Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bf0a54-0774-4aa5-a91a-bc36edbdfa05/1/33W2OzwEq90LuppbbUxMTEvuNX8.mft
File:                     33W2OzwEq90LuppbbUxMTEvuNX8.mft (raw, json)
Hash identifier:          PCj48YoToJm8zlu5r1CpekAnVGqo+jOvzXW/FipOl0A=
Subject key identifier:   1E:78:A8:97:06:17:E8:B7:E3:D1:15:73:73:FC:EF:15:F4:06:CB:2B
Authority key identifier: DF:75:B6:3B:3C:04:AB:DD:0B:BA:9A:5B:6D:4C:4C:4C:4B:EE:35:7F
Certificate issuer:       /CN=df75b63b3c04abdd0bba9a5b6d4c4c4c4bee357f
Certificate serial:       0189613B9B9328F7848BC4E4D96CCF4BE9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33W2OzwEq90LuppbbUxMTEvuNX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bf0a54-0774-4aa5-a91a-bc36edbdfa05/1/33W2OzwEq90LuppbbUxMTEvuNX8.mft
Manifest number:          0842
Signing time:             Mon 17 Jul 2023 00:24:03 +0000
Manifest this update:     Mon 17 Jul 2023 00:24:03 +0000
Manifest next update:     Tue 18 Jul 2023 00:24:03 +0000
Files and hashes:         1: 33W2OzwEq90LuppbbUxMTEvuNX8.crl (hash: D1J/bWGfujTWnOumINLy5vRxayu2tbGUWLp85opDJcA=)
                          2: GZbp94mcOyKvLov8sgcxhz7d9Nw.roa (hash: SeQLlBJKdHqFVUBNXvG430qZ5MT/zkZQqn9uHXPTjWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:61:3b:9b:93:28:f7:84:8b:c4:e4:d9:6c:cf:4b:e9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df75b63b3c04abdd0bba9a5b6d4c4c4c4bee357f
        Validity
            Not Before: Jul 17 00:24:03 2023 GMT
            Not After : Jul 18 00:24:03 2023 GMT
        Subject: CN=1e78a8970617e8b7e3d1157373fcef15f406cb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:6a:31:b3:74:fd:85:16:a1:d1:b0:7c:a3:
                    46:dd:69:95:e4:0d:fc:f8:99:6a:71:f7:96:9f:8d:
                    e2:64:e5:e5:28:77:93:a9:7b:ea:35:47:81:43:82:
                    56:c9:f1:d9:da:07:5a:5b:e2:fd:dd:e6:52:59:d9:
                    35:4c:75:24:25:70:3b:13:10:53:07:6c:b8:2c:76:
                    14:87:2b:49:dc:0e:7f:7c:41:1a:e2:d5:5c:38:25:
                    f3:c4:5d:0e:63:5a:ed:27:b5:33:2f:b4:bd:75:dd:
                    bc:30:16:fe:84:f2:5d:4f:de:b6:63:e4:2b:46:86:
                    04:83:9e:e8:af:28:8f:65:1b:89:e2:2d:ad:50:17:
                    14:07:90:9f:92:e6:05:88:ba:34:3a:27:8b:f8:b0:
                    bd:46:22:27:8b:1c:8f:a0:86:c6:c4:1a:41:07:73:
                    c3:18:15:3a:75:0b:1a:99:3c:14:d4:7a:14:d2:c1:
                    6b:0c:fa:68:cc:a0:95:15:1e:b0:26:6a:11:3c:cf:
                    68:10:dc:94:d4:ef:ea:78:7a:c9:c0:b0:1f:62:1c:
                    1d:27:05:a9:40:cb:57:69:88:6f:c0:30:bc:68:a7:
                    a2:ad:4d:48:88:82:7d:04:92:1f:98:57:9c:48:dd:
                    60:79:87:19:45:93:3a:92:34:e1:55:74:bd:77:df:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:A8:97:06:17:E8:B7:E3:D1:15:73:73:FC:EF:15:F4:06:CB:2B
            X509v3 Authority Key Identifier:
                keyid:DF:75:B6:3B:3C:04:AB:DD:0B:BA:9A:5B:6D:4C:4C:4C:4B:EE:35:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33W2OzwEq90LuppbbUxMTEvuNX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bf0a54-0774-4aa5-a91a-bc36edbdfa05/1/33W2OzwEq90LuppbbUxMTEvuNX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bf0a54-0774-4aa5-a91a-bc36edbdfa05/1/33W2OzwEq90LuppbbUxMTEvuNX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ae:78:18:ed:ba:65:0b:2e:7b:a2:7a:2f:a8:b5:93:1d:f1:
         b9:92:1c:1f:2f:d2:b0:c7:9c:b8:2f:ec:60:be:7d:32:d2:42:
         86:8a:be:40:54:08:de:df:74:d6:ce:35:98:ea:b0:a1:ed:eb:
         6b:ef:4b:8f:19:f6:d8:d8:ce:6b:ab:e5:d4:cf:a7:42:63:2d:
         ae:b1:0e:11:f8:25:c0:6c:19:3e:00:51:c8:4c:aa:5b:65:05:
         6d:00:14:49:c8:de:a9:66:42:2c:13:b7:94:4e:1b:a3:b7:86:
         40:dd:7d:cf:ed:9b:56:66:a2:07:2e:ae:20:e8:4e:a2:11:3e:
         eb:0e:22:7e:fd:b9:ff:5f:d2:d8:8f:a0:15:43:6d:56:8c:2a:
         6d:17:dd:f8:49:14:40:71:3f:a7:fd:59:b5:9d:27:7f:d5:ac:
         bb:b0:6f:c0:f2:fd:90:59:bd:d0:60:41:9c:a3:a0:b2:5e:78:
         df:f0:0a:73:5d:3c:70:40:cf:77:d4:5f:7c:20:e8:84:d1:65:
         a0:66:4c:48:32:14:ca:50:3c:b9:65:1e:3c:ef:ce:ae:2a:a5:
         7a:f2:1a:99:e3:5c:6c:4a:5d:32:7d:dc:35:11:0c:17:74:a9:
         8d:16:38:fd:76:39:91:0e:ca:9c:92:02:74:6b:99:2c:0b:44:
         9d:ea:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----