Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.mft
File:                     WuFGr8tuloaKHNg33kbLGEiS3Cg.mft (raw, json)
Hash identifier:          7xQbLgrHtqFVOG0nJwZDENN/pMxPCNFnVwwPcnCoinw=
Subject key identifier:   4A:A9:AA:C8:F9:B2:69:85:F2:6E:A7:E5:92:C8:52:C0:E6:C8:E9:DD
Authority key identifier: 5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
Certificate issuer:       /CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Certificate serial:       018B0325604E30F841880A86E713689E7BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.mft
Manifest number:          0883
Signing time:             Fri 06 Oct 2023 04:01:02 +0000
Manifest this update:     Fri 06 Oct 2023 04:01:02 +0000
Manifest next update:     Sat 07 Oct 2023 04:01:02 +0000
Files and hashes:         1: 3b-v6f0xNPFjrPg3aZeVIYZHmoE.roa (hash: eGpuNQhGDGHaNTGUNyK0vAtmRsykzlJB1mNrlbr36MA=)
                          2: 7LzP7pZFlWisAH0o50bzGk6Eysk.roa (hash: 99AzT4mBQuwegmyNxtchb2Q/y8SXFzTnzLkjotFpm9E=)
                          3: WuFGr8tuloaKHNg33kbLGEiS3Cg.crl (hash: 5GPBsj7nxhTayAc2hTLdzOCq0vKTtgkfw38/ggvIqPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:03:25:60:4e:30:f8:41:88:0a:86:e7:13:68:9e:7b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae146afcb6e96868a1cd837de46cb184892dc28
        Validity
            Not Before: Oct  6 04:01:02 2023 GMT
            Not After : Oct  7 04:01:02 2023 GMT
        Subject: CN=4aa9aac8f9b26985f26ea7e592c852c0e6c8e9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:48:d4:39:0c:0a:f1:c4:ef:b7:68:72:ce:
                    4c:ca:0f:99:2b:7b:7b:b2:fc:b8:f9:21:62:5a:85:
                    e3:33:a0:a2:10:5c:1e:06:6b:a3:7d:9b:c2:66:40:
                    d3:0c:dc:b7:fd:98:e7:e2:bb:09:b4:a0:1b:fa:93:
                    52:c9:68:38:7a:c3:a3:11:3d:d5:18:a0:05:18:8c:
                    f5:0a:f6:23:93:26:4a:a8:8c:0d:3e:02:c2:6d:a5:
                    5e:f3:92:7c:4a:f8:a5:17:ab:65:85:c7:81:02:33:
                    01:a1:92:24:ed:7a:42:2e:fc:55:1e:60:49:41:07:
                    92:82:f4:2c:76:c4:00:ac:a2:66:a9:ca:21:79:d4:
                    34:22:a1:29:07:d7:4b:22:cb:d8:00:8e:d7:ca:90:
                    b8:aa:0a:29:d0:b9:14:a4:8d:a1:0b:be:0b:90:e9:
                    d4:a3:f3:11:8f:9f:d4:05:e9:59:ce:6d:72:18:aa:
                    34:b2:ca:6e:24:ad:6c:0a:96:1e:b0:d4:99:97:e9:
                    0a:db:9c:80:fd:5e:8c:dc:c1:45:42:fb:12:a1:ff:
                    dc:a7:e2:1b:11:ae:b8:3e:c9:14:4e:2d:8d:e3:cc:
                    6e:be:d0:40:6f:0b:13:1e:4b:b2:b5:b2:6e:8a:49:
                    ac:11:81:f0:90:8f:38:43:e4:06:19:9b:12:f1:7d:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:AA:C8:F9:B2:69:85:F2:6E:A7:E5:92:C8:52:C0:E6:C8:E9:DD
            X509v3 Authority Key Identifier:
                keyid:5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:76:1f:25:af:d9:4f:de:fe:42:56:6a:33:2f:8d:6c:01:70:
         b1:05:aa:76:57:ca:ca:e7:cb:9f:cc:03:7b:14:46:49:a7:bd:
         d6:2b:d8:eb:07:2d:f9:4c:55:97:81:01:df:8e:98:5b:bd:44:
         84:cf:a2:c4:d5:1d:c5:1b:fc:5a:79:e7:19:6a:ee:33:54:d8:
         e4:f9:04:af:9f:82:1f:dd:39:41:3b:88:9a:66:93:35:f6:f2:
         3c:c7:71:95:89:0e:ed:8d:77:a7:65:d4:7f:29:77:78:87:93:
         62:b4:32:08:8f:4d:1b:f6:d1:69:de:92:5d:20:ea:c3:c9:6a:
         1d:a3:60:05:67:7c:fa:03:af:e5:ec:79:8a:30:8c:85:a1:d0:
         b1:e5:da:6c:a1:55:b9:e5:70:bd:1c:e8:24:fd:15:09:fa:ad:
         f5:48:a7:c1:80:db:06:03:12:d8:df:15:f5:fd:5d:a9:72:de:
         a4:3e:be:1a:a4:f6:79:09:07:07:af:dc:bd:55:63:33:46:81:
         de:62:a2:48:80:ab:76:88:33:8a:f3:63:0f:a3:8e:19:7d:f9:
         48:77:c5:73:be:ae:66:da:74:e4:29:56:1e:af:75:f0:ce:c4:
         ba:84:6b:93:a6:d2:74:22:20:8e:51:38:93:3f:22:cd:78:ac:
         dd:6f:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----