Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fd86b7-b7c5-41ac-b436-d3abf8bfeee6/1/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.mft
File:                     1tP_rkXMOZ8Oyg_AofZH6OYSXK4.mft (raw, json)
Hash identifier:          0JXVHhDLsvSNChiMnUKeKyEqPC1w6m8mlXeARj/a+fA=
Subject key identifier:   32:A0:5E:20:43:8A:DE:42:11:7B:00:DE:19:75:93:5F:0E:54:42:DD
Authority key identifier: D6:D3:FF:AE:45:CC:39:9F:0E:CA:0F:C0:A1:F6:47:E8:E6:12:5C:AE
Certificate issuer:       /CN=d6d3ffae45cc399f0eca0fc0a1f647e8e6125cae
Certificate serial:       018B4C511276128CD9FD31E9E821539D48BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/fd86b7-b7c5-41ac-b436-d3abf8bfeee6/1/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.mft
Manifest number:          085A
Signing time:             Fri 20 Oct 2023 09:01:03 +0000
Manifest this update:     Fri 20 Oct 2023 09:01:03 +0000
Manifest next update:     Sat 21 Oct 2023 09:01:03 +0000
Files and hashes:         1: 1tP_rkXMOZ8Oyg_AofZH6OYSXK4.crl (hash: lZv7b+wdfM16VY3vJpFGx7vWhbFOsGzwRRI7mggLd0Q=)
                          2: 6eQL3g8KHSAuOyenkITK_gaP0i8.roa (hash: an4TR5VRu2y2JqejKcnNTaqM0+7Upzk1mdDJie57+pM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4c:51:12:76:12:8c:d9:fd:31:e9:e8:21:53:9d:48:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d3ffae45cc399f0eca0fc0a1f647e8e6125cae
        Validity
            Not Before: Oct 20 09:01:03 2023 GMT
            Not After : Oct 21 09:01:03 2023 GMT
        Subject: CN=32a05e20438ade42117b00de1975935f0e5442dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:21:79:7e:69:49:25:3b:1e:e2:6a:7d:40:
                    f4:a9:1a:74:39:98:3c:54:91:94:99:da:01:43:9a:
                    da:16:06:d4:ed:92:3f:e6:f9:75:14:e7:6e:4f:d1:
                    ad:90:39:74:e3:de:38:ed:48:d9:45:5e:6e:c5:67:
                    64:c7:4d:8f:6c:97:9c:22:60:22:a5:63:22:f2:eb:
                    17:e9:53:99:96:31:3c:86:e2:ac:66:d3:89:d3:bf:
                    ac:65:16:33:e3:75:60:4b:77:a5:bb:b3:0f:11:ad:
                    40:af:0c:83:f3:23:0c:71:8a:b5:7a:cc:b7:69:7a:
                    7b:fd:6a:36:07:3f:52:2e:a3:b2:ac:85:81:83:7e:
                    a3:07:be:59:e7:eb:29:72:24:ed:41:81:64:e5:33:
                    ef:ee:34:81:92:5b:0d:e0:08:c7:83:5b:bb:ee:29:
                    0a:f4:a3:91:2b:bb:75:2e:66:cc:db:a6:2c:95:97:
                    b4:3c:4a:fa:8c:8e:d1:98:2a:18:6e:9d:44:7c:4d:
                    53:df:53:58:6c:e8:13:9f:d1:1e:dc:77:3b:21:ba:
                    51:f8:64:d8:f7:00:a6:bd:3e:b1:2e:a0:28:86:85:
                    fb:5d:a3:7b:ac:7c:1c:53:07:e1:e5:f7:63:bf:7e:
                    23:5d:f6:9f:f8:88:ce:18:57:87:0f:f2:ea:47:9d:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A0:5E:20:43:8A:DE:42:11:7B:00:DE:19:75:93:5F:0E:54:42:DD
            X509v3 Authority Key Identifier:
                keyid:D6:D3:FF:AE:45:CC:39:9F:0E:CA:0F:C0:A1:F6:47:E8:E6:12:5C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fd86b7-b7c5-41ac-b436-d3abf8bfeee6/1/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fd86b7-b7c5-41ac-b436-d3abf8bfeee6/1/1tP_rkXMOZ8Oyg_AofZH6OYSXK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5e:05:5d:3e:ee:2d:ae:06:f2:81:8f:34:51:68:63:3e:c0:
         7e:0b:a2:f5:0e:c9:d4:61:dd:48:86:d3:7a:25:00:0c:fa:12:
         92:8c:10:00:39:35:ce:73:57:98:bd:fa:ef:96:46:85:1d:62:
         43:46:72:13:6b:5c:f2:83:a2:ea:bd:2a:e6:ab:38:ed:35:ab:
         80:89:bc:66:d0:91:2a:97:96:99:df:ed:2e:23:32:41:cb:78:
         4a:02:8a:67:fb:65:15:c1:3f:89:4b:f5:6e:09:17:1b:0c:71:
         30:ec:27:93:0d:81:71:6c:5b:1e:c9:ee:62:dc:c7:dc:6c:69:
         b7:f6:b1:e5:ab:63:c6:d7:23:a2:68:98:29:32:cc:ce:15:e0:
         05:22:b1:6e:f2:d4:fd:a7:f7:42:10:09:3f:62:a0:b1:fb:75:
         c0:88:d0:3e:80:e6:d8:8f:b1:b1:cd:6a:f9:c2:0a:ff:17:de:
         5d:b3:b7:18:60:a3:db:3a:a3:00:bf:9e:6e:c1:d9:69:48:8e:
         e4:38:0b:c4:43:9b:17:10:39:c1:32:dc:29:5b:a1:06:20:06:
         55:63:f8:3b:3e:f0:bd:37:2f:63:39:b7:c6:b9:93:49:96:0a:
         5a:81:9e:90:a5:44:3b:bf:ac:04:70:50:f6:e4:9a:33:46:74:
         eb:5f:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----