6a:50:c9:43:a2:bc:d5:e3:11:79:
         0d:99:dc:02:84:eb:d1:9a:83:2a:9a:00:ba:bf:9a:51:5f:e9:
         74:d5:34:06:d2:b7:7e:d2:ea:e5:0e:87:dd:83:1b:40:34:9e:
         83:92:19:57:e8:b0:17:fd:55:5d:6b:f1:68:21:e1:11:9c:4b:
         9a:eb:a7:af:3b:06:ce:2d:8a:71:22:20:dd:85:6e:3a:4d:48:
         d6:e1:04:49:e1:6d:c2:bb:fa:10:6e:76:a6:20:97:d4:44:2a:
         90:21:e3:09:c9:07:be:c6:75:81:b8:09:f9:d6:13:f4:9b:eb:
         53:d6:8e:3c:93:91:42:3f:d4:e9:0f:2a:41:6d:87:c1:07:ca:
         bf:4f:bd:8e:83:b5:22:3b:d8:4c:2d:58:bc:17:66:3f:ad:ca:
         61:e9:a8:69:e2:be:a7:d9:6d:91:e4:2e:68:93:16:4b:19:7b:
         42:2b:4f:8f:5b:46:0c:59:b9:9c:f0:4e:e6:e5:92:29:cb:bd:
         cc:99:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----