Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.mft
File:                     CUh19AZ5XbQqAXnfH7_F1prnEu4.mft (raw, json)
Hash identifier:          e0MVWbxreCDX3Q+2274vwHMaSBl8YXPFFBYT4pKKjjA=
Subject key identifier:   4F:8F:F6:A3:E7:59:45:22:92:A7:BF:66:81:AF:E6:D0:A8:E0:FF:D6
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       0185E7B3412CDB24E7671CEEFD05D1B02902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.mft
Manifest number:          030E
Signing time:             Wed 25 Jan 2023 06:52:42 +0000
Manifest this update:     Wed 25 Jan 2023 06:52:42 +0000
Manifest next update:     Thu 26 Jan 2023 06:52:42 +0000
Files and hashes:         1: CTPCu1KW9u8k4jdEJ7Xih4BeO4Y.roa (hash: fR4QT22fI3D1wLvGcD+LuUqgjvZskKGAc4IHr5Pue+8=)
                          2: CUh19AZ5XbQqAXnfH7_F1prnEu4.crl (hash: rQEcZz0u5yjVDHisq+KZQF9+PKiJbK33/wag97vfvag=)
                          3: D9KzO_nBs7qnYkvnAeCiPB9l8yc.roa (hash: GNHjIivgK151DOUUHVcvAKGgaxCXAUVtC4PDir3jE20=)
                          4: T_2f95dt_MbWu8kgOS9SlQpG7IQ.roa (hash: CnUUCEY8KpX6Rkdn7NJjJcd+F1XjnweWHt2GfLM3oYE=)
                          5: iaGQt8T0nHKuW0eM_M0qYO6giAw.roa (hash: NP0pFTnYlLXD/kKRPLi5DpGfoM+3OPsooQYjGwam1WI=)
                          6: jf5p5j8tiIRe5YQO0nGRDDOowN0.roa (hash: vnfT178qmSSCaggu4+ZvRlmtANrQ1PM+p5Lx9HmwaVo=)
                          7: u5JvY4qptEOpBpSfLd7MOxfp0r4.roa (hash: L2euOrbAuIb0MIWYIshPvZIhsK9/Py85H/t3XZkaCmI=)
                          8: xQol1jL2WILJSViYjtD-By8jjwU.roa (hash: AdUEeGAKbMO5ITU9SdBU8nNsSbXlFPejmolHS7/916E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e7:b3:41:2c:db:24:e7:67:1c:ee:fd:05:d1:b0:29:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Jan 25 06:52:42 2023 GMT
            Not After : Jan 26 06:52:42 2023 GMT
        Subject: CN=4f8ff6a3e759452292a7bf6681afe6d0a8e0ffd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:75:2b:dc:07:f7:d4:49:34:96:b4:50:ff:
                    bf:2a:bd:e2:96:c4:fa:da:a3:53:e6:e7:cf:5c:f9:
                    f3:c2:b7:a7:8c:f9:07:e5:57:97:23:70:1b:ba:f5:
                    55:b0:0f:e3:4d:96:63:bc:8b:6b:4e:df:af:e6:a2:
                    fd:8a:1f:c6:b4:1e:d8:f8:83:2f:06:9f:88:82:4f:
                    05:82:a3:67:98:4a:f2:ff:fb:b4:b5:7a:4a:55:d9:
                    c2:f4:cc:50:bc:2f:be:b3:ba:13:8b:c6:59:df:ad:
                    96:26:93:7a:60:70:eb:64:6c:b0:87:ad:e8:b9:6a:
                    4f:66:79:4c:a5:d3:96:24:33:03:f4:81:4a:29:e7:
                    0c:45:d0:ee:81:de:6b:ba:84:15:8c:45:62:0f:8b:
                    22:1d:c1:da:4f:61:f7:c5:25:b7:e9:68:59:14:46:
                    44:27:b4:e5:84:96:bd:28:94:17:21:a9:e9:0b:84:
                    1c:1b:5f:dc:bc:58:19:b9:31:84:61:3b:ef:79:31:
                    1f:46:60:77:93:4f:ba:91:cd:43:70:38:13:22:db:
                    42:dc:82:fb:fd:3e:34:00:e0:c2:e8:75:22:e7:58:
                    63:be:c2:8b:51:8f:43:b3:c6:1f:e3:02:b1:9c:fb:
                    ff:75:00:12:3a:e3:ee:3d:bf:c1:d3:b7:60:27:38:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8F:F6:A3:E7:59:45:22:92:A7:BF:66:81:AF:E6:D0:A8:E0:FF:D6
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:eb:80:09:c3:59:98:ed:fd:98:a5:84:e6:27:60:b2:4f:47:
         61:f0:97:62:a1:7a:cc:2f:55:e7:2b:20:33:ea:c0:0a:7d:7c:
         7b:16:9c:eb:8b:40:8a:ae:37:b2:e8:05:e3:2d:60:72:56:48:
         35:8a:c4:83:11:50:17:32:c6:6b:c2:ff:23:4d:ff:02:b6:50:
         49:c5:dc:cf:c3:97:df:01:6d:16:3d:bc:8e:2f:7a:bd:47:05:
         e4:4d:b9:ab:39:7d:fc:c6:25:dd:97:27:86:9f:89:82:71:b3:
         5e:db:e3:c2:2a:1a:35:34:7e:45:68:3e:91:cc:58:3f:b3:18:
         01:06:c6:52:27:55:71:5e:c7:a2:c5:90:26:3a:60:ae:dd:a4:
         ce:e9:59:e7:6c:20:83:f6:0d:89:6e:01:2f:06:f0:d4:5b:3f:
         74:c7:ee:48:88:f7:ef:b6:f1:54:6c:b4:c0:26:26:8f:01:d0:
         cc:48:d4:2f:8e:9b:ba:0c:e5:be:7e:40:37:07:3f:9f:84:26:
         35:aa:1d:ec:6c:6e:57:29:6f:69:8a:c1:81:98:52:2f:04:d1:
         13:a5:91:15:81:75:f9:6f:43:5f:64:65:d3:f7:ea:80:ba:f4:
         96:e8:0a:9b:cb:6c:49:3b:61:69:72:f5:79:0b:3a:a2:5f:eb:
         86:33:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----