Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/V4irW-KkKu1sbnte-iSSkefIqIM.mft
File:                     V4irW-KkKu1sbnte-iSSkefIqIM.mft (raw, json)
Hash identifier:          ECiOBVNLI9yi35CKQ0fUoRx7N6uZQfvGAhd3PoNLXcg=
Subject key identifier:   64:95:92:4E:41:18:49:32:DD:FC:BC:91:F6:75:BB:A1:42:DF:C0:A1
Authority key identifier: 57:88:AB:5B:E2:A4:2A:ED:6C:6E:7B:5E:FA:24:92:91:E7:C8:A8:83
Certificate issuer:       /CN=5788ab5be2a42aed6c6e7b5efa249291e7c8a883
Certificate serial:       018C8606FA984740452BD4FD95D9B331EBCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4irW-KkKu1sbnte-iSSkefIqIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/V4irW-KkKu1sbnte-iSSkefIqIM.mft
Manifest number:          08F6
Signing time:             Wed 20 Dec 2023 07:00:53 +0000
Manifest this update:     Wed 20 Dec 2023 07:00:53 +0000
Manifest next update:     Thu 21 Dec 2023 07:00:53 +0000
Files and hashes:         1: 2ThglEJeAKvxa04992l53zxxdTE.roa (hash: dZ0kDg7wPdgxvv7FR8qD6s1gwg2hVV6tstZFV3L2L1g=)
                          2: V4irW-KkKu1sbnte-iSSkefIqIM.crl (hash: Bz66yW54Pjw6HdrZgmpREbyFRnk67bDEBPZH704rAoU=)
                          3: xAzpU1yrHnIwQRMs6oebb46nba8.roa (hash: zgzEjHzYbQsy1xXrPsB0d6eTHkgO/I0x1eUAmQcGI5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:86:06:fa:98:47:40:45:2b:d4:fd:95:d9:b3:31:eb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5788ab5be2a42aed6c6e7b5efa249291e7c8a883
        Validity
            Not Before: Dec 20 07:00:53 2023 GMT
            Not After : Dec 21 07:00:53 2023 GMT
        Subject: CN=6495924e41184932ddfcbc91f675bba142dfc0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:0c:b8:69:03:7a:f0:90:08:e7:01:4a:f4:
                    1c:cd:9f:3e:33:4a:dc:0d:a0:47:ba:78:5c:16:a3:
                    73:f2:5f:2c:ce:3a:fc:dd:dc:3a:1f:c7:21:b1:8d:
                    55:af:ee:a4:83:d7:b4:b8:f2:ae:41:df:92:e8:73:
                    4c:b5:86:b0:b2:f3:56:21:5d:23:3c:eb:67:e0:2b:
                    48:b6:7e:06:8f:3f:5c:99:56:cd:67:0a:18:97:d4:
                    72:e7:e9:a1:ba:a4:c7:16:b0:6c:8d:77:46:c7:7b:
                    04:35:99:a5:d3:0b:61:f0:89:18:74:71:d7:7c:53:
                    41:b8:77:9f:c9:73:b7:c8:e7:fc:02:45:ba:36:87:
                    9f:c3:af:63:16:c1:18:50:83:3f:2b:09:0e:a9:13:
                    09:c5:1a:af:26:23:dc:f7:d9:b4:d5:a2:2e:cf:29:
                    af:58:6c:99:51:7b:6b:4e:6a:84:5d:c7:fe:bb:1f:
                    bc:1a:a9:75:57:55:22:c2:f4:67:02:58:4b:1b:a7:
                    43:cb:c6:79:ad:c0:f7:ee:4d:0b:06:43:9f:9e:9b:
                    4d:a1:7c:4e:b3:49:7e:dd:df:57:9b:b6:b0:f9:cb:
                    06:ad:ca:bc:83:88:1e:1b:f3:40:74:fd:3e:30:75:
                    e0:f8:77:20:3b:de:61:9a:66:87:83:22:1d:97:43:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:95:92:4E:41:18:49:32:DD:FC:BC:91:F6:75:BB:A1:42:DF:C0:A1
            X509v3 Authority Key Identifier:
                keyid:57:88:AB:5B:E2:A4:2A:ED:6C:6E:7B:5E:FA:24:92:91:E7:C8:A8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4irW-KkKu1sbnte-iSSkefIqIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/V4irW-KkKu1sbnte-iSSkefIqIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ae5ff-82cb-42ae-8e41-e56617394cc3/1/V4irW-KkKu1sbnte-iSSkefIqIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3d:d9:bf:24:94:c3:ba:33:6a:76:9f:0e:76:f5:c6:96:66:
         8e:02:74:1e:a3:e3:44:2c:fc:14:88:46:df:f1:59:b6:0e:8f:
         0e:31:24:01:74:57:bf:da:2b:dc:3c:c2:7c:d5:89:5a:93:11:
         8f:46:8b:6c:68:7b:cb:18:1e:f7:2e:2d:f3:92:2b:e8:f4:a3:
         2c:eb:31:95:d4:05:e1:c6:6b:6c:a2:89:b9:3f:bf:c4:0f:d9:
         a2:ca:20:4d:63:de:32:3c:fd:a5:ad:19:dd:9f:8f:d3:1f:16:
         60:1f:20:8e:21:77:f1:51:72:51:0c:ed:41:18:92:06:24:b8:
         6f:bd:c0:c7:94:75:1d:f4:de:91:e8:f8:2f:60:c4:06:28:65:
         2d:b8:09:03:b5:4d:71:d7:36:2a:34:20:6e:fc:83:f3:1d:6a:
         ee:d5:77:a0:37:9f:10:46:94:5b:95:65:9e:74:81:42:f4:c2:
         90:30:8d:60:13:ba:8b:16:d0:6e:9e:6b:93:7a:fe:7d:e8:41:
         9c:da:83:8b:d2:d3:c0:27:bc:95:de:13:2c:1c:dd:7c:6b:2b:
         65:04:28:61:68:09:aa:ae:27:34:50:05:e0:2d:5d:8b:ca:ec:
         a0:fc:bf:b7:91:97:72:cb:5b:42:8f:0f:7e:4e:ba:95:ff:f0:
         df:6d:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----