Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/TGUyOq-l8FA27jCR_YtrRJwQF8M.mft
File:                     TGUyOq-l8FA27jCR_YtrRJwQF8M.mft (raw, json)
Hash identifier:          NnzvYgswvvAgu+iYd6v2HI0n2Tn8uLoX3WPs38h3MDQ=
Subject key identifier:   60:3B:7F:39:65:68:70:70:8E:4B:F0:44:C3:F8:A4:FC:BE:2E:B5:35
Authority key identifier: 4C:65:32:3A:AF:A5:F0:50:36:EE:30:91:FD:8B:6B:44:9C:10:17:C3
Certificate issuer:       /CN=4c65323aafa5f05036ee3091fd8b6b449c1017c3
Certificate serial:       01877447D3B857F79961B72AB37182C03914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGUyOq-l8FA27jCR_YtrRJwQF8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/TGUyOq-l8FA27jCR_YtrRJwQF8M.mft
Manifest number:          04FB
Signing time:             Wed 12 Apr 2023 07:04:36 +0000
Manifest this update:     Wed 12 Apr 2023 07:04:36 +0000
Manifest next update:     Thu 13 Apr 2023 07:04:36 +0000
Files and hashes:         1: 1-Hy865tZWPhoIQBVGbM1_AfKyF4.roa (hash: ev5bRyckdd3NSdVAiSDlb/xC3jGufVcu6/bQIWkHvfc=)
                          2: TGUyOq-l8FA27jCR_YtrRJwQF8M.crl (hash: NUv8DpES6iE0MzD3VBlPd8PSFMfkKb1UktdgS/fbkew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:74:47:d3:b8:57:f7:99:61:b7:2a:b3:71:82:c0:39:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c65323aafa5f05036ee3091fd8b6b449c1017c3
        Validity
            Not Before: Apr 12 07:04:36 2023 GMT
            Not After : Apr 13 07:04:36 2023 GMT
        Subject: CN=603b7f39656870708e4bf044c3f8a4fcbe2eb535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c2:78:e2:cd:8b:fc:2f:de:19:a7:c1:51:37:
                    37:b7:4f:40:49:fe:85:c3:54:75:b8:f6:71:a0:57:
                    df:d8:f5:61:3e:cc:df:1c:0c:5d:28:df:56:d2:da:
                    7f:2a:9d:4b:cc:17:97:dc:ad:bc:51:9d:53:6d:5b:
                    05:0b:91:24:3c:2d:09:79:d2:27:fb:e9:4b:fd:46:
                    0a:10:80:79:68:c4:b4:15:fc:ec:93:0d:8b:ab:13:
                    8f:60:04:21:e3:8f:72:7d:56:de:fb:0d:7f:1c:e9:
                    83:cb:57:00:cb:3d:96:bb:c3:18:16:31:53:82:d4:
                    66:64:32:89:d0:b5:16:1a:25:08:94:91:45:45:58:
                    07:b6:0a:53:f3:07:d5:db:26:51:9d:8e:6a:ee:f3:
                    e4:28:2c:90:65:c8:2c:81:c3:38:f4:c1:f2:2e:7b:
                    0a:9b:26:c7:e3:29:1e:6e:b3:07:ba:6a:0c:ea:92:
                    85:ef:67:61:dd:fc:e9:b7:c6:00:b4:3e:16:71:4b:
                    fb:63:fb:79:f0:16:62:30:66:20:e9:7e:3f:42:42:
                    ee:b9:ca:ed:9d:fc:03:ec:3b:60:55:55:1b:c8:e3:
                    45:e6:23:00:71:8f:92:29:95:bd:df:6a:2c:d7:5b:
                    b5:56:f1:cc:fa:9b:1e:6e:4a:e2:46:a1:08:4c:c6:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3B:7F:39:65:68:70:70:8E:4B:F0:44:C3:F8:A4:FC:BE:2E:B5:35
            X509v3 Authority Key Identifier:
                keyid:4C:65:32:3A:AF:A5:F0:50:36:EE:30:91:FD:8B:6B:44:9C:10:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGUyOq-l8FA27jCR_YtrRJwQF8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/TGUyOq-l8FA27jCR_YtrRJwQF8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c21c7c-ca36-431d-9336-2d9bf7d4ec0d/1/TGUyOq-l8FA27jCR_YtrRJwQF8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:18:d0:7b:5b:9c:68:af:1d:07:be:21:b3:ea:bd:78:df:09:
         1b:8c:92:8f:37:77:1f:ae:ef:0f:bf:5a:87:a9:f9:78:56:04:
         75:53:99:63:b0:83:a0:d1:0e:52:77:a7:61:e4:ef:3d:4a:38:
         10:75:e8:44:eb:42:73:b6:01:c3:ee:eb:3f:87:d9:75:09:81:
         3f:db:85:15:a9:76:c2:9a:88:49:59:75:2f:9a:8c:a5:7b:e4:
         c6:5e:44:79:fe:11:f3:ff:98:1d:ad:15:9f:27:a9:41:24:ae:
         af:af:c2:7c:31:20:a5:62:9c:fd:3d:95:4c:9b:9d:1f:c2:ba:
         38:b3:11:ab:c3:68:17:0a:98:1f:f6:65:61:3b:a2:6a:5d:a4:
         2d:16:6a:4d:c5:ce:91:87:d5:d2:b4:e9:81:98:46:46:9c:f1:
         72:ba:19:33:1b:de:fe:21:37:9f:9a:fb:df:b5:28:08:cc:64:
         f9:d6:33:b0:05:61:2d:bf:29:28:a2:8b:1a:8d:be:e3:9d:22:
         15:e5:ef:c7:fd:42:c6:64:82:2f:84:ca:6b:42:c8:7c:6a:c7:
         35:75:90:7a:ce:e5:d1:85:13:19:bd:a2:ad:28:ce:07:6e:a5:
         a9:1a:4b:16:f7:fd:77:8b:2c:3a:e2:d5:fe:9e:37:6b:f0:ae:
         80:e7:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----