Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/6t05tpjkJHL44dE_k_IVS2babjI.mft
File:                     6t05tpjkJHL44dE_k_IVS2babjI.mft (raw, json)
Hash identifier:          BIsjoo8wiwVIZmBkIvMR/4hXFmtQ1gAazEpPHqDCt6E=
Subject key identifier:   49:59:57:C0:2E:B2:4A:CD:23:6F:20:55:5C:63:C6:AA:8B:B2:D4:CE
Authority key identifier: EA:DD:39:B6:98:E4:24:72:F8:E1:D1:3F:93:F2:15:4B:66:DA:6E:32
Certificate issuer:       /CN=eadd39b698e42472f8e1d13f93f2154b66da6e32
Certificate serial:       0187DAE3EEE9EF3BEF5DD964C94F019B0845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6t05tpjkJHL44dE_k_IVS2babjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/6t05tpjkJHL44dE_k_IVS2babjI.mft
Manifest number:          06A9
Signing time:             Tue 02 May 2023 05:16:23 +0000
Manifest this update:     Tue 02 May 2023 05:16:23 +0000
Manifest next update:     Wed 03 May 2023 05:16:23 +0000
Files and hashes:         1: 4gQNNdy13eI5bH64zBapmsV2nmI.roa (hash: V5P396E6NA/zfNCi+mtpiYKxAKufXkfdVSvMkvmcSmI=)
                          2: 6t05tpjkJHL44dE_k_IVS2babjI.crl (hash: XkAwF76R4oyRbWEahWL0yBnRcIW3GO2ze9cyi9hodqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:da:e3:ee:e9:ef:3b:ef:5d:d9:64:c9:4f:01:9b:08:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eadd39b698e42472f8e1d13f93f2154b66da6e32
        Validity
            Not Before: May  2 05:16:23 2023 GMT
            Not After : May  3 05:16:23 2023 GMT
        Subject: CN=495957c02eb24acd236f20555c63c6aa8bb2d4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d3:e4:29:ee:cc:5f:aa:58:cf:64:40:54:82:
                    59:02:b7:e4:5b:4d:83:9f:29:c9:8a:65:a5:37:d0:
                    31:ba:e7:7e:40:a9:df:1f:25:8a:40:4c:f7:3d:22:
                    79:88:9e:2e:2f:b7:1c:4b:bb:f1:75:be:ba:c2:e8:
                    b3:dc:1e:45:31:0c:13:ae:65:18:2f:d7:af:fa:e2:
                    96:73:cc:5c:2c:df:2b:6c:9a:a9:65:cc:f3:d9:c6:
                    be:98:81:23:32:f6:65:92:eb:4e:9f:ef:f6:43:9c:
                    eb:e0:ce:82:a1:50:38:f0:3a:c5:80:28:54:23:54:
                    03:56:e7:fc:b5:a3:18:c4:30:95:57:47:f7:19:c0:
                    55:95:dd:a8:8b:a6:3d:6d:06:c1:20:1d:ec:49:34:
                    16:78:f1:20:3c:6e:6d:cb:41:7d:49:b7:cd:8a:9c:
                    9f:3d:8e:55:1c:00:e5:f3:9d:5a:35:eb:8f:e0:66:
                    22:47:1f:79:27:d4:bc:5d:98:a4:ad:97:da:de:a8:
                    e8:56:2b:7e:7c:99:cd:c3:c6:5a:87:16:9b:01:8f:
                    03:b2:33:e9:16:06:ff:06:10:cc:1e:ed:2b:a4:89:
                    13:90:82:a8:28:b6:52:22:28:35:bc:e6:ec:ec:ec:
                    7f:b7:05:40:d5:f7:a6:95:a3:1d:cc:90:6e:c0:2f:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:57:C0:2E:B2:4A:CD:23:6F:20:55:5C:63:C6:AA:8B:B2:D4:CE
            X509v3 Authority Key Identifier:
                keyid:EA:DD:39:B6:98:E4:24:72:F8:E1:D1:3F:93:F2:15:4B:66:DA:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t05tpjkJHL44dE_k_IVS2babjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/6t05tpjkJHL44dE_k_IVS2babjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/6t05tpjkJHL44dE_k_IVS2babjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f9:eb:f1:35:ef:28:b5:44:ba:b4:e9:76:73:ff:f2:d0:4d:
         43:54:be:df:12:a0:ab:b4:df:69:c9:51:2e:44:37:6c:fa:33:
         9d:07:61:e9:a5:e4:ce:e2:b8:40:78:3d:df:aa:5f:de:7f:9c:
         1c:6d:0a:b2:c9:89:7c:f9:54:bd:47:5d:48:68:84:05:c8:f9:
         67:ee:61:93:39:e3:1a:94:18:98:fa:1e:aa:9c:dd:8f:37:31:
         c3:9d:ab:7b:47:aa:4a:fe:1d:d0:7e:c5:40:98:1e:97:da:7d:
         8f:bb:31:39:f3:80:5c:06:63:c3:99:cb:40:ea:cb:55:0a:fa:
         09:3a:fc:d2:35:23:0a:fe:30:92:14:73:af:20:82:5c:eb:27:
         cd:9d:cd:f4:34:50:38:ea:64:ae:af:cb:4b:2d:d2:af:dc:b6:
         40:96:e3:9f:c2:2b:63:cb:88:85:1b:dd:f5:12:9d:1a:42:47:
         c0:c4:7b:69:be:69:9d:0e:72:f1:1f:99:bb:f4:5c:45:ef:31:
         2b:49:45:f4:17:0c:38:a0:0d:b6:69:6b:20:74:3f:23:b9:a4:
         dd:c0:4e:8b:11:18:b9:31:16:8c:ed:5f:3f:28:cf:17:16:04:
         fa:f2:28:13:be:e5:53:a4:5a:7c:17:2f:e7:76:2f:6e:89:23:
         3d:2b:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----