Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.mft
File:                     41FdROoARSPu02E7LRLpX0TYEg0.mft (raw, json)
Hash identifier:          WiyzqHds0KYM6RihpdNBuhUeNGKGb+Rkkqe4lzXWNiY=
Subject key identifier:   F6:81:B9:60:98:BB:7B:C0:BB:85:4B:F6:D0:07:7E:09:39:66:B4:78
Authority key identifier: E3:51:5D:44:EA:00:45:23:EE:D3:61:3B:2D:12:E9:5F:44:D8:12:0D
Certificate issuer:       /CN=e3515d44ea004523eed3613b2d12e95f44d8120d
Certificate serial:       018AD0812DED3DB696CD2D5F704943187FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41FdROoARSPu02E7LRLpX0TYEg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.mft
Manifest number:          0F04
Signing time:             Tue 26 Sep 2023 08:00:41 +0000
Manifest this update:     Tue 26 Sep 2023 08:00:41 +0000
Manifest next update:     Wed 27 Sep 2023 08:00:41 +0000
Files and hashes:         1: 41FdROoARSPu02E7LRLpX0TYEg0.crl (hash: OVZ+jU8TcQkQuq5JJXDib27tj4cgm+RjLleX40LDprw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d0:81:2d:ed:3d:b6:96:cd:2d:5f:70:49:43:18:7f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3515d44ea004523eed3613b2d12e95f44d8120d
        Validity
            Not Before: Sep 26 08:00:41 2023 GMT
            Not After : Sep 27 08:00:41 2023 GMT
        Subject: CN=f681b96098bb7bc0bb854bf6d0077e093966b478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:ec:f1:67:7b:1c:5a:9b:7f:61:2c:3c:a8:
                    5a:c0:af:9a:24:c7:35:1f:34:92:5a:6d:86:42:3f:
                    63:21:90:4b:f0:4c:19:d8:4f:b5:16:3f:d3:92:b4:
                    d1:0d:49:01:3b:3e:57:5c:33:8b:0d:25:74:07:b2:
                    de:60:40:e3:56:4d:25:6d:60:02:b3:6c:ea:f7:35:
                    3b:84:16:f2:4e:a6:22:28:88:0c:ea:c1:40:7c:7c:
                    93:10:d8:db:5d:59:c9:a1:e3:46:16:44:1c:2e:97:
                    64:a0:59:ae:62:12:77:0d:c0:f8:9e:b8:14:bc:da:
                    bc:66:27:3f:dd:5a:95:eb:6b:f1:ab:4d:1f:46:5a:
                    f1:e5:88:fe:b0:01:b9:54:cc:39:9a:6a:4e:23:0b:
                    76:3c:9b:f4:ad:d1:1d:41:69:e4:a9:87:bd:09:7e:
                    5b:fc:46:a5:c1:3c:6c:1a:4f:4b:67:ad:dc:5f:d5:
                    af:db:cf:99:9d:21:10:4b:94:18:bf:d3:91:95:c2:
                    ac:91:fd:dc:d7:b4:7d:79:5d:63:2d:d2:a3:99:c1:
                    8f:38:0c:5e:7f:49:ec:72:49:77:b1:6e:7d:d9:60:
                    50:a8:74:da:2a:ec:bb:48:93:a1:0c:b4:42:44:8e:
                    38:71:95:22:d5:61:e7:55:e2:2d:77:3d:40:ea:61:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:B9:60:98:BB:7B:C0:BB:85:4B:F6:D0:07:7E:09:39:66:B4:78
            X509v3 Authority Key Identifier:
                keyid:E3:51:5D:44:EA:00:45:23:EE:D3:61:3B:2D:12:E9:5F:44:D8:12:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41FdROoARSPu02E7LRLpX0TYEg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:ad:34:56:b5:58:21:e9:aa:73:f6:e7:0d:9e:24:26:d9:
         ff:16:56:30:12:59:8e:4e:39:9c:5d:11:52:45:cd:fc:cc:cb:
         f6:0d:de:76:d8:b3:c9:c8:7a:5d:e1:15:84:ca:8b:68:cf:44:
         68:a4:63:75:61:8a:dd:2c:bf:61:36:ee:60:f0:dc:38:7f:81:
         56:2a:19:99:1a:67:2f:90:31:f7:30:ed:7f:ea:0f:8b:49:ba:
         46:d3:00:57:81:d0:e4:d5:4a:5e:69:36:ad:c7:55:1b:c2:ce:
         a5:73:c2:04:6d:2e:28:f2:eb:00:ba:6e:34:2b:b1:1a:35:25:
         0d:3e:cf:0e:b0:2c:47:9b:33:76:89:5d:36:61:43:f5:7f:1c:
         69:75:34:61:8e:27:86:b7:84:e3:12:ae:0d:a9:97:88:5b:d5:
         8f:7a:8c:8c:f3:83:96:79:f8:bc:13:3b:e3:38:eb:38:22:8d:
         e5:3a:75:4f:2d:63:b1:a3:92:50:42:4f:5a:e7:8c:19:f8:23:
         17:21:30:20:eb:b7:24:71:b9:4d:70:ae:5a:ae:b6:dc:5b:35:
         4d:dc:7e:70:77:d2:cc:38:50:89:91:f7:8f:96:9f:bf:6b:8d:
         40:38:fa:51:6b:1b:b0:97:cb:e0:74:98:3e:a8:48:1e:4f:63:
         0f:f8:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----