Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft
File:                     QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft (raw, json)
Hash identifier:          3mMYHShQti8FZvaafYk1E+cghBb+ztEWU4r8o0QmKvY=
Subject key identifier:   E6:90:83:0F:05:D5:C1:BF:9E:8E:5B:1D:8B:EA:A2:AB:01:EB:AB:EA
Authority key identifier: 40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC
Certificate issuer:       /CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
Certificate serial:       0186A09F3B00D8FBE7F91754D899487CF1AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft
Manifest number:          14
Signing time:             Thu 02 Mar 2023 04:40:35 +0000
Manifest this update:     Thu 02 Mar 2023 04:40:35 +0000
Manifest next update:     Fri 03 Mar 2023 04:40:35 +0000
Files and hashes:         1: 6ffrNQi0BlslB0NCbskNJn4mTCg.roa (hash: gbpNjqrxZNlWIulE5CAbl2eT9/JNgbL2LN5x3Yt1WGQ=)
                          2: QPFuUGrg7GxB7wQ3uFURBHS6R9w.crl (hash: xEkyMtj2vghCVEyvwItjmH2MlD9g3EtAKU6Y47Tk5iE=)
                          3: ZDCC_tj2fjgBmj0xAv9sy3qduf4.roa (hash: YRMN+I4RdIZw149YQcoLRFKhCY6L0qdO5oLUOHJf8X0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a0:9f:3b:00:d8:fb:e7:f9:17:54:d8:99:48:7c:f1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
        Validity
            Not Before: Mar  2 04:40:35 2023 GMT
            Not After : Mar  3 04:40:35 2023 GMT
        Subject: CN=e690830f05d5c1bf9e8e5b1d8beaa2ab01ebabea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:10:56:89:d9:b0:9d:82:b3:bd:54:17:8c:
                    67:3a:02:85:59:bc:ce:25:e9:75:30:9d:c7:da:f3:
                    fe:43:ed:96:8a:6d:4b:1d:53:a2:64:e4:a8:96:f6:
                    6a:aa:22:f6:02:f5:74:d9:c3:89:b1:e3:46:2d:2d:
                    15:53:d5:35:ab:f7:9e:de:90:96:e6:77:62:06:01:
                    f2:27:24:14:9b:63:33:2e:1c:7f:cd:b7:71:6d:7b:
                    37:f7:d8:5b:c9:e3:71:3a:93:8e:2e:74:77:99:33:
                    5d:29:1f:3e:2d:e6:53:7e:20:bf:2b:69:53:8c:6f:
                    f3:60:89:50:15:4d:d3:9a:09:a5:07:7b:34:fa:3d:
                    7c:16:62:b9:48:58:4d:ab:44:56:42:b9:18:33:98:
                    24:67:94:e7:47:92:5a:d9:9b:e8:1a:c3:9b:2a:ea:
                    7e:6a:8d:f3:f9:df:28:8d:6d:f8:61:16:d6:62:97:
                    be:a0:13:43:9f:1e:f7:07:f5:9a:84:9a:d0:4b:cf:
                    84:3e:5d:c8:25:38:6f:26:33:33:7b:9a:c4:51:41:
                    5a:96:dd:4d:e7:92:d9:bf:9a:e9:99:25:0a:50:c8:
                    6b:2c:1b:c2:3e:49:53:d5:57:d3:84:47:46:c5:8e:
                    00:ba:3c:89:0c:3e:27:de:be:42:02:e0:bb:52:c1:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:83:0F:05:D5:C1:BF:9E:8E:5B:1D:8B:EA:A2:AB:01:EB:AB:EA
            X509v3 Authority Key Identifier:
                keyid:40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:df:76:e4:e3:91:48:f6:23:9a:cc:00:cc:9b:0c:c2:5f:e2:
         54:75:11:91:3c:8a:4d:e3:bd:8d:94:2c:08:0f:69:a8:50:c0:
         f2:e7:03:45:8a:8d:ee:02:d2:54:fc:b7:5b:b3:f7:72:96:f7:
         ec:ad:40:34:95:83:a9:8d:21:9c:10:54:7c:e6:7e:64:39:40:
         aa:17:09:8e:53:06:d6:e5:76:59:0f:17:9c:0a:d3:e5:88:08:
         25:a4:94:39:09:32:f9:58:f6:fe:84:3d:10:e5:9c:fb:31:b5:
         36:a7:55:f7:1a:68:9d:83:0b:97:bd:a8:61:07:f0:e2:53:57:
         46:7c:c1:36:f1:18:f9:08:1c:1b:0d:3b:b0:59:1c:5a:81:08:
         05:7e:38:ae:b7:c2:1d:29:a3:3b:df:d5:65:b6:2b:b8:9f:ef:
         8d:10:7a:40:a8:09:fb:62:74:69:dc:d8:9b:42:79:ea:b4:08:
         40:a6:25:82:4d:5b:e2:2c:6a:dd:cb:d5:e7:a5:f3:91:1f:bf:
         4e:97:41:7e:22:e8:8a:34:e1:74:f6:05:26:68:93:f0:4a:5c:
         bc:e7:6b:63:ba:2b:18:55:68:0f:cf:41:85:d6:2c:44:4c:cd:
         ff:8e:c0:c5:9b:07:83:dc:3d:ad:91:c1:e6:31:42:34:c1:22:
         65:61:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----