Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/siNtxIRLnnNKU6cDTorcNQyrlQo.mft
File:                     siNtxIRLnnNKU6cDTorcNQyrlQo.mft (raw, json)
Hash identifier:          ZHfXrXxX3NTAdsBMDm+vhvYTH0C3XiYzNdGwwF9ggp4=
Subject key identifier:   44:77:ED:FC:C6:F3:98:AA:56:63:0E:0E:D4:DC:4D:DF:27:11:EC:00
Authority key identifier: B2:23:6D:C4:84:4B:9E:73:4A:53:A7:03:4E:8A:DC:35:0C:AB:95:0A
Certificate issuer:       /CN=b2236dc4844b9e734a53a7034e8adc350cab950a
Certificate serial:       018C8FAFC7BC0E7600D73E779E75062A3306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siNtxIRLnnNKU6cDTorcNQyrlQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/siNtxIRLnnNKU6cDTorcNQyrlQo.mft
Manifest number:          0FED
Signing time:             Fri 22 Dec 2023 04:01:50 +0000
Manifest this update:     Fri 22 Dec 2023 04:01:50 +0000
Manifest next update:     Sat 23 Dec 2023 04:01:50 +0000
Files and hashes:         1: siNtxIRLnnNKU6cDTorcNQyrlQo.crl (hash: PakrrGV1MsTS0wUO+J6u2N37QjNIBENI3PliZiWTgtc=)
                          2: tCtJh0IZfym3ws2sQ6I2DGSui9M.roa (hash: rlMzgdxK7qebGVbWumBuEk3exefpPjeGk7DwURjhBt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8f:af:c7:bc:0e:76:00:d7:3e:77:9e:75:06:2a:33:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2236dc4844b9e734a53a7034e8adc350cab950a
        Validity
            Not Before: Dec 22 04:01:50 2023 GMT
            Not After : Dec 23 04:01:50 2023 GMT
        Subject: CN=4477edfcc6f398aa56630e0ed4dc4ddf2711ec00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:6f:64:5b:0d:d0:6f:9b:4a:01:07:65:62:
                    e9:0b:f8:db:dc:45:d9:f1:ea:7a:50:67:21:0a:e6:
                    ac:69:03:26:a9:71:22:9c:2e:a6:a4:48:1d:3c:89:
                    12:a9:e5:62:09:66:50:b6:4d:53:0e:9e:4f:bf:74:
                    fb:ca:04:43:54:41:58:b9:8f:b5:bc:a1:68:49:ba:
                    5a:c2:39:62:01:28:22:d6:29:ae:4d:56:22:56:6f:
                    c2:50:59:7b:f4:74:e7:b6:e6:b3:8e:89:4e:85:6c:
                    c0:f7:67:4b:8b:cb:98:98:e0:39:eb:b0:c3:62:d4:
                    da:d5:df:8f:1c:af:8d:48:e1:70:47:66:59:bd:bf:
                    f1:f2:ed:24:a1:bb:4c:1a:ec:97:86:96:c6:f8:2b:
                    4e:ec:6f:46:05:54:2c:66:de:f3:9b:f6:43:0f:a3:
                    97:f3:c6:b8:56:53:df:ab:78:bd:5d:1b:dc:88:31:
                    98:b1:79:d2:23:08:2d:2e:9c:13:0f:c8:ee:6e:44:
                    c6:ee:1f:5b:fe:ee:15:30:64:e7:78:a3:7c:4e:2e:
                    d5:5e:44:75:73:bf:c9:9b:6f:50:86:d9:50:cd:52:
                    52:7d:8b:ac:8b:b5:70:96:ac:fa:35:21:a8:5d:49:
                    bc:a7:fd:9d:b7:d7:9e:d8:6e:d2:70:7d:32:f3:e3:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:77:ED:FC:C6:F3:98:AA:56:63:0E:0E:D4:DC:4D:DF:27:11:EC:00
            X509v3 Authority Key Identifier:
                keyid:B2:23:6D:C4:84:4B:9E:73:4A:53:A7:03:4E:8A:DC:35:0C:AB:95:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siNtxIRLnnNKU6cDTorcNQyrlQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/siNtxIRLnnNKU6cDTorcNQyrlQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/siNtxIRLnnNKU6cDTorcNQyrlQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:10:e6:d0:8c:f2:d4:ef:0f:78:88:83:15:a7:c2:6d:42:
         ce:3d:a4:b2:f3:16:55:72:0c:6b:19:8f:76:66:11:7d:b5:0b:
         51:03:0a:cb:35:fe:86:22:8f:6f:61:9a:4d:15:2c:6d:27:9b:
         65:bd:0b:91:4c:1f:ca:0a:bf:62:13:2e:2d:f4:72:2f:54:8e:
         66:71:68:31:57:ab:7b:72:83:37:58:85:80:ec:99:9e:95:cc:
         77:35:e7:ef:86:b0:c4:21:48:37:6b:7e:b5:20:22:9c:03:86:
         ea:89:50:22:17:59:16:19:2a:17:6e:b0:24:f4:da:ef:85:78:
         e8:9b:b4:f0:8e:e7:2c:d6:1a:47:c6:13:d3:6b:fb:3e:fb:ea:
         2b:3e:70:9a:c9:fc:d9:0e:76:75:13:c8:d5:38:ec:0a:83:fe:
         6d:96:3d:47:f1:3d:c7:5d:d7:14:3a:6e:0e:c5:db:34:a8:e5:
         27:1b:02:f9:02:64:e7:8f:0f:12:f9:f3:51:e3:fb:43:de:39:
         76:5a:86:aa:20:0e:83:a7:ac:22:7f:92:19:4a:79:2f:a4:5e:
         0e:af:96:03:96:be:af:f8:cd:f6:64:d2:dd:95:1b:c6:81:cb:
         87:a8:49:2c:34:62:6e:b6:65:7e:ab:ce:a8:70:ac:db:c4:f3:
         56:0f:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----