Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.mft
File:                     M-91L9mXi9QJO4LqtACb3L_3ec4.mft (raw, json)
Hash identifier:          UlYjsBiZ8yhQfzhAphf6aVD/AWpK0vVvNkEB4ptrUQE=
Subject key identifier:   F3:41:97:A3:28:F1:BD:00:88:9D:FA:93:53:F5:58:7A:A8:AB:27:E1
Authority key identifier: 33:EF:75:2F:D9:97:8B:D4:09:3B:82:EA:B4:00:9B:DC:BF:F7:79:CE
Certificate issuer:       /CN=33ef752fd9978bd4093b82eab4009bdcbff779ce
Certificate serial:       018C6C46B8D86A7061A47AEBCED0AA266EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-91L9mXi9QJO4LqtACb3L_3ec4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.mft
Manifest number:          0690
Signing time:             Fri 15 Dec 2023 07:00:23 +0000
Manifest this update:     Fri 15 Dec 2023 07:00:23 +0000
Manifest next update:     Sat 16 Dec 2023 07:00:23 +0000
Files and hashes:         1: M-91L9mXi9QJO4LqtACb3L_3ec4.crl (hash: d5Tav0Z4ZdLQSjiArXLXPcZCCd/fMC9Hs6xFnAUHCP4=)
                          2: m4G8R3I2AG8wCi_2jPDmNKNcP9M.roa (hash: LM5QnM5Cyrh8zdHVW5rz11Y32ZhIuvJpcEm0E5UUzhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6c:46:b8:d8:6a:70:61:a4:7a:eb:ce:d0:aa:26:6e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ef752fd9978bd4093b82eab4009bdcbff779ce
        Validity
            Not Before: Dec 15 07:00:23 2023 GMT
            Not After : Dec 16 07:00:23 2023 GMT
        Subject: CN=f34197a328f1bd00889dfa9353f5587aa8ab27e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:e9:2d:ec:0c:1f:c0:4d:4d:bf:67:c8:79:
                    29:57:c9:6b:34:75:8c:cb:6b:84:c6:62:3a:8f:9d:
                    ac:01:7d:4b:5c:89:ec:72:7d:52:60:22:81:fa:03:
                    06:11:00:d8:1d:af:85:8f:b1:15:d0:bd:1f:d5:60:
                    76:73:b4:b5:99:67:80:59:5d:4b:cf:8b:ab:c1:0b:
                    ba:a9:a5:4d:10:65:a7:3e:1a:55:cf:40:96:35:2e:
                    89:05:0e:76:d1:f9:ad:7d:e5:00:19:6d:69:6f:7b:
                    24:4f:9f:fd:ce:80:3c:60:cf:1f:7f:d5:b8:29:98:
                    a6:4d:4c:56:61:b2:01:38:f6:83:80:de:cb:35:0c:
                    f9:75:ce:7c:19:88:94:b1:95:75:4f:9a:5f:1b:51:
                    50:40:a3:47:41:4d:53:04:d8:7a:06:15:f9:4c:89:
                    4b:7d:36:fd:42:4d:63:87:45:6b:56:6d:aa:c7:63:
                    e4:9c:0f:52:ed:e2:57:60:f3:7f:2a:c5:ca:17:ff:
                    74:f4:e9:24:77:c5:99:cb:52:95:c0:fa:ae:0e:01:
                    63:a0:10:58:5b:7c:ad:60:f0:99:bb:a8:e7:da:48:
                    a9:b3:b0:13:eb:62:2a:f8:cb:89:b9:81:f3:3e:6f:
                    9e:cb:0c:ce:8a:f9:45:07:2d:46:9f:80:7d:c4:c9:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:41:97:A3:28:F1:BD:00:88:9D:FA:93:53:F5:58:7A:A8:AB:27:E1
            X509v3 Authority Key Identifier:
                keyid:33:EF:75:2F:D9:97:8B:D4:09:3B:82:EA:B4:00:9B:DC:BF:F7:79:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-91L9mXi9QJO4LqtACb3L_3ec4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:b3:47:57:fb:82:73:54:32:e0:b6:e3:0c:da:04:83:4d:
         69:43:6f:32:30:d9:0d:b7:0f:76:d8:d0:d6:99:3e:a1:56:11:
         53:a7:a5:72:91:b4:4a:cc:f9:56:dc:d2:8c:e9:4a:fb:df:1b:
         8a:3b:a0:ec:9d:85:9a:8a:8e:2c:ed:aa:d8:89:6c:db:8d:a2:
         86:2e:c3:af:db:cb:10:12:77:39:00:8e:2c:61:bd:36:57:fd:
         09:89:1a:e6:1e:ff:33:25:1d:f0:5f:02:e4:78:bf:5d:42:11:
         8a:f3:0b:e1:d6:54:2a:5c:4d:50:3b:48:fa:85:a4:e8:db:c4:
         ae:42:13:aa:15:3b:29:ac:3c:88:6e:60:09:5b:16:23:66:7f:
         7f:6d:11:71:40:24:94:ad:31:33:99:23:6e:6f:e3:ab:ef:fd:
         1c:82:a9:87:c9:83:fc:d8:32:f6:33:01:b6:ad:b8:4f:cb:39:
         44:26:aa:99:eb:1d:d5:9a:13:0f:dc:89:d6:14:2d:d8:49:4b:
         1b:c8:9a:14:09:82:35:78:17:8c:a9:e3:91:2d:99:b7:6a:68:
         2d:ad:d7:ff:a0:68:fa:76:a4:bc:28:f4:3b:6c:80:c2:78:cc:
         71:91:e0:c9:33:ef:db:48:07:1f:b5:71:db:ed:fb:b9:eb:25:
         32:d6:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----