Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/gp4OirTbg6YtMYxpMEhA5cp2_oY.mft
File:                     gp4OirTbg6YtMYxpMEhA5cp2_oY.mft (raw, json)
Hash identifier:          Ar//axtHYzPi6wx+6CcJXTDKTf8+4qUF9nmPz2PgyEM=
Subject key identifier:   33:25:0C:64:FD:A8:12:39:3D:CB:98:09:A8:B8:F7:3A:AD:88:1E:B0
Authority key identifier: 82:9E:0E:8A:B4:DB:83:A6:2D:31:8C:69:30:48:40:E5:CA:76:FE:86
Certificate issuer:       /CN=829e0e8ab4db83a62d318c69304840e5ca76fe86
Certificate serial:       0189BF58B19E6D390B5EA953E9AE1AA4DCEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gp4OirTbg6YtMYxpMEhA5cp2_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/gp4OirTbg6YtMYxpMEhA5cp2_oY.mft
Manifest number:          0BD6
Signing time:             Fri 04 Aug 2023 07:00:08 +0000
Manifest this update:     Fri 04 Aug 2023 07:00:08 +0000
Manifest next update:     Sat 05 Aug 2023 07:00:08 +0000
Files and hashes:         1: gp4OirTbg6YtMYxpMEhA5cp2_oY.crl (hash: l0dzKmgOQ1naGeuwfnPHowa0H/e9sF5QHpw/ZM61SAA=)
                          2: xgnikyzKuO23SETTKX80WWl9GlU.roa (hash: 8zdY8Jj4hklmigFShRdwfhfa9ojHtd9lJxvdTs7e6c8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bf:58:b1:9e:6d:39:0b:5e:a9:53:e9:ae:1a:a4:dc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829e0e8ab4db83a62d318c69304840e5ca76fe86
        Validity
            Not Before: Aug  4 07:00:08 2023 GMT
            Not After : Aug  5 07:00:08 2023 GMT
        Subject: CN=33250c64fda812393dcb9809a8b8f73aad881eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:6f:af:1a:db:68:59:e0:5f:4f:f2:15:5c:
                    c3:80:b2:de:fe:cc:aa:1b:f4:be:43:e8:89:a2:2c:
                    20:64:8b:00:ef:36:ab:8a:44:75:19:04:cc:60:b9:
                    7e:67:1b:e4:06:b0:6d:0d:cf:93:28:d9:39:03:9d:
                    bf:90:7b:01:dc:e4:4f:ec:45:4f:14:19:ea:26:03:
                    68:46:fc:bf:2c:e9:81:e6:95:fe:57:bf:4d:2f:60:
                    1f:41:28:79:db:75:1b:7f:73:a0:20:93:89:a5:38:
                    6b:aa:fd:e0:2c:0d:4c:14:ab:61:f2:41:ae:22:4d:
                    32:05:22:0d:0e:9d:34:e6:c3:a9:da:b9:3e:b8:a0:
                    fe:55:3f:8c:c2:72:6a:a5:11:73:cf:63:4d:04:2f:
                    df:ac:50:02:9c:a1:1e:ac:3f:78:f7:99:d5:ed:aa:
                    97:4d:f8:da:2d:03:54:d6:09:44:69:15:97:49:86:
                    57:7a:31:54:a8:72:05:0b:88:b2:03:71:50:98:a2:
                    a2:53:ba:b1:02:01:f6:4f:2c:08:7e:72:f7:8e:0c:
                    c4:93:d1:62:6c:e3:43:1a:10:66:cf:46:45:61:81:
                    7a:5e:a6:f0:0b:69:e5:43:bc:0a:fb:8d:ce:79:f6:
                    70:4f:5b:08:03:49:11:79:ac:3b:9c:c1:84:4a:6a:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:25:0C:64:FD:A8:12:39:3D:CB:98:09:A8:B8:F7:3A:AD:88:1E:B0
            X509v3 Authority Key Identifier:
                keyid:82:9E:0E:8A:B4:DB:83:A6:2D:31:8C:69:30:48:40:E5:CA:76:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp4OirTbg6YtMYxpMEhA5cp2_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/gp4OirTbg6YtMYxpMEhA5cp2_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/gp4OirTbg6YtMYxpMEhA5cp2_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:17:1d:ee:04:a5:7d:2d:24:16:27:cf:06:93:0e:7e:23:86:
         46:e6:98:d8:74:67:6e:bf:89:83:39:2c:11:9e:e9:fd:f4:b7:
         1b:51:9c:f2:30:a5:1a:1c:d6:9f:f4:dc:81:9a:68:f3:e8:4b:
         86:22:ad:8e:3a:11:95:ee:47:45:96:68:ba:22:e9:e3:85:c9:
         33:b2:c5:91:e9:20:68:85:6f:1d:cd:2b:34:b7:b2:cb:b2:db:
         3f:37:93:91:cc:87:1e:59:46:11:56:fb:8d:bb:43:1b:1b:c3:
         7b:7f:50:b2:39:59:88:e6:b5:bd:2b:dd:29:2a:58:de:7f:ee:
         49:c3:1c:cd:12:6e:05:88:5f:36:bc:8e:4b:1b:53:b7:a4:ad:
         32:c1:3d:49:6a:39:f8:69:64:bb:17:50:ab:62:24:fe:84:4d:
         d2:86:25:2f:ba:96:6b:95:0d:06:4b:78:b6:56:ae:5b:51:57:
         31:8c:6d:1b:e0:2e:0d:0f:07:6e:b2:ea:e2:02:7f:72:fa:84:
         19:70:07:ae:b1:80:1b:b6:1b:44:73:b1:e0:c1:e9:03:e1:8c:
         7a:44:ea:9f:8e:f3:50:cd:65:68:00:2b:ad:58:d4:eb:5e:74:
         9a:23:d1:07:a5:17:2e:43:b5:4c:80:6f:47:af:ae:51:ba:ed:
         fa:e5:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----