Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/T5xxgvtJstmOBgOMtPjcIccXG4U.mft
File:                     T5xxgvtJstmOBgOMtPjcIccXG4U.mft (raw, json)
Hash identifier:          Iy6SkiLOp9XqB7pf7JrjCyQr3O+S5ERNLhak6/n4ZX4=
Subject key identifier:   AB:E1:E9:FB:79:51:76:B4:07:0E:B5:B9:8E:69:A6:FE:11:94:97:88
Authority key identifier: 4F:9C:71:82:FB:49:B2:D9:8E:06:03:8C:B4:F8:DC:21:C7:17:1B:85
Certificate issuer:       /CN=4f9c7182fb49b2d98e06038cb4f8dc21c7171b85
Certificate serial:       01889D7C845212AC2F0260B82AE8DF3D9E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5xxgvtJstmOBgOMtPjcIccXG4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/T5xxgvtJstmOBgOMtPjcIccXG4U.mft
Manifest number:          0A9F
Signing time:             Fri 09 Jun 2023 00:09:23 +0000
Manifest this update:     Fri 09 Jun 2023 00:09:23 +0000
Manifest next update:     Sat 10 Jun 2023 00:09:23 +0000
Files and hashes:         1: T5xxgvtJstmOBgOMtPjcIccXG4U.crl (hash: L93pOo3HgU02DbYP45eNGbsKbIfpzz7HJ951ehLTu/M=)
                          2: dsV72QDMML0afN13jrtXOlxW2lQ.roa (hash: SwWO0dDfI17QDHj1wwjsOirWV5Z9rpjW0PoSXLzUSYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9d:7c:84:52:12:ac:2f:02:60:b8:2a:e8:df:3d:9e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9c7182fb49b2d98e06038cb4f8dc21c7171b85
        Validity
            Not Before: Jun  9 00:09:23 2023 GMT
            Not After : Jun 10 00:09:23 2023 GMT
        Subject: CN=abe1e9fb795176b4070eb5b98e69a6fe11949788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4d:9a:3e:69:0a:ec:e2:8a:1e:b9:91:8a:32:
                    62:4b:db:32:7a:97:02:bc:43:88:ea:2c:a0:24:a6:
                    d7:a3:c0:e4:19:a4:ea:14:73:c4:94:20:f6:09:80:
                    63:a2:b5:17:74:b1:6a:57:f2:ae:0b:6c:54:8e:7c:
                    dc:09:ee:5a:96:57:d7:3b:04:75:75:ab:2d:0b:63:
                    b8:6e:4c:19:e3:55:43:02:eb:9d:4a:7f:d7:b8:92:
                    b1:53:6b:4f:14:16:a2:47:6e:b4:e6:33:18:d5:6a:
                    50:4a:f0:87:81:f6:30:55:6f:71:73:09:42:70:fc:
                    85:04:cb:08:a6:5c:21:6b:fe:07:fc:9b:cd:13:87:
                    03:35:f3:4b:0a:41:35:11:9a:84:7f:77:89:dc:d3:
                    46:67:bf:ae:67:69:30:af:a8:b5:64:db:88:01:ae:
                    ee:0d:2c:d6:ec:dd:f4:5b:ed:74:cc:b1:4e:4f:c5:
                    46:8b:ad:f0:2e:cc:66:88:9e:7e:e8:d3:7a:e4:93:
                    76:95:cf:f9:45:27:17:76:2c:e4:bf:fb:e8:24:94:
                    90:c6:57:47:33:aa:9e:b5:46:89:4c:31:2b:ff:a1:
                    e4:14:2c:c1:11:03:97:f4:ae:ff:c1:90:4f:8f:b1:
                    9c:c6:57:e8:ba:55:13:35:a4:76:85:12:6c:3c:9c:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:E9:FB:79:51:76:B4:07:0E:B5:B9:8E:69:A6:FE:11:94:97:88
            X509v3 Authority Key Identifier:
                keyid:4F:9C:71:82:FB:49:B2:D9:8E:06:03:8C:B4:F8:DC:21:C7:17:1B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5xxgvtJstmOBgOMtPjcIccXG4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/T5xxgvtJstmOBgOMtPjcIccXG4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/249bca-68fe-4cd5-adfb-64e57838af60/1/T5xxgvtJstmOBgOMtPjcIccXG4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b5:58:92:97:04:d2:22:7f:58:53:ea:a0:f9:73:f0:0d:6b:
         f8:67:fd:f1:6e:c8:c4:76:84:00:85:a4:a2:6a:0d:d8:1d:1e:
         fc:23:03:1e:ce:12:c3:62:08:46:84:d1:f4:87:3b:5a:d7:5b:
         8d:aa:7a:82:cf:d9:14:d8:bb:9c:54:1f:53:7d:5e:57:4f:31:
         a0:1a:ed:f7:08:ae:08:fb:b5:6a:6f:b7:e1:1f:e1:c9:a0:71:
         f7:b6:4d:20:e8:13:d0:bb:4f:b9:de:ed:70:ff:de:16:2b:4c:
         29:a5:49:7b:98:e3:81:b5:cd:96:56:e1:94:d1:79:2e:4f:d9:
         6c:b6:c5:c4:b8:5f:d7:3a:96:7a:3c:b4:e5:d8:73:c8:33:ba:
         45:0b:5c:59:c4:3f:5b:eb:42:50:73:54:64:7d:54:0b:8d:20:
         14:2c:e0:30:76:3e:62:c0:d3:f4:b9:97:47:2c:c4:b6:62:44:
         b0:eb:98:90:9c:24:5b:44:49:56:65:4e:af:d1:59:dd:b9:d8:
         55:c0:05:d8:1b:a8:b8:fd:17:15:92:eb:63:40:30:0c:60:28:
         2d:50:c9:f9:cb:54:15:92:69:59:7f:61:b6:d6:ab:66:34:17:
         8d:d8:0d:50:f2:19:6e:5f:21:76:73:c2:ac:81:e1:01:b3:4e:
         96:d8:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----