Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3c8b19-60ab-4bb1-bfd8-0f2b30d9a05f/1/N5tb2IYvdsjq3TYIGpiUTcenRew.mft
File:                     N5tb2IYvdsjq3TYIGpiUTcenRew.mft (raw, json)
Hash identifier:          /KBNkCWQ4PjB1i5rB/1DdVxz4vZUiZmvZiJGSeCGZK0=
Subject key identifier:   4E:DC:AD:BD:F6:41:57:88:62:7E:45:FB:0A:3A:1B:BF:DC:7F:59:DC
Authority key identifier: 37:9B:5B:D8:86:2F:76:C8:EA:DD:36:08:1A:98:94:4D:C7:A7:45:EC
Certificate issuer:       /CN=379b5bd8862f76c8eadd36081a98944dc7a745ec
Certificate serial:       018B69115520F6018A194C85BE31180246EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5tb2IYvdsjq3TYIGpiUTcenRew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3c8b19-60ab-4bb1-bfd8-0f2b30d9a05f/1/N5tb2IYvdsjq3TYIGpiUTcenRew.mft
Manifest number:          0157
Signing time:             Wed 25 Oct 2023 23:00:25 +0000
Manifest this update:     Wed 25 Oct 2023 23:00:25 +0000
Manifest next update:     Thu 26 Oct 2023 23:00:25 +0000
Files and hashes:         1: N5tb2IYvdsjq3TYIGpiUTcenRew.crl (hash: PYO83AOKKNVTdqBuIajPO7b9VMnPpnfVbmfLSzZUOao=)
                          2: itD78vu4B5wnTm4o7jUw6HrkDDY.roa (hash: UirdYIaKzS6yve36/17I2o2xzGfrMnb0von6MJojMdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:69:11:55:20:f6:01:8a:19:4c:85:be:31:18:02:46:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379b5bd8862f76c8eadd36081a98944dc7a745ec
        Validity
            Not Before: Oct 25 23:00:25 2023 GMT
            Not After : Oct 26 23:00:25 2023 GMT
        Subject: CN=4edcadbdf6415788627e45fb0a3a1bbfdc7f59dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:1e:c6:17:df:a7:d3:58:1c:7c:b1:01:ca:
                    c9:f7:a5:a1:e3:43:19:e0:6f:6b:50:0c:34:20:f9:
                    f6:0d:70:4c:24:d7:98:c2:4e:0d:64:76:40:aa:55:
                    fa:07:04:23:68:d2:e8:a6:05:6e:04:9c:33:27:e2:
                    ab:c2:15:e4:74:0b:8b:b0:41:36:4a:21:b3:03:aa:
                    c4:dd:8a:9c:39:dd:7a:82:bc:17:5e:61:80:75:09:
                    a4:7c:fc:55:9d:b3:c7:ba:19:69:f3:bf:e3:c3:e9:
                    1c:61:c0:c5:e2:b3:20:5c:ee:1d:1f:52:19:19:d1:
                    7f:49:0c:15:1c:7d:7b:31:25:22:41:92:e0:6b:f3:
                    df:d9:2e:06:7f:1c:ee:73:c0:87:98:ad:d7:9d:be:
                    2e:6c:d6:78:b0:b8:a0:47:77:1c:4d:bd:19:c2:b2:
                    ff:7e:ae:ab:fb:c8:ab:3c:f3:33:b1:18:42:5a:2d:
                    9b:0d:5a:6b:8c:26:c5:be:a3:ba:7f:81:50:a8:41:
                    ec:ef:ed:ce:8b:4a:3a:43:cb:de:65:22:6c:73:b9:
                    15:28:4f:24:ee:ef:62:55:12:db:4e:0c:d9:e5:f4:
                    ba:2f:5c:2a:9b:b3:3c:d9:09:f5:f0:82:a6:92:fe:
                    dc:46:fc:98:1a:33:eb:cc:37:41:86:f6:96:7e:78:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DC:AD:BD:F6:41:57:88:62:7E:45:FB:0A:3A:1B:BF:DC:7F:59:DC
            X509v3 Authority Key Identifier:
                keyid:37:9B:5B:D8:86:2F:76:C8:EA:DD:36:08:1A:98:94:4D:C7:A7:45:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5tb2IYvdsjq3TYIGpiUTcenRew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3c8b19-60ab-4bb1-bfd8-0f2b30d9a05f/1/N5tb2IYvdsjq3TYIGpiUTcenRew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3c8b19-60ab-4bb1-bfd8-0f2b30d9a05f/1/N5tb2IYvdsjq3TYIGpiUTcenRew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:62:e2:a6:54:99:c1:b5:a6:90:c9:e5:cb:24:dc:70:21:
         2e:c3:d3:ab:2e:1a:05:2e:ff:1b:24:46:4f:8e:42:9c:4d:b2:
         01:2a:7e:f1:68:a4:67:1e:f0:f4:91:ae:cd:43:aa:ff:63:df:
         62:38:4a:a4:f2:61:41:e7:75:24:48:ab:f3:da:8d:83:4b:b3:
         bc:48:23:cd:4a:24:ce:9e:00:1b:88:07:c7:a4:06:6e:6c:27:
         fc:3c:75:15:3b:f5:28:31:ca:16:83:35:77:27:71:88:09:33:
         7d:ef:44:4e:a1:36:1d:54:32:bf:60:1c:95:20:0e:5e:39:10:
         bd:00:28:e8:d6:ec:9b:d5:cf:91:82:fe:90:c7:89:ff:db:24:
         1a:d7:4e:2e:d0:39:cd:13:7a:a7:3e:b7:7d:19:2c:ba:da:ce:
         4d:9d:0a:af:8a:ff:24:97:c4:c8:6c:d4:9a:73:5b:37:67:da:
         7c:f9:76:02:66:dc:2a:c9:de:18:0e:94:62:d7:02:5e:02:66:
         04:4c:c4:8d:ee:6a:ab:f1:e7:e9:c5:e6:75:3f:a9:f3:2a:a0:
         d9:d9:aa:ed:ad:59:ce:d7:22:73:e2:15:11:10:07:01:82:d6:
         8f:91:7d:34:f0:5a:61:e4:68:31:f9:2e:c3:39:7b:5e:2b:a5:
         56:28:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----