Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.mft
File:                     1LJyGTKQP5gxPNwab9S38u2qQ1U.mft (raw, json)
Hash identifier:          TvvFet8CJjuE+TtnClotUPMPTiqQr7gFOa3vkdi8Zd8=
Subject key identifier:   37:B3:B1:13:96:46:EE:A7:56:43:33:66:2D:07:4B:96:1E:0E:7F:F4
Authority key identifier: D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
Certificate issuer:       /CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
Certificate serial:       018AFD5A6F3A322DC81A5DDF56791240ABFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.mft
Manifest number:          0F1F
Signing time:             Thu 05 Oct 2023 01:01:16 +0000
Manifest this update:     Thu 05 Oct 2023 01:01:16 +0000
Manifest next update:     Fri 06 Oct 2023 01:01:16 +0000
Files and hashes:         1: 1LJyGTKQP5gxPNwab9S38u2qQ1U.crl (hash: ImTbbaD6qpek4eS8lrFBcbfYZJVaS7gEME9zoscFhX8=)
                          2: MXpjfgEwxFwqvIMeg8maQAByHLw.roa (hash: HgaYcYsD/QtxpQYJgH44KHCcqXe5mihWYunB9UeMF/w=)
                          3: YfP3UTZddVydeATAvZa8_JRxyhw.roa (hash: CIRbMPj5TVhgnWVkvqMu0MZS197cCz0/NHWDUqeoIUs=)
                          4: e8Kix7HcErhFinhqKMaPhpvYFCU.roa (hash: dzAtx5IsqkmcZpkR28rHw/c8ljzbMAOiiGAG2qlP2DA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fd:5a:6f:3a:32:2d:c8:1a:5d:df:56:79:12:40:ab:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
        Validity
            Not Before: Oct  5 01:01:16 2023 GMT
            Not After : Oct  6 01:01:16 2023 GMT
        Subject: CN=37b3b1139646eea7564333662d074b961e0e7ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:ee:25:3d:c8:4c:57:6f:03:53:37:aa:a9:
                    5d:81:75:4a:fa:6e:e4:c6:f5:b6:e8:b9:d3:3a:1c:
                    8b:cf:85:9c:a2:93:5e:6a:21:7b:37:a7:62:46:e5:
                    cb:e7:2d:25:fc:84:d0:7f:79:2e:55:22:74:1a:cd:
                    c3:77:a4:81:41:f2:a7:14:05:12:12:87:99:fc:cb:
                    f3:8c:ff:87:3b:a0:ba:70:4a:89:0d:05:8e:cb:44:
                    2a:47:46:7f:b8:bc:8c:e5:21:51:85:e3:fd:e3:0f:
                    e3:ec:fc:02:e4:01:e2:60:fc:9f:f1:d2:a4:30:c4:
                    e9:08:6b:f0:01:22:1d:f6:2f:ea:dc:a5:49:74:bb:
                    4e:b0:78:9a:08:20:57:0e:ac:7d:31:ee:af:ac:9c:
                    93:3d:14:0b:49:c3:73:8b:56:90:ac:12:78:11:71:
                    71:68:17:c2:64:a5:c5:de:d4:bb:0a:ea:42:00:f9:
                    28:54:f7:6a:40:89:9f:63:2a:35:7b:0d:8d:2b:c4:
                    d7:c7:cf:39:80:99:f2:ed:e0:ee:36:4f:b5:be:04:
                    08:0c:8a:25:1b:82:a6:9e:1a:ef:7e:14:d9:fc:a9:
                    60:77:47:6d:d0:79:ae:9c:2c:d3:81:5c:d0:51:8e:
                    e6:18:37:62:ff:b0:e0:b0:13:49:d1:9a:53:88:81:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B3:B1:13:96:46:EE:A7:56:43:33:66:2D:07:4B:96:1E:0E:7F:F4
            X509v3 Authority Key Identifier:
                keyid:D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c7:8a:87:d6:eb:b1:63:94:0f:8d:ba:32:6f:72:2c:0a:2f:
         6d:5a:0d:6a:b9:fb:60:ab:4d:c5:7c:f8:4e:09:1c:4d:fc:cc:
         00:9c:40:7a:5a:33:1a:f8:a9:56:e8:1c:d1:d4:9d:32:7f:f6:
         a4:8c:23:33:6c:67:1a:03:21:4b:10:69:43:7b:ba:ab:52:bb:
         2f:c7:3d:21:0e:44:96:78:03:25:82:01:40:7c:c7:a5:6c:5c:
         68:c6:3d:76:e0:e5:40:b1:d4:55:4c:24:58:20:27:47:a7:26:
         32:d3:eb:9d:49:6d:66:97:16:18:e0:08:e4:ab:a5:0c:45:4c:
         db:62:cd:eb:bb:75:ff:c9:b8:2f:50:ef:33:b0:0d:9a:35:8c:
         75:9d:b7:2d:36:58:5e:76:d8:e6:17:0c:11:67:ad:ca:14:9f:
         01:8a:83:eb:68:2d:20:15:ab:98:22:52:5d:ce:67:42:d0:dc:
         51:25:3d:d4:a0:c8:44:a8:9a:2b:08:5f:78:4a:38:80:68:04:
         20:d8:89:4f:1d:32:d2:49:af:8e:f3:66:8c:9f:a4:62:4e:6c:
         8b:86:c2:fe:6d:6c:94:56:43:b9:d2:a9:cc:64:f5:d9:41:11:
         1a:84:03:3c:0c:9f:11:5c:09:64:90:12:46:5c:9c:af:7f:4e:
         b0:d2:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----