Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/15b08a-0299-401a-947f-69967100f868/1/5K3NehDOobW9J6yFgufYBiYg2uc.mft
File:                     5K3NehDOobW9J6yFgufYBiYg2uc.mft (raw, json)
Hash identifier:          T9BZRJZz9cSuOIqzqxUgyoDFLr6y9fs+iWF9dcLU2X8=
Subject key identifier:   62:42:FF:DE:CD:72:3C:5F:20:FF:D4:69:1C:37:DE:38:8C:16:ED:6E
Authority key identifier: E4:AD:CD:7A:10:CE:A1:B5:BD:27:AC:85:82:E7:D8:06:26:20:DA:E7
Certificate issuer:       /CN=e4adcd7a10cea1b5bd27ac8582e7d8062620dae7
Certificate serial:       018B4A2BBD53687336297C142E20699BD612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5K3NehDOobW9J6yFgufYBiYg2uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/15b08a-0299-401a-947f-69967100f868/1/5K3NehDOobW9J6yFgufYBiYg2uc.mft
Manifest number:          0874
Signing time:             Thu 19 Oct 2023 23:01:02 +0000
Manifest this update:     Thu 19 Oct 2023 23:01:02 +0000
Manifest next update:     Fri 20 Oct 2023 23:01:02 +0000
Files and hashes:         1: 5K3NehDOobW9J6yFgufYBiYg2uc.crl (hash: Rhwhki1zcocHeV92Bu8Ewtp0hAzNS60qwFT2sBFJvDQ=)
                          2: MH_kWZMqGUevIMvYqoMzGv1m7Uk.roa (hash: HnUICbbCAitDNfgijh02+tkk1pabsYCXTERFHO6coiQ=)
                          3: cxxFwBBqejJnEiT9Rp0IT1F8uPY.roa (hash: pB5A3MFM6b6DmBvu/d/5xrnPTZyPJcgYFvTfClxHDqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4a:2b:bd:53:68:73:36:29:7c:14:2e:20:69:9b:d6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4adcd7a10cea1b5bd27ac8582e7d8062620dae7
        Validity
            Not Before: Oct 19 23:01:02 2023 GMT
            Not After : Oct 20 23:01:02 2023 GMT
        Subject: CN=6242ffdecd723c5f20ffd4691c37de388c16ed6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d2:53:ce:95:62:15:82:bd:ed:bb:30:95:74:
                    4d:56:17:89:b3:8b:5a:13:39:d1:54:13:fa:bf:0d:
                    f1:8b:71:49:70:57:86:67:85:67:97:ce:01:66:df:
                    00:2f:5e:2d:c4:b3:bb:36:62:4d:fb:e3:f4:6c:16:
                    2b:8c:65:b7:5e:58:90:11:ca:64:0d:98:fc:e1:dd:
                    9f:c3:38:4e:04:af:aa:ac:71:ed:c1:77:2b:af:4a:
                    3a:99:df:ba:01:ff:8e:7a:ed:38:29:dd:7b:ad:af:
                    78:e2:fc:7d:4c:00:1c:24:91:38:1a:a4:fe:86:56:
                    60:ba:70:1c:c8:21:0c:29:18:d9:13:9f:9a:38:cc:
                    0b:dd:95:c7:07:2f:2e:ee:a6:32:32:ee:81:41:5c:
                    41:a8:01:5d:c5:0e:4c:0b:25:11:a4:9f:f0:fb:cd:
                    73:6f:8e:2b:1c:18:35:d1:3e:f7:00:72:ea:68:48:
                    57:93:6a:66:f1:22:12:d1:73:b7:aa:bd:ca:4f:0f:
                    7d:d4:db:71:8b:e6:97:7b:69:c7:f3:41:f0:66:45:
                    35:ea:4b:1d:e7:d9:55:a8:fb:11:62:6f:0b:55:af:
                    54:46:97:f0:3f:7b:a8:54:22:87:7e:d6:33:53:f3:
                    8b:55:04:e6:ce:dc:d8:5d:e6:ba:de:43:00:17:93:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:42:FF:DE:CD:72:3C:5F:20:FF:D4:69:1C:37:DE:38:8C:16:ED:6E
            X509v3 Authority Key Identifier:
                keyid:E4:AD:CD:7A:10:CE:A1:B5:BD:27:AC:85:82:E7:D8:06:26:20:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5K3NehDOobW9J6yFgufYBiYg2uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/15b08a-0299-401a-947f-69967100f868/1/5K3NehDOobW9J6yFgufYBiYg2uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/15b08a-0299-401a-947f-69967100f868/1/5K3NehDOobW9J6yFgufYBiYg2uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:23:de:b6:1e:10:15:ec:83:85:a6:1b:d1:17:1b:b2:8f:
         82:eb:22:9a:7d:38:97:ae:0e:e6:60:cc:2b:7b:f5:92:e5:5d:
         b5:b7:a3:20:93:83:13:36:12:eb:99:d7:36:af:71:78:88:6d:
         6a:c5:d9:ac:21:ab:8d:0e:d7:de:65:0e:ea:b5:9b:82:0f:c4:
         2f:64:33:67:cd:60:76:c2:bf:e4:8f:fb:ab:40:ff:50:b7:2c:
         74:ec:50:27:78:7f:41:56:ae:be:d3:1d:de:fd:a7:14:56:b2:
         b0:cd:a6:cf:67:f5:f6:a9:dc:a8:99:80:c8:81:c0:7b:a6:1f:
         ea:d2:de:64:09:9d:da:df:d4:e6:c2:1e:96:47:2d:83:23:17:
         cc:85:df:ed:84:7b:5f:c5:f0:a3:d2:cb:87:fa:60:b5:99:0b:
         9d:1e:b8:c3:ad:67:f6:a3:ec:55:1d:42:bb:5e:02:47:cd:62:
         d8:3f:d2:5e:a0:ea:49:83:d5:c7:a3:1c:a0:27:5e:ae:ae:aa:
         e9:2d:2e:d8:08:08:bd:15:94:c3:a1:35:ac:ee:97:27:c9:12:
         8c:b1:ef:c6:2e:78:2d:79:36:a3:74:6b:c4:3d:73:db:92:88:
         d2:4a:9c:15:4b:b7:21:22:d2:e1:e9:0b:b3:f5:fe:80:57:77:
         3a:67:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----