Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4e40b1-6198-47cf-ad1a-83c125dd070e/1/vlTl2BkgyXrq9JXMblCQPVJLiJ4.mft
File:                     vlTl2BkgyXrq9JXMblCQPVJLiJ4.mft (raw, json)
Hash identifier:          +ybaNi4fvgAeblclcq8ccykZzmJ34uZzU/7yni/mqKw=
Subject key identifier:   0D:10:D7:5E:13:55:3A:64:23:B3:DD:24:4D:BA:B8:C0:07:0A:DF:93
Authority key identifier: BE:54:E5:D8:19:20:C9:7A:EA:F4:95:CC:6E:50:90:3D:52:4B:88:9E
Certificate issuer:       /CN=be54e5d81920c97aeaf495cc6e50903d524b889e
Certificate serial:       018A98EE949CAAECF02EE3AB8F773449F70D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlTl2BkgyXrq9JXMblCQPVJLiJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4e40b1-6198-47cf-ad1a-83c125dd070e/1/vlTl2BkgyXrq9JXMblCQPVJLiJ4.mft
Manifest number:          04
Signing time:             Fri 15 Sep 2023 13:01:26 +0000
Manifest this update:     Fri 15 Sep 2023 13:01:26 +0000
Manifest next update:     Sat 16 Sep 2023 13:01:26 +0000
Files and hashes:         1: vlTl2BkgyXrq9JXMblCQPVJLiJ4.crl (hash: 5/hQSQF0C+Iar3RuAfvPrF+H1vu6ahAt8IVAbxX8+8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:ee:94:9c:aa:ec:f0:2e:e3:ab:8f:77:34:49:f7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be54e5d81920c97aeaf495cc6e50903d524b889e
        Validity
            Not Before: Sep 15 13:01:26 2023 GMT
            Not After : Sep 16 13:01:26 2023 GMT
        Subject: CN=0d10d75e13553a6423b3dd244dbab8c0070adf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:60:12:8e:d3:6b:5f:49:a3:93:78:39:59:
                    34:ce:65:e9:05:85:1e:32:92:12:6e:88:85:6e:9d:
                    de:31:22:a7:25:9c:e2:48:0f:4d:f1:40:5c:e1:72:
                    6a:fb:a3:b0:a0:7c:23:6b:3b:99:4a:2d:ec:c1:ee:
                    1a:69:aa:a0:2b:db:95:2a:34:90:af:2e:68:19:c7:
                    e0:3f:d3:73:e7:69:55:28:e1:02:34:d3:fc:fb:11:
                    b7:c4:f9:23:60:97:c9:92:30:fc:8a:f7:81:69:30:
                    5c:d0:0c:fc:0f:0f:76:61:55:9b:df:93:a7:b4:32:
                    56:e8:19:9b:27:79:7a:af:38:45:4d:1b:f3:dd:3b:
                    7f:d3:21:9a:a9:1c:24:a1:17:e8:f8:22:f5:0a:f5:
                    b2:c7:a1:63:a2:fb:9d:16:44:c0:32:bb:32:20:28:
                    b8:a0:57:87:5e:3d:3f:c3:03:a2:b9:a1:43:c8:38:
                    2f:24:0a:13:c3:90:fb:10:d3:2c:77:33:77:de:36:
                    fd:67:8f:c3:71:62:20:11:de:c8:46:fc:9b:1d:ec:
                    b9:4b:54:ef:9a:6b:86:61:f4:ac:f7:6b:16:77:89:
                    64:77:4c:b7:0f:39:23:48:f8:62:66:d8:b5:14:b3:
                    16:38:d9:fe:bd:9c:e3:1a:f7:de:64:bc:0f:69:16:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:D7:5E:13:55:3A:64:23:B3:DD:24:4D:BA:B8:C0:07:0A:DF:93
            X509v3 Authority Key Identifier:
                keyid:BE:54:E5:D8:19:20:C9:7A:EA:F4:95:CC:6E:50:90:3D:52:4B:88:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlTl2BkgyXrq9JXMblCQPVJLiJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4e40b1-6198-47cf-ad1a-83c125dd070e/1/vlTl2BkgyXrq9JXMblCQPVJLiJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4e40b1-6198-47cf-ad1a-83c125dd070e/1/vlTl2BkgyXrq9JXMblCQPVJLiJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:0c:e8:b0:a7:f7:17:ee:92:76:d1:40:3c:6a:3f:ad:8c:
         d6:8f:b4:cd:be:9f:a6:d5:d1:7c:1a:9a:b6:5a:fd:1f:a9:c4:
         9d:1c:4d:98:f5:3e:42:76:c8:79:e1:8f:b0:9e:17:ce:ad:59:
         c2:be:51:23:93:10:16:89:a8:76:7b:49:e4:a1:27:5f:67:de:
         b4:5e:38:4e:88:28:55:ff:70:30:62:e2:1f:f4:87:fa:3b:42:
         67:66:87:b8:57:d4:d7:ef:77:b4:03:d5:11:d1:0d:d8:cd:12:
         2d:b8:c8:3f:32:c8:f6:0f:42:27:5d:eb:e5:f1:0b:3d:ec:28:
         c9:fb:46:a1:86:92:2a:1b:ac:28:75:9f:7a:bd:5e:93:8a:f9:
         4b:76:44:3e:4c:98:60:11:62:f7:de:55:7a:f0:a2:ae:c3:e8:
         e4:b6:6e:32:c4:ed:9a:1f:85:d4:23:c4:c5:ef:2b:16:24:69:
         14:54:f3:cd:c8:ef:7e:a7:a2:97:55:48:61:73:72:4c:e1:85:
         51:22:58:c5:90:17:44:d5:36:f7:68:a6:c9:38:0a:e3:35:45:
         42:97:bf:92:ef:71:4f:f5:9c:94:42:56:b7:43:fe:6b:dc:36:
         7e:76:2b:45:d4:dc:ac:ab:fa:9d:df:21:de:19:84:20:e9:89:
         51:6c:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----