Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/4Iegp7rzkDjCo84bU-_ag1DRO0E.mft
File:                     4Iegp7rzkDjCo84bU-_ag1DRO0E.mft (raw, json)
Hash identifier:          4OtRUMfLGRQhlj5R3m8PIloazbgFxEElukZrHBt+Edk=
Subject key identifier:   55:EB:05:34:A9:41:EA:02:79:D0:EB:5E:36:79:30:41:C4:E4:39:0D
Authority key identifier: E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41
Certificate issuer:       /CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
Certificate serial:       018C62D625149B001C7926E570489EA60956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/4Iegp7rzkDjCo84bU-_ag1DRO0E.mft
Manifest number:          083E
Signing time:             Wed 13 Dec 2023 11:00:50 +0000
Manifest this update:     Wed 13 Dec 2023 11:00:50 +0000
Manifest next update:     Thu 14 Dec 2023 11:00:50 +0000
Files and hashes:         1: 4Iegp7rzkDjCo84bU-_ag1DRO0E.crl (hash: Et7Qj9MG+hVaDXwPcD6Y4lEZ3+Nadr64slqzMA/5RH4=)
                          2: PIEP2CXc-3i-CBFBObDga7BZcI0.roa (hash: VNWoR58glKYYfUUcmsHvY4yQ5ix+1fAWWBhelVRRwBY=)
                          3: Zs0IXVLLh0nA5QjHwS-O-pCaygU.roa (hash: +mVaLEan8lSW8XAE3Bvkdd0pko5/wBn8DK4PdvS95+M=)
                          4: tJgJXvlvWH3K9K4kh2PoQonUwtM.roa (hash: ZYe9w2cwdSilbKyfI6scS+lm8bk8ES6rmcguAISG3cY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:62:d6:25:14:9b:00:1c:79:26:e5:70:48:9e:a6:09:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
        Validity
            Not Before: Dec 13 11:00:50 2023 GMT
            Not After : Dec 14 11:00:50 2023 GMT
        Subject: CN=55eb0534a941ea0279d0eb5e36793041c4e4390d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:49:b1:7d:c5:f3:49:31:cf:d3:38:a5:ae:
                    bd:e7:b3:7e:5f:9c:9d:8a:ba:bd:d0:ee:97:06:9d:
                    50:dd:63:a0:1a:de:3a:1c:fb:ab:fd:c7:35:01:43:
                    c1:19:15:50:34:5a:86:48:94:75:06:fe:df:31:6f:
                    ff:f9:e8:af:29:45:ea:66:b1:36:5d:1c:17:0b:82:
                    58:e7:7c:a5:40:fb:eb:7a:5a:65:14:d1:06:ff:b8:
                    36:29:27:e2:ac:0d:2a:df:b8:2f:5b:dc:76:48:2b:
                    40:a6:bc:7b:18:cf:7f:d1:69:f8:6e:d3:f8:60:e8:
                    1a:d0:9f:cd:88:73:25:25:a0:05:fd:8c:b1:fb:91:
                    19:fe:b2:95:46:14:79:53:87:7d:3b:e1:eb:44:25:
                    6d:5a:f6:2e:46:c7:2b:58:4a:df:0c:56:78:ad:4f:
                    de:41:e2:c6:44:7d:e1:60:1a:5d:15:0d:34:35:9a:
                    ba:b9:ab:d4:96:3d:c2:eb:82:13:4c:2f:9f:91:fc:
                    61:09:30:69:b7:14:d1:0b:45:d7:71:65:1c:18:43:
                    31:ea:f7:9e:28:a7:5d:80:0d:1b:f7:48:ad:3f:be:
                    0b:92:0f:67:85:36:d7:ca:61:bb:f4:89:35:cd:91:
                    98:3c:d5:38:84:cf:e7:4f:34:cd:8e:da:87:c5:d2:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:05:34:A9:41:EA:02:79:D0:EB:5E:36:79:30:41:C4:E4:39:0D
            X509v3 Authority Key Identifier:
                keyid:E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/4Iegp7rzkDjCo84bU-_ag1DRO0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/4Iegp7rzkDjCo84bU-_ag1DRO0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:88:70:86:ed:61:2f:85:22:48:e4:49:77:a4:39:56:6c:46:
         29:a2:6e:5b:cc:ae:80:1c:81:1b:1d:84:01:e4:c3:41:fa:6f:
         dc:4f:7c:40:a2:76:b5:ce:f2:69:bc:57:c8:0a:82:f9:06:01:
         6d:74:af:b9:1c:60:f7:8e:e7:c2:42:30:c5:7c:10:bd:04:71:
         7f:2d:fc:c8:03:0c:f6:a7:cc:ec:7d:cb:b3:0a:02:a1:e5:4f:
         49:4f:64:ac:7f:12:c5:c5:a3:8b:17:6c:7c:7c:db:9c:37:5e:
         dc:d8:34:97:a6:6c:27:ee:c5:11:7f:7f:51:dd:e2:46:11:59:
         97:37:38:41:af:77:dc:5c:fc:50:22:2e:a0:c1:31:82:57:3c:
         3d:ba:84:9f:b4:a2:e5:96:92:cd:67:34:a4:76:34:2b:7e:86:
         2e:29:59:af:ae:1f:33:fe:ae:d5:92:b4:ae:d9:ea:81:cc:2d:
         f7:3b:c6:0c:97:94:06:96:5b:67:00:fd:67:ee:ea:de:28:53:
         a4:3e:49:a0:51:4c:b5:50:b3:30:7d:fe:c1:48:5a:ac:e8:54:
         cd:03:3a:bf:e7:33:3f:5d:c0:a6:c6:8c:bf:05:1c:cd:75:f9:
         bc:02:a6:c7:b9:ab:4d:2b:cb:1e:f7:de:32:5a:4a:34:d5:6e:
         4f:1d:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----