Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/481de0-8664-4413-ab87-03937a9ca018/1/iP6CtVSPO_HRWchcfslvTwy3Xow.mft
File:                     iP6CtVSPO_HRWchcfslvTwy3Xow.mft (raw, json)
Hash identifier:          k31CvRGcmfITEWmm4K1NTsHPUv1esQ7lVdbhbOalmCU=
Subject key identifier:   D3:5C:E7:5F:0D:A6:5F:53:89:C8:4D:68:90:31:07:A3:CA:FA:97:7C
Authority key identifier: 88:FE:82:B5:54:8F:3B:F1:D1:59:C8:5C:7E:C9:6F:4F:0C:B7:5E:8C
Certificate issuer:       /CN=88fe82b5548f3bf1d159c85c7ec96f4f0cb75e8c
Certificate serial:       018C8B64AFD8E973F926EBA3D22C5CBAC1FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP6CtVSPO_HRWchcfslvTwy3Xow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/481de0-8664-4413-ab87-03937a9ca018/1/iP6CtVSPO_HRWchcfslvTwy3Xow.mft
Manifest number:          0144
Signing time:             Thu 21 Dec 2023 08:01:20 +0000
Manifest this update:     Thu 21 Dec 2023 08:01:20 +0000
Manifest next update:     Fri 22 Dec 2023 08:01:20 +0000
Files and hashes:         1: 99_muVZdbqU-w24phLDCaW_q12o.roa (hash: /yyFgJA8Gwx86IxdpQfle1wPUiFYiEMvDR4JNhxijds=)
                          2: iP6CtVSPO_HRWchcfslvTwy3Xow.crl (hash: sSrYa6u6nefb5welFPFJJvUkSPoyBNnSuDkePTwx9j8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:64:af:d8:e9:73:f9:26:eb:a3:d2:2c:5c:ba:c1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fe82b5548f3bf1d159c85c7ec96f4f0cb75e8c
        Validity
            Not Before: Dec 21 08:01:20 2023 GMT
            Not After : Dec 22 08:01:20 2023 GMT
        Subject: CN=d35ce75f0da65f5389c84d68903107a3cafa977c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4a:e2:15:ad:2b:10:05:51:fc:7a:3b:f2:92:
                    33:f4:58:52:7e:30:4b:1f:c2:7e:64:4e:fa:67:c7:
                    ad:bc:91:49:87:e5:d6:9a:a5:99:ec:cd:c0:d7:64:
                    73:58:73:f0:0a:6a:f3:a6:33:f7:94:92:ed:94:cf:
                    33:c0:4b:cf:3e:af:68:96:b2:ba:2d:7a:a0:b4:e6:
                    75:a1:a7:55:04:6e:c9:71:25:32:ae:b2:9a:73:0c:
                    fc:d5:76:fa:3c:51:66:28:7d:57:a1:6f:29:dd:31:
                    7a:7f:30:dd:e3:33:11:c6:88:30:ef:ba:cc:fa:c2:
                    d3:2f:92:71:37:ba:1d:2f:75:c7:47:72:a6:cd:db:
                    33:e2:c2:61:12:0f:78:2d:ea:61:44:c6:60:90:fc:
                    44:9f:d8:b7:4a:36:ed:55:51:db:4a:3e:18:a0:80:
                    51:44:40:0b:c5:59:c3:5d:3c:78:49:94:e6:eb:6e:
                    48:52:98:1a:5e:f8:13:bb:9b:f3:6a:4f:e3:86:4d:
                    6a:d3:03:c1:b9:62:ae:3a:23:05:f1:e9:2b:27:19:
                    ad:3d:e3:e3:fc:02:d0:93:ca:04:f0:0c:94:66:5a:
                    3e:1c:f6:cd:a9:8b:2b:8c:e0:fb:29:a4:9f:a7:8e:
                    16:ae:d1:52:e9:ce:4e:0a:f9:c6:89:c8:c7:3d:55:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5C:E7:5F:0D:A6:5F:53:89:C8:4D:68:90:31:07:A3:CA:FA:97:7C
            X509v3 Authority Key Identifier:
                keyid:88:FE:82:B5:54:8F:3B:F1:D1:59:C8:5C:7E:C9:6F:4F:0C:B7:5E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6CtVSPO_HRWchcfslvTwy3Xow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/481de0-8664-4413-ab87-03937a9ca018/1/iP6CtVSPO_HRWchcfslvTwy3Xow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/481de0-8664-4413-ab87-03937a9ca018/1/iP6CtVSPO_HRWchcfslvTwy3Xow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d0:47:de:a9:28:82:73:35:1f:fd:18:67:e7:33:d0:44:6d:
         2d:6c:a1:7a:8e:26:7a:25:9a:ef:39:2c:79:18:e9:d0:7c:df:
         7e:85:64:f4:72:ad:0c:40:1e:de:dd:e7:a9:4f:c7:64:87:86:
         69:c6:6a:52:31:e7:61:9e:d8:c9:05:18:e2:34:18:1d:eb:c9:
         b4:cc:5d:f1:2c:a5:b0:05:79:6c:4e:33:8f:6a:45:04:36:87:
         9c:69:c2:98:c3:62:92:94:3f:9c:79:73:7a:f4:8a:00:f2:a0:
         47:83:29:d1:ac:45:e4:ff:ae:79:71:5c:59:26:9c:78:14:b1:
         3e:2e:39:25:28:73:06:03:0b:ee:79:a3:60:8f:90:45:8f:1f:
         f8:f1:be:8e:23:9a:7f:9f:50:92:37:03:9c:8e:81:2b:e8:96:
         23:aa:11:0f:61:7d:82:ed:ea:95:b4:56:66:65:c5:ad:08:6b:
         a8:a0:8f:bd:66:3d:93:d5:7f:96:39:7f:00:14:ab:2c:bf:9a:
         ac:d5:89:1c:63:0f:35:e1:c9:e1:4c:b5:02:23:27:85:19:24:
         6c:4f:ce:0b:01:4b:a7:9d:4b:bb:9c:02:59:b3:a0:87:6c:2b:
         1f:5e:6e:22:65:8c:32:41:6e:a9:37:7e:c6:93:f4:37:7b:7e:
         5b:c3:3d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----