Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/QjXWnY2Jb67G58IXHTDdCbUBoD8.mft
File:                     QjXWnY2Jb67G58IXHTDdCbUBoD8.mft (raw, json)
Hash identifier:          lIDyAQ8OBJ8t8jHlvu+j8wVsmdssKf/DXk2MW0+f56U=
Subject key identifier:   6A:33:C5:C6:6C:E6:B4:68:19:BB:55:32:5B:7D:95:81:77:AF:E6:FD
Authority key identifier: 42:35:D6:9D:8D:89:6F:AE:C6:E7:C2:17:1D:30:DD:09:B5:01:A0:3F
Certificate issuer:       /CN=4235d69d8d896faec6e7c2171d30dd09b501a03f
Certificate serial:       018CB4CE9FAEEA9B5D1BAE680568AEF165E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QjXWnY2Jb67G58IXHTDdCbUBoD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/QjXWnY2Jb67G58IXHTDdCbUBoD8.mft
Manifest number:          1004
Signing time:             Fri 29 Dec 2023 09:01:29 +0000
Manifest this update:     Fri 29 Dec 2023 09:01:29 +0000
Manifest next update:     Sat 30 Dec 2023 09:01:29 +0000
Files and hashes:         1: 9o0-EQ0PHbrQvA8yjGwRE-XqqCw.roa (hash: q5qCY4y/WAiWL6Bm05vuimhNCiuU8U4TnUioinQxAac=)
                          2: QjXWnY2Jb67G58IXHTDdCbUBoD8.crl (hash: QnnnnUM1BGP/C+xos6d1crXb8t6JY1/qWn4yeJuQ0Ds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b4:ce:9f:ae:ea:9b:5d:1b:ae:68:05:68:ae:f1:65:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4235d69d8d896faec6e7c2171d30dd09b501a03f
        Validity
            Not Before: Dec 29 09:01:29 2023 GMT
            Not After : Dec 30 09:01:29 2023 GMT
        Subject: CN=6a33c5c66ce6b46819bb55325b7d958177afe6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:1a:7f:33:05:73:a4:01:5b:da:a4:d8:f0:
                    89:3a:84:04:dd:57:17:84:e2:60:2e:25:0b:04:03:
                    0c:42:27:05:7c:dd:1a:79:61:64:7e:15:6c:6d:e8:
                    92:1d:5b:ae:9e:c4:38:12:aa:fb:70:f1:21:ab:70:
                    a8:ce:bd:09:86:16:fa:22:87:1b:f5:da:56:71:71:
                    f8:b7:d6:80:99:9e:b3:4b:a7:57:e7:0f:d7:8a:d4:
                    83:26:3b:45:7f:78:04:5a:56:47:1c:70:bb:6e:12:
                    62:7a:44:c6:42:67:03:f5:9e:33:86:7d:8c:08:e0:
                    4d:a0:0e:06:79:51:7f:13:0a:97:23:67:ad:43:51:
                    77:bb:7f:f1:c1:76:77:94:b8:2e:ba:6b:21:39:f8:
                    c9:cb:b3:bc:6c:7d:e1:02:68:5d:b7:45:97:f1:3c:
                    d2:4a:9a:c3:94:c9:f8:b8:03:bb:20:1f:66:61:13:
                    a7:78:79:8a:80:f1:91:fd:e5:77:3e:01:28:b3:ed:
                    d4:90:31:00:f2:c0:82:d9:10:84:48:23:3a:f1:4f:
                    d1:11:06:d9:59:9c:6f:e3:6a:14:ed:10:4d:bd:4c:
                    74:ea:26:ad:63:4e:b5:5a:23:cd:f2:22:3c:6d:ba:
                    d5:13:92:82:c5:19:78:10:36:85:20:35:55:9a:22:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:33:C5:C6:6C:E6:B4:68:19:BB:55:32:5B:7D:95:81:77:AF:E6:FD
            X509v3 Authority Key Identifier:
                keyid:42:35:D6:9D:8D:89:6F:AE:C6:E7:C2:17:1D:30:DD:09:B5:01:A0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjXWnY2Jb67G58IXHTDdCbUBoD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/QjXWnY2Jb67G58IXHTDdCbUBoD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/QjXWnY2Jb67G58IXHTDdCbUBoD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:66:98:76:c7:cf:5e:61:bb:ff:4a:4c:ed:cd:4e:40:b3:15:
         09:20:bb:1c:55:0a:85:c1:23:2c:f0:3e:b2:98:3c:bb:07:5b:
         01:93:c7:87:e7:5d:c7:71:7f:d8:fe:61:17:56:83:ec:24:ac:
         32:03:5c:1d:5c:7b:2d:19:05:f4:8f:ba:ed:09:4d:c8:0a:c8:
         49:f7:71:bb:f8:89:ff:58:95:a7:c4:b9:f3:04:92:71:74:e4:
         27:35:b3:2f:11:84:f9:db:bb:a4:09:6d:c7:d2:5d:44:c6:04:
         da:4f:16:ee:25:b5:9e:2b:f7:0c:62:16:52:86:32:d1:5c:62:
         b7:19:6f:26:8b:4f:54:4b:ee:47:69:ab:ac:aa:1d:a4:5e:61:
         7c:6d:05:08:c0:e0:06:80:ec:78:c1:17:53:18:0a:8b:0c:92:
         f5:0d:d5:1c:1a:e0:da:5b:c2:4f:fe:80:33:a9:7b:9b:96:39:
         27:c1:22:dc:68:fe:02:8c:45:31:de:eb:61:8c:59:70:e6:09:
         87:db:a1:5e:9b:cc:16:8b:ed:06:c2:aa:c8:c3:dd:df:ae:01:
         41:b1:32:60:a5:8b:1f:78:31:88:31:d6:70:7d:60:96:a2:45:
         50:f3:60:0c:06:ee:d8:b4:b8:2f:24:79:7d:24:9e:37:fc:a4:
         73:d5:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----