Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/0VlD59POykUyecu1EnvZdHEpw-4.mft
File:                     0VlD59POykUyecu1EnvZdHEpw-4.mft (raw, json)
Hash identifier:          8A6LhoNUHqWskch0NirocpUjjenXd16nTgEyNpTS++Q=
Subject key identifier:   BC:29:F0:3E:6A:CB:8B:CC:A9:18:5E:0C:F3:9C:EE:83:F3:C1:A8:F0
Authority key identifier: D1:59:43:E7:D3:CE:CA:45:32:79:CB:B5:12:7B:D9:74:71:29:C3:EE
Certificate issuer:       /CN=d15943e7d3ceca453279cbb5127bd9747129c3ee
Certificate serial:       01898546C071D604FFAB1A07579A3FB14B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VlD59POykUyecu1EnvZdHEpw-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/0VlD59POykUyecu1EnvZdHEpw-4.mft
Manifest number:          0E50
Signing time:             Mon 24 Jul 2023 00:22:33 +0000
Manifest this update:     Mon 24 Jul 2023 00:22:33 +0000
Manifest next update:     Tue 25 Jul 2023 00:22:33 +0000
Files and hashes:         1: 0VlD59POykUyecu1EnvZdHEpw-4.crl (hash: seTI7NZxb7wANYl7DmIjfpOX6aYYCSPbw7Pl3Hb/nEs=)
                          2: XIFCxt9Teli_YvIM9pP0Qo98RSo.roa (hash: 39r978Oh911CYuI9tt4W6zriGjC0gx5rUiNrRX7MRbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:85:46:c0:71:d6:04:ff:ab:1a:07:57:9a:3f:b1:4b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15943e7d3ceca453279cbb5127bd9747129c3ee
        Validity
            Not Before: Jul 24 00:22:33 2023 GMT
            Not After : Jul 25 00:22:33 2023 GMT
        Subject: CN=bc29f03e6acb8bcca9185e0cf39cee83f3c1a8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:7c:49:15:d6:00:e6:da:b3:b7:a9:e5:83:
                    f3:a7:b9:a1:4e:ae:c5:eb:a0:47:03:fc:d5:b8:60:
                    75:52:70:1a:8d:a3:75:51:89:59:33:a1:75:0d:69:
                    0c:ad:d3:0f:53:1f:b0:ed:5c:56:b4:ee:fc:a0:47:
                    92:bb:2e:69:3c:87:5f:6e:4a:74:05:2d:26:5e:39:
                    11:9d:36:67:8b:ff:2a:85:61:97:77:54:ee:a4:c9:
                    d7:69:5f:93:93:b8:b8:e1:ef:a5:5a:e1:fb:a4:6b:
                    b0:5f:42:ed:97:ae:d9:81:d6:df:95:0f:6b:cf:76:
                    17:9f:cc:1f:b3:bf:bd:29:79:ca:db:73:49:6b:60:
                    a4:7b:78:9d:c7:01:d3:6e:0c:38:b0:bd:4e:47:2c:
                    43:30:4b:78:69:3f:ab:61:cf:3e:b2:b0:48:67:55:
                    07:a2:ff:fd:08:64:86:3c:f7:e9:6d:c2:0a:03:69:
                    71:02:11:da:bc:a3:bb:41:ff:ff:a4:87:f5:66:e7:
                    77:fa:64:c1:88:f9:f8:d6:5e:a3:ce:49:c4:39:ce:
                    cd:ca:aa:20:9f:d8:04:8c:dc:6a:c1:f5:02:2f:e2:
                    68:a0:ac:df:26:af:36:ba:c6:dd:5f:da:cc:51:88:
                    b7:d8:d5:91:b1:cc:9c:ed:63:04:78:3d:be:bd:71:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:29:F0:3E:6A:CB:8B:CC:A9:18:5E:0C:F3:9C:EE:83:F3:C1:A8:F0
            X509v3 Authority Key Identifier:
                keyid:D1:59:43:E7:D3:CE:CA:45:32:79:CB:B5:12:7B:D9:74:71:29:C3:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VlD59POykUyecu1EnvZdHEpw-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/0VlD59POykUyecu1EnvZdHEpw-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5403d9-bc76-4e43-a658-d48c91a65007/1/0VlD59POykUyecu1EnvZdHEpw-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:48:06:b1:64:99:c2:a8:22:99:34:61:97:cb:ae:65:cc:9d:
         f0:8d:94:1a:8a:4f:ad:28:43:d0:ac:80:86:20:9d:1f:76:65:
         2f:47:29:6b:27:ca:97:9e:ca:c8:f7:c4:95:01:af:f8:9d:89:
         03:7b:75:81:d9:26:50:95:0c:2b:a9:21:01:74:b5:cb:87:3a:
         17:d2:44:1f:4e:fb:af:ba:1c:d2:11:b4:19:43:97:92:d0:03:
         2c:e8:92:05:35:63:2c:43:71:2e:64:c4:27:62:14:dd:1a:e2:
         cb:81:34:17:bb:0d:4a:1a:14:82:1b:1c:da:c9:bd:78:b4:47:
         bb:5c:ba:58:d5:c8:f5:6d:87:8c:ac:98:6d:43:5c:ee:0d:5f:
         a6:28:45:b2:46:5f:bb:35:d2:5e:51:6b:c7:aa:f6:f7:b7:eb:
         de:83:42:3b:cd:f1:4e:9e:30:e3:cf:ae:b4:0c:dc:2b:60:53:
         db:c9:38:5d:d4:a5:e1:f5:de:65:fa:e0:fd:59:2a:36:95:b7:
         44:a0:4c:1a:27:67:8c:85:2d:f1:50:fe:7d:02:9d:2f:2b:68:
         00:d3:10:1e:26:76:f4:2f:ea:e0:41:45:e2:03:5b:a0:43:34:
         e3:8e:87:4a:e1:dc:85:0f:45:29:f8:88:40:ef:8e:df:87:9c:
         24:27:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----