Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/72186e-17a3-46d1-a294-d5a78fc59d12/1/EDamPnF6tYzvZqxisgZ0gGls_p4.mft
File:                     EDamPnF6tYzvZqxisgZ0gGls_p4.mft (raw, json)
Hash identifier:          V6YwYUyzI9NuwxpCZePWCjN0IYibrPMGEtJ2Zqr3x4U=
Subject key identifier:   C1:07:0E:E1:F6:7E:20:C0:15:DB:DC:B5:EA:74:3E:EA:1A:AB:9C:7A
Authority key identifier: 10:36:A6:3E:71:7A:B5:8C:EF:66:AC:62:B2:06:74:80:69:6C:FE:9E
Certificate issuer:       /CN=1036a63e717ab58cef66ac62b2067480696cfe9e
Certificate serial:       018A48E475DE6C83F5E32FE836BE1A043BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDamPnF6tYzvZqxisgZ0gGls_p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/72186e-17a3-46d1-a294-d5a78fc59d12/1/EDamPnF6tYzvZqxisgZ0gGls_p4.mft
Manifest number:          03FC
Signing time:             Thu 31 Aug 2023 00:00:46 +0000
Manifest this update:     Thu 31 Aug 2023 00:00:46 +0000
Manifest next update:     Fri 01 Sep 2023 00:00:46 +0000
Files and hashes:         1: EDamPnF6tYzvZqxisgZ0gGls_p4.crl (hash: zdQYrnivoJceVfoBhIDD18gS3E2/VHdupggjjra0HDc=)
                          2: dYtB4X-9yz1Scp5eEk6JkcVXtLQ.roa (hash: RaxCie5KuhzWmVd19CRzkUI02hmKtis9u2At58y4+Os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:48:e4:75:de:6c:83:f5:e3:2f:e8:36:be:1a:04:3b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1036a63e717ab58cef66ac62b2067480696cfe9e
        Validity
            Not Before: Aug 31 00:00:46 2023 GMT
            Not After : Sep  1 00:00:46 2023 GMT
        Subject: CN=c1070ee1f67e20c015dbdcb5ea743eea1aab9c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:a4:f9:dd:ef:73:3c:6c:dc:bd:d7:63:56:
                    09:83:91:dd:77:fa:78:0b:23:38:ac:4e:bb:12:8a:
                    7a:42:46:5f:a1:cc:4f:f2:26:5c:47:7e:2d:27:62:
                    b8:a8:2e:80:f5:34:9b:25:05:b3:94:46:20:2b:60:
                    3d:4e:69:7b:ec:e8:a8:39:b0:8b:26:92:3a:fb:aa:
                    b4:1b:8a:69:3e:ea:15:03:bc:84:24:22:40:4f:86:
                    7e:77:45:19:32:88:89:54:0c:ad:f6:95:54:49:d2:
                    7c:a9:09:b7:2d:a8:cd:2c:8a:46:eb:c5:f0:69:cb:
                    fc:ed:f7:c7:95:68:8f:4d:56:ec:f7:5b:e8:cd:7f:
                    e9:91:1d:7a:bc:77:b2:d1:42:7f:43:1f:70:f3:6f:
                    53:07:03:76:c4:38:ad:38:97:81:81:e2:c8:1e:c9:
                    c2:ab:19:9f:cf:73:6a:22:5e:a4:fb:d7:1b:d9:77:
                    e8:50:f8:e6:8e:e5:ad:19:3f:f7:a1:7a:79:05:e6:
                    f7:2c:a7:a8:c3:fa:13:cb:15:4f:ee:a0:e2:fe:79:
                    96:af:29:13:d4:f6:c4:57:ea:4a:f6:e8:70:a3:24:
                    d3:9d:fe:67:c8:15:0c:d5:bd:7f:e4:c2:d0:b7:5d:
                    36:1a:7c:01:2b:78:7e:30:cc:1e:fb:72:d4:35:f6:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:07:0E:E1:F6:7E:20:C0:15:DB:DC:B5:EA:74:3E:EA:1A:AB:9C:7A
            X509v3 Authority Key Identifier:
                keyid:10:36:A6:3E:71:7A:B5:8C:EF:66:AC:62:B2:06:74:80:69:6C:FE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDamPnF6tYzvZqxisgZ0gGls_p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72186e-17a3-46d1-a294-d5a78fc59d12/1/EDamPnF6tYzvZqxisgZ0gGls_p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72186e-17a3-46d1-a294-d5a78fc59d12/1/EDamPnF6tYzvZqxisgZ0gGls_p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cd:7e:16:c5:6b:c1:9f:d3:3a:af:ae:a8:65:05:d8:e1:e2:
         05:8e:88:a7:1e:7a:59:38:93:a8:cc:39:2a:8b:11:03:e7:73:
         c6:a9:99:2a:6b:b3:e5:03:96:15:45:00:b2:44:33:cf:26:55:
         91:a6:94:c7:24:23:a2:29:64:1a:57:55:60:2b:ff:13:8d:39:
         0c:73:78:24:b5:4c:00:8a:9b:bb:f9:10:76:7a:95:7f:28:3f:
         f9:e2:d8:3c:58:5d:dd:d3:6e:b7:c2:d3:5e:60:81:1b:56:cf:
         8b:10:f5:47:4f:c7:c0:89:d1:c1:65:f0:0b:79:fe:7e:00:66:
         a7:77:a7:7f:08:f3:fb:9f:28:05:64:05:78:f5:e4:03:5e:10:
         58:94:28:3f:ed:b7:94:c6:9b:3f:a2:c7:d6:3d:e4:9a:62:1a:
         7f:73:70:00:1b:d7:3a:bd:29:99:86:83:38:e0:96:d6:d2:a7:
         f4:07:1a:86:b9:35:cb:a3:ee:0c:ab:fd:89:57:f5:cd:33:81:
         a7:fa:eb:3d:21:6c:cd:ea:05:07:38:e4:a4:b7:58:91:40:6a:
         76:74:ff:ad:bf:b3:bc:d0:13:2a:b8:47:d6:6e:50:10:da:f7:
         cd:3c:05:88:2c:52:26:52:84:13:3b:a4:f0:c8:90:3e:e8:1b:
         8a:08:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----