Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.mft
File:                     CnEjTyVmNJor3xf4kvjUcQu_-BI.mft (raw, json)
Hash identifier:          Cj8mR2NFXbnc+1jw9huSIddfbSBsMALtVLIr1EZKHCQ=
Subject key identifier:   59:A8:A2:70:DF:F8:3B:D5:9E:C8:51:A0:46:DE:7B:B4:95:81:E9:FA
Authority key identifier: 0A:71:23:4F:25:66:34:9A:2B:DF:17:F8:92:F8:D4:71:0B:BF:F8:12
Certificate issuer:       /CN=0a71234f2566349a2bdf17f892f8d4710bbff812
Certificate serial:       0188E3519CFA5121743A27539C1F90178950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CnEjTyVmNJor3xf4kvjUcQu_-BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.mft
Manifest number:          0613
Signing time:             Thu 22 Jun 2023 13:35:56 +0000
Manifest this update:     Thu 22 Jun 2023 13:35:56 +0000
Manifest next update:     Fri 23 Jun 2023 13:35:56 +0000
Files and hashes:         1: CnEjTyVmNJor3xf4kvjUcQu_-BI.crl (hash: k8pas1KPZo63xbFEweIQiDGFst/os/hRG68mlGA70W0=)
                          2: WrJoTgRd27qdDOXrlq0-kj9cBUs.roa (hash: bPsup+crcphb2JiYa44MkqypgJSAGQk0PVhsZS3P3Ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:51:9c:fa:51:21:74:3a:27:53:9c:1f:90:17:89:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a71234f2566349a2bdf17f892f8d4710bbff812
        Validity
            Not Before: Jun 22 13:35:56 2023 GMT
            Not After : Jun 23 13:35:56 2023 GMT
        Subject: CN=59a8a270dff83bd59ec851a046de7bb49581e9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:35:73:0e:3b:a9:1e:47:fa:bf:05:c2:8e:
                    57:61:b4:13:e7:cf:54:df:b9:1f:6f:b8:a6:b6:fa:
                    7e:a8:70:f4:65:8b:78:76:5c:4e:4f:c9:6d:e9:c9:
                    17:08:13:1e:dd:e0:fb:e3:a8:4b:a3:82:0c:67:7c:
                    97:09:10:ae:7c:77:1e:a4:fe:6d:d4:e1:22:df:6b:
                    23:04:28:8f:62:6a:ef:33:ea:3e:d9:cd:d2:84:cc:
                    04:c0:55:db:12:71:09:2e:aa:f8:e3:b2:e3:98:94:
                    61:a9:b0:1c:f7:01:f7:e5:ae:67:72:e5:ee:e1:f1:
                    7b:35:f6:76:9f:6b:fa:c0:15:cb:82:13:aa:92:d8:
                    d6:8e:e9:92:b0:2a:9f:f2:c6:04:67:5d:5b:64:16:
                    25:50:60:d9:98:6f:19:33:75:d2:51:c3:b1:a3:75:
                    44:2d:c0:79:5f:6a:ce:63:b0:38:3a:60:71:4a:59:
                    14:ea:96:d3:45:f5:4e:38:9a:71:29:6f:f1:cf:3f:
                    e3:20:82:f7:b3:1e:92:52:79:90:e1:da:33:dd:9b:
                    b0:d8:65:f5:3b:37:89:41:7d:60:75:09:74:4d:4c:
                    c8:f3:6c:f2:7c:e2:b0:6c:da:b0:b2:e2:ad:2e:50:
                    5f:77:2f:4a:59:9c:ae:59:ea:11:37:8e:c4:7f:9b:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:A2:70:DF:F8:3B:D5:9E:C8:51:A0:46:DE:7B:B4:95:81:E9:FA
            X509v3 Authority Key Identifier:
                keyid:0A:71:23:4F:25:66:34:9A:2B:DF:17:F8:92:F8:D4:71:0B:BF:F8:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnEjTyVmNJor3xf4kvjUcQu_-BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c2:2f:5c:1e:1d:06:bc:8a:fd:b4:06:33:c2:c0:c8:1a:46:
         6b:c3:e7:a6:3e:ac:23:82:04:de:ad:a3:08:2e:ae:65:f2:9d:
         b6:ef:99:ed:2f:52:91:f9:4e:ff:af:03:35:9e:84:36:e7:81:
         4a:6c:e0:2b:9c:04:d8:8e:7e:e4:2a:3b:ad:89:97:63:cd:8a:
         ca:cd:83:e0:78:8b:ca:34:15:25:75:c2:40:ee:5d:8e:bb:0b:
         fb:50:ec:09:c2:76:41:30:bc:86:c8:6d:0c:28:a7:0d:0c:0c:
         48:c5:65:66:ea:14:de:a3:a0:47:e7:cc:29:9f:bb:df:ab:51:
         35:a1:d3:52:8c:ab:24:c7:52:76:69:56:b6:69:2c:36:d8:c6:
         92:2f:bd:77:18:d6:6f:3f:51:cf:70:69:47:32:e0:b7:6d:8b:
         b2:1f:97:2f:ff:21:f4:6b:01:50:32:f8:6f:8b:84:90:d8:7e:
         3d:21:7b:67:40:d8:42:80:26:9d:66:48:c0:67:75:46:2e:c0:
         29:55:13:98:6b:f1:3c:09:0f:05:7e:c6:e4:7b:9a:1e:7e:03:
         f5:ab:1f:6e:c7:90:8a:cb:30:32:02:32:9b:9d:c6:70:05:31:
         46:b7:7f:93:6f:72:ea:43:4e:f6:cb:09:10:fd:31:51:65:95:
         1e:ee:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----