Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft
File:                     1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft (raw, json)
Hash identifier:          9DRFhiw8nBfMqT/aCRUVtHBzr13kbNLutLDVs8SZJhg=
Subject key identifier:   1E:5B:5D:24:28:BE:04:92:2C:C4:8A:C8:1A:18:2E:57:27:C1:57:79
Authority key identifier: D6:79:4C:FF:35:DC:BD:42:7F:BE:7B:A2:A9:43:33:AA:8D:F0:A4:67
Certificate issuer:       /CN=d6794cff35dcbd427fbe7ba2a94333aa8df0a467
Certificate serial:       0188C34066D16C379717E9AC34FF0C135FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft
Manifest number:          06F6
Signing time:             Fri 16 Jun 2023 08:09:17 +0000
Manifest this update:     Fri 16 Jun 2023 08:09:17 +0000
Manifest next update:     Sat 17 Jun 2023 08:09:17 +0000
Files and hashes:         1: 1nlM_zXcvUJ_vnuiqUMzqo3wpGc.crl (hash: omTVmT8TuFrBncMjrfNiVbGm2DOBaKmzmig8w6+L2Hw=)
                          2: XYuqUYxfRI4O5M7c6y4sc9LKXWQ.roa (hash: Ga7FMlepC8rlPoH5CCaV9BI1S3IxnzEh9aNP8+1fGs0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c3:40:66:d1:6c:37:97:17:e9:ac:34:ff:0c:13:5f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6794cff35dcbd427fbe7ba2a94333aa8df0a467
        Validity
            Not Before: Jun 16 08:09:17 2023 GMT
            Not After : Jun 17 08:09:17 2023 GMT
        Subject: CN=1e5b5d2428be04922cc48ac81a182e5727c15779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:e8:16:f9:0c:bd:ef:a8:7d:5a:36:01:7d:
                    6b:21:4f:30:f9:b3:06:a7:34:e3:46:8c:4b:04:5c:
                    79:ec:10:de:df:00:cd:84:bd:6c:68:a3:16:70:66:
                    9c:4e:85:98:32:78:e5:d5:b3:31:dd:b9:0b:45:0a:
                    0a:3b:aa:c1:72:90:be:93:32:cd:21:dd:30:f0:b9:
                    de:a8:0c:75:45:6e:27:47:fe:96:d3:84:9b:56:c3:
                    39:df:35:61:9c:79:8c:b9:4d:62:81:9d:98:d7:17:
                    dc:4e:e5:64:f6:4d:ab:d3:a0:2c:20:2a:61:c9:c8:
                    ce:1f:15:ab:20:75:0c:cf:59:b5:60:ec:95:12:2e:
                    d2:06:fe:e1:cf:05:a5:c0:06:4d:ea:84:55:ae:8e:
                    16:f5:57:4a:3c:19:3c:60:10:73:1a:5b:e5:84:83:
                    fd:f6:d8:82:e5:90:73:07:7f:22:ea:db:38:67:31:
                    f0:77:9e:43:69:1a:2f:b8:e5:48:e6:57:1a:de:e3:
                    8d:7a:76:57:a7:e9:ab:cf:d4:89:fa:aa:6f:de:61:
                    a6:59:5c:2a:65:59:6c:b2:b2:49:5e:10:5d:55:7d:
                    ee:95:db:9a:47:93:1f:5d:14:51:ef:8c:e8:bd:2c:
                    2f:72:6b:c3:5e:ee:12:4c:65:18:35:d5:04:21:3b:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5B:5D:24:28:BE:04:92:2C:C4:8A:C8:1A:18:2E:57:27:C1:57:79
            X509v3 Authority Key Identifier:
                keyid:D6:79:4C:FF:35:DC:BD:42:7F:BE:7B:A2:A9:43:33:AA:8D:F0:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d0:2d:1c:62:03:64:6b:28:a8:d0:57:00:74:b7:d3:0d:16:
         a9:8e:a5:62:01:8e:88:93:b7:64:36:2e:ce:e8:80:45:37:47:
         e3:03:be:25:1f:d2:c8:2d:f8:9a:90:b9:07:96:26:4a:9d:42:
         4e:90:64:e7:8b:e4:f6:d0:e2:e5:fc:62:ae:76:cc:2d:21:8f:
         bb:0a:94:cf:21:a8:58:b2:5d:d3:42:d3:cb:1d:9b:ce:d2:c8:
         3b:81:b7:60:e4:6b:b9:5e:b4:50:42:da:f3:6b:df:cd:d6:a9:
         ca:77:46:56:db:84:1a:d7:9d:77:17:05:d3:f5:14:5e:09:37:
         38:1c:c9:a3:68:9d:80:fb:da:50:48:87:65:80:fd:81:bc:6b:
         f9:88:58:b7:99:e9:b5:c0:11:83:7f:0d:5c:d9:0a:be:12:60:
         f1:a9:11:8d:7f:41:1a:f6:76:66:52:32:3e:04:94:22:78:49:
         d7:d7:b4:05:3a:b8:65:d3:ff:05:a1:71:bb:ca:ed:bb:cd:c3:
         75:83:dd:71:1f:2b:27:44:1f:39:13:37:2f:1a:df:75:71:35:
         04:fd:d1:25:d5:ef:4e:2e:4c:55:8c:85:6f:23:e5:e9:0c:c8:
         b8:ae:60:3f:30:c0:a9:67:51:ec:0b:6e:7d:b2:ed:83:ef:02:
         42:40:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----