Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/853e39-7482-475d-b488-b16972aab679/1/Wkxyx2axMiT4SHpPGxtBy4jPpxI.mft
File:                     Wkxyx2axMiT4SHpPGxtBy4jPpxI.mft (raw, json)
Hash identifier:          44s32aL8S7TpYQP/de7h6Kt6DRAyAm2hwJbMxPSiixY=
Subject key identifier:   E8:AD:57:41:BE:CD:BF:75:FB:09:84:47:90:6D:FC:D7:03:30:84:1B
Authority key identifier: 5A:4C:72:C7:66:B1:32:24:F8:48:7A:4F:1B:1B:41:CB:88:CF:A7:12
Certificate issuer:       /CN=5a4c72c766b13224f8487a4f1b1b41cb88cfa712
Certificate serial:       01894933222C7263178D7E8F4ACB5577CABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wkxyx2axMiT4SHpPGxtBy4jPpxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/853e39-7482-475d-b488-b16972aab679/1/Wkxyx2axMiT4SHpPGxtBy4jPpxI.mft
Manifest number:          02B8
Signing time:             Wed 12 Jul 2023 08:23:54 +0000
Manifest this update:     Wed 12 Jul 2023 08:23:54 +0000
Manifest next update:     Thu 13 Jul 2023 08:23:54 +0000
Files and hashes:         1: M5IPh7t-6GOYgCSLRDRqkoBS6O8.roa (hash: cHll0ffSr4+YK0mRqmHn3lry9p/qEJjCb4ZczcZV7jc=)
                          2: Wkxyx2axMiT4SHpPGxtBy4jPpxI.crl (hash: wjyaXXnezl8lpCN0+GJQNqvzH/5HQEEWHoP4r5XlVog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:49:33:22:2c:72:63:17:8d:7e:8f:4a:cb:55:77:ca:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4c72c766b13224f8487a4f1b1b41cb88cfa712
        Validity
            Not Before: Jul 12 08:23:54 2023 GMT
            Not After : Jul 13 08:23:54 2023 GMT
        Subject: CN=e8ad5741becdbf75fb098447906dfcd70330841b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:23:af:8e:2b:6c:f7:dd:61:73:de:3a:60:
                    56:c8:32:40:cd:53:44:60:7b:40:70:11:66:a6:40:
                    9c:3a:71:6d:1d:d7:97:94:c5:c8:f6:94:70:50:bc:
                    bf:6f:d6:c6:ac:a7:6e:21:17:77:ad:9d:61:08:08:
                    e4:e3:e5:65:04:a3:d7:fc:16:c9:6c:77:7d:2a:f0:
                    ed:7c:7a:50:ed:20:36:b1:45:b0:9f:4e:3e:07:dd:
                    f5:2d:d5:19:81:6e:66:5b:e2:ca:93:66:24:0e:dc:
                    a1:db:cb:0b:84:8f:e9:e7:c3:14:1e:1c:96:6a:c3:
                    01:8a:68:b0:11:fb:54:4a:ce:91:4c:48:4e:28:1c:
                    84:aa:9d:e2:e1:75:d5:93:ef:15:eb:fe:7a:f2:ea:
                    e1:1c:02:14:e5:c4:14:ca:26:7f:10:0c:00:78:54:
                    46:bf:e3:53:0b:ec:bb:13:79:f3:37:63:51:99:ce:
                    2f:b1:45:14:7a:ad:41:e7:e9:60:ac:3b:ef:95:bc:
                    c1:8d:21:dd:41:b6:7e:08:5b:df:f6:8a:04:65:b9:
                    ef:0c:2a:d5:0a:92:fa:05:c2:d9:23:7e:e7:f9:48:
                    9c:b3:c1:f3:70:e8:1e:d8:3b:56:04:ed:31:97:df:
                    f8:45:f5:20:90:d9:a0:4c:44:9b:c6:6c:81:04:24:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:57:41:BE:CD:BF:75:FB:09:84:47:90:6D:FC:D7:03:30:84:1B
            X509v3 Authority Key Identifier:
                keyid:5A:4C:72:C7:66:B1:32:24:F8:48:7A:4F:1B:1B:41:CB:88:CF:A7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wkxyx2axMiT4SHpPGxtBy4jPpxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/853e39-7482-475d-b488-b16972aab679/1/Wkxyx2axMiT4SHpPGxtBy4jPpxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/853e39-7482-475d-b488-b16972aab679/1/Wkxyx2axMiT4SHpPGxtBy4jPpxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:d7:c1:12:44:73:20:c2:0c:a6:8e:5b:e5:92:36:1a:ce:
         61:97:29:55:70:8b:49:7e:a0:9f:ce:bd:02:73:2b:3f:34:07:
         18:68:d6:e1:2f:c0:0a:1e:d2:a4:03:5b:8a:4a:89:2c:89:52:
         da:57:ac:4d:86:2f:21:72:66:62:93:d9:93:94:e1:29:33:a6:
         14:63:10:1d:1f:9c:95:e8:65:7f:e0:6a:ec:16:7c:3b:9d:57:
         0d:b0:86:7d:94:70:22:2f:9d:9e:8f:58:3c:9c:45:5d:80:11:
         11:e4:c2:ac:5e:28:31:84:87:67:d9:64:ff:db:9f:5d:19:88:
         84:f6:8b:38:1d:88:9c:60:c7:ac:47:4c:54:65:ed:4d:8d:12:
         02:a9:f2:12:d4:2c:e5:fe:3c:3e:2d:bf:a0:56:74:c9:4d:6a:
         a0:e4:50:ea:3f:f1:c1:00:70:79:09:df:a5:98:88:5d:e6:2a:
         d3:95:e2:dc:72:c7:15:91:91:52:eb:0c:5b:57:2b:68:27:51:
         a2:a5:06:7e:19:24:d1:7e:b5:3d:22:52:0d:b7:ec:05:0d:fa:
         79:a8:6d:26:6b:86:b2:98:bb:28:d6:c6:99:92:95:a5:f9:83:
         fe:63:21:89:fc:44:7c:4b:0b:5f:a4:21:68:c5:9d:f9:c1:bd:
         f5:31:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----