Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/wCZWfcsClb3ncJwqfWAa-upk7jE.mft
File:                     wCZWfcsClb3ncJwqfWAa-upk7jE.mft (raw, json)
Hash identifier:          eVXXqVeVVuys039bRPVbNaJNW/nUD7apYYueUEjCNE4=
Subject key identifier:   DB:A4:0D:45:8F:5D:6D:21:D1:E2:18:BA:53:47:9D:DF:27:30:E4:59
Authority key identifier: C0:26:56:7D:CB:02:95:BD:E7:70:9C:2A:7D:60:1A:FA:EA:64:EE:31
Certificate issuer:       /CN=c026567dcb0295bde7709c2a7d601afaea64ee31
Certificate serial:       01896E10E93C5274F269713977B8DDF3DC6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wCZWfcsClb3ncJwqfWAa-upk7jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/wCZWfcsClb3ncJwqfWAa-upk7jE.mft
Manifest number:          0899
Signing time:             Wed 19 Jul 2023 12:12:29 +0000
Manifest this update:     Wed 19 Jul 2023 12:12:29 +0000
Manifest next update:     Thu 20 Jul 2023 12:12:29 +0000
Files and hashes:         1: 1s8VPTbjZ6v0lj0j9MOtiwTFZhI.roa (hash: nrL+gmoCbBMLx8Q4yBJURnifuAkv6/YdwoqYJmw+sy4=)
                          2: T5dvqj83o58aN8mWgehMO1PEu_g.roa (hash: j1VdEca/rbn6CmqdM2xdv0MozdftCzjfgqJGNXp2Zjg=)
                          3: wCZWfcsClb3ncJwqfWAa-upk7jE.crl (hash: NdtyxZUj9T8G/5c0dtDsQmUiNkXIPPeoj41CPHsZb1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6e:10:e9:3c:52:74:f2:69:71:39:77:b8:dd:f3:dc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c026567dcb0295bde7709c2a7d601afaea64ee31
        Validity
            Not Before: Jul 19 12:12:29 2023 GMT
            Not After : Jul 20 12:12:29 2023 GMT
        Subject: CN=dba40d458f5d6d21d1e218ba53479ddf2730e459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:bc:7f:fa:11:f0:cb:c2:d8:5b:f2:eb:85:
                    14:93:ee:16:cd:0c:08:eb:bc:70:38:2e:e2:9b:1f:
                    47:f7:97:5c:a0:b5:b6:03:57:02:40:e5:b3:37:5a:
                    c6:b1:fc:91:49:8a:37:7f:ab:bc:0c:5b:a8:3a:a9:
                    64:81:ff:f1:60:a0:87:b3:5a:4a:96:c5:2c:bb:41:
                    ee:a8:de:d1:b6:bb:78:0e:45:7e:99:c1:c0:4c:90:
                    df:30:0c:17:d4:3b:9b:b6:e3:3e:e1:d6:f8:a9:7e:
                    df:52:33:c4:7e:2d:cc:b5:b2:33:64:42:40:97:a7:
                    3e:08:f2:ee:03:f9:5c:59:7f:89:32:23:85:5d:f0:
                    22:71:5c:cd:4d:82:f7:df:16:aa:7d:ca:c4:97:80:
                    5e:34:98:42:9a:59:5e:ec:5b:f2:c4:d7:f1:2e:37:
                    55:25:bf:02:0c:d9:28:87:2e:0f:91:10:6d:fe:7a:
                    00:23:f1:2d:bf:ac:b9:b7:15:67:d1:16:28:a9:06:
                    4a:32:c1:41:61:cf:12:28:c9:c2:d0:f2:ce:8e:ba:
                    7e:d0:2b:2c:dd:f2:07:f6:10:68:05:93:43:35:51:
                    32:d3:b3:5d:95:1b:6a:91:89:48:ba:a8:b3:2f:20:
                    a4:b1:87:6a:4c:b6:1e:91:6e:d7:08:51:8e:71:0e:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A4:0D:45:8F:5D:6D:21:D1:E2:18:BA:53:47:9D:DF:27:30:E4:59
            X509v3 Authority Key Identifier:
                keyid:C0:26:56:7D:CB:02:95:BD:E7:70:9C:2A:7D:60:1A:FA:EA:64:EE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCZWfcsClb3ncJwqfWAa-upk7jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/wCZWfcsClb3ncJwqfWAa-upk7jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/wCZWfcsClb3ncJwqfWAa-upk7jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:28:5c:4c:c2:43:24:50:4b:29:d1:ae:62:f0:58:27:c0:6e:
         e8:fc:43:26:14:95:b0:82:d7:2f:8c:56:08:89:d9:62:d8:5c:
         17:1f:6d:67:18:de:b2:df:de:d2:2e:38:1c:4d:c8:ab:2f:66:
         42:e8:cd:b0:c8:a2:69:3f:b7:0d:28:27:9c:82:cd:bc:43:8a:
         04:66:4e:ae:62:76:d0:a3:a1:52:76:df:f9:b7:7e:96:be:e5:
         52:74:8f:c2:bd:8e:4e:94:53:ff:99:ab:ae:6a:12:e2:29:c4:
         60:59:16:cf:3c:ae:0c:9b:71:2d:0b:f1:85:c0:c1:60:b3:00:
         e8:ec:eb:05:2d:3d:43:06:52:69:b6:fe:56:d8:a5:10:b8:9e:
         f8:66:52:bf:7d:03:01:c1:a9:c7:c6:21:e0:63:8f:03:30:72:
         6b:a0:ed:37:fb:94:69:c8:04:3e:9a:2a:2c:76:5f:43:28:a4:
         fb:54:bb:66:48:eb:3e:fa:3b:17:c0:c2:bb:c2:04:ac:4e:1d:
         96:40:51:85:f3:3a:a0:c7:c6:5b:19:2e:5f:a5:c0:4a:91:32:
         54:21:04:20:ec:89:07:1b:7a:14:f4:73:a9:e5:d3:d3:4e:88:
         44:ac:74:7e:fc:9d:07:df:0e:53:6d:6b:69:0b:fe:3b:ae:09:
         6c:66:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----