Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.mft
File:                     xDJWqBkR0TzYDFNnPgUX_yJcbQg.mft (raw, json)
Hash identifier:          wqn4YfjlqSKLRdsSgJu/kDWrVKEOjaplwCL0QkyFJFI=
Subject key identifier:   3E:F7:A7:C8:1F:45:C1:EC:23:87:F3:1F:E3:A8:C6:9F:0F:EF:C8:6A
Authority key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Certificate issuer:       /CN=c43256a81911d13cd80c53673e0517ff225c6d08
Certificate serial:       0188C3F77902DAC583B1AB043A8C3054838D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.mft
Manifest number:          0A4A
Signing time:             Fri 16 Jun 2023 11:29:15 +0000
Manifest this update:     Fri 16 Jun 2023 11:29:15 +0000
Manifest next update:     Sat 17 Jun 2023 11:29:15 +0000
Files and hashes:         1: i_HJtgD2UZ3p6ChSPsDTQtzQleI.roa (hash: lgUTDNdnAIx3aopgK5t11DOF2IO8nxLdlgHhgnIbFYw=)
                          2: u1gOBr_qVYtM-sNuXebmOSjQr1s.roa (hash: xAs0tbgi+HzZpQoG9iZDFPYMGvnI99/mh+WCSc6OntI=)
                          3: xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl (hash: QTw/YvKVSDoBT9dYGI0xde5bxXofai46njag97s7pjs=)
                          4: yr2eYeRvNorEBgMtrUfBpXx5mdY.roa (hash: HAKjBRC401FY44zOJd0agaRFQ2tFvhFLnMN14+aGOEs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c3:f7:79:02:da:c5:83:b1:ab:04:3a:8c:30:54:83:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43256a81911d13cd80c53673e0517ff225c6d08
        Validity
            Not Before: Jun 16 11:29:15 2023 GMT
            Not After : Jun 17 11:29:15 2023 GMT
        Subject: CN=3ef7a7c81f45c1ec2387f31fe3a8c69f0fefc86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e9:e9:9f:04:48:4e:59:22:d5:d0:93:05:a9:
                    69:06:e8:e2:66:ed:a1:fb:73:29:b9:b7:b2:ed:57:
                    7e:1a:74:ec:12:14:5f:7b:6a:b0:49:60:6e:04:af:
                    64:76:18:6d:ee:81:36:0b:ac:9a:f6:1d:47:09:2d:
                    1e:df:22:a8:2e:60:11:9c:d3:54:6e:6c:b8:0b:03:
                    a2:85:b6:01:28:c8:3b:9f:40:79:12:d2:81:bb:4d:
                    83:be:3a:9a:56:4a:ba:b0:67:59:8f:a9:41:b2:85:
                    64:47:a4:af:f7:cc:7e:c1:56:89:c6:bd:54:1b:40:
                    1e:43:fb:4a:26:89:29:30:6f:22:dd:87:19:3c:51:
                    ad:a3:7d:6b:91:dd:5e:98:1c:4f:45:59:34:4c:6d:
                    94:6e:fe:e6:9a:f2:df:36:91:05:f8:d2:d1:c5:d8:
                    32:92:06:f8:5c:ee:a3:de:b7:e6:1e:3e:4d:7d:6d:
                    30:dc:4f:44:50:3d:b7:cd:60:99:a4:58:22:c3:8d:
                    d2:7f:91:a1:c7:f9:4d:21:31:1e:c9:26:2f:49:5c:
                    a6:40:a5:5a:58:ca:02:20:20:2f:1a:8a:9b:a7:44:
                    e1:f0:9c:f4:48:81:80:b5:45:a2:30:72:8b:dd:70:
                    b5:59:8f:d2:b3:d2:08:e7:10:a5:11:22:89:27:8b:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F7:A7:C8:1F:45:C1:EC:23:87:F3:1F:E3:A8:C6:9F:0F:EF:C8:6A
            X509v3 Authority Key Identifier:
                keyid:C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fe:a1:55:8c:e4:ad:f6:37:be:5f:26:0f:81:b5:a8:97:1f:
         83:ee:19:45:5f:34:b4:73:93:87:32:aa:52:ec:2e:d3:3f:46:
         aa:e3:ba:f3:4d:87:e8:7d:14:03:fc:f6:61:0e:8e:76:3a:b5:
         c7:d2:16:02:fa:ab:ad:94:5a:8a:64:1b:80:e1:fe:5c:a1:6f:
         19:5f:96:a5:f5:6c:9e:f3:7f:a3:6b:9a:d4:2d:15:35:0b:72:
         3b:ce:da:08:79:29:ec:d9:1f:01:d6:6f:1a:41:fd:3b:83:28:
         f9:19:ec:0a:a0:c5:d4:30:42:35:76:b9:06:84:88:60:cd:8d:
         30:9d:6b:84:18:bc:3b:de:69:0d:64:f8:2c:eb:bc:50:60:20:
         61:15:e4:34:f2:e7:01:09:6e:a2:89:fc:a2:59:c4:c4:79:db:
         90:5d:70:4e:34:1a:f1:e1:df:a3:59:99:61:04:79:81:30:15:
         74:95:33:3f:8b:8d:e6:86:cd:60:12:0f:14:b3:b9:0c:8d:83:
         51:45:90:6f:94:45:38:58:9d:44:9e:18:2e:fa:40:4d:c5:32:
         a3:65:c7:8c:f2:98:ac:22:d3:9c:fb:c6:b2:2d:0b:84:80:8c:
         fc:9f:09:c4:ed:f6:61:e0:63:08:8d:b1:9b:cd:7d:94:48:d1:
         76:8e:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----