Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.mft
File:                     5LkNshgW3wH3Dylmg_6iwKyBYdk.mft (raw, json)
Hash identifier:          GgpirJE6pryiK2OZ6wsk4FFjlxG8BANy3KF47Kbzdx8=
Subject key identifier:   84:3B:45:DC:B8:77:72:1F:82:BA:FE:81:3D:6E:CD:AA:5A:0E:4D:D4
Authority key identifier: E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
Certificate issuer:       /CN=e4b90db21816df01f70f296683fea2c0ac8161d9
Certificate serial:       018A86E8A48C93F926EFEA5FE5729C24069C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LkNshgW3wH3Dylmg_6iwKyBYdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.mft
Manifest number:          07D3
Signing time:             Tue 12 Sep 2023 01:01:47 +0000
Manifest this update:     Tue 12 Sep 2023 01:01:47 +0000
Manifest next update:     Wed 13 Sep 2023 01:01:47 +0000
Files and hashes:         1: 5LkNshgW3wH3Dylmg_6iwKyBYdk.crl (hash: nFyB7HX3+Wg16YO+7czJnYTbIbbhnMW0zFqqCKQccF0=)
                          2: B8bAMNxxrjEgAheWJ73U3OS7H0c.roa (hash: eUJTPMgB7qHVCBsvmvUZqAZ3uS8/L3DtiLAehnzbAeU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:86:e8:a4:8c:93:f9:26:ef:ea:5f:e5:72:9c:24:06:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b90db21816df01f70f296683fea2c0ac8161d9
        Validity
            Not Before: Sep 12 01:01:47 2023 GMT
            Not After : Sep 13 01:01:47 2023 GMT
        Subject: CN=843b45dcb877721f82bafe813d6ecdaa5a0e4dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a1:db:2b:d1:e2:51:78:04:6f:81:47:93:93:
                    9f:59:1f:6d:64:c2:5c:16:66:9d:2c:2d:41:d1:03:
                    92:b7:37:92:a6:22:58:87:80:06:fe:f4:54:cd:c7:
                    27:74:d1:e4:93:00:79:ea:e8:0a:7f:b6:d0:17:97:
                    f6:78:aa:7a:cb:02:5e:9d:78:8d:0c:fa:ff:5d:61:
                    90:67:de:f4:9f:b9:3a:dd:89:a1:21:36:ac:0b:e2:
                    e9:b4:67:2a:b2:bc:36:59:f1:f4:e9:d7:87:de:33:
                    bf:5f:c0:8e:2e:c9:0a:e1:3d:15:5a:71:10:cb:74:
                    09:68:46:7f:55:d8:2a:aa:e3:ee:79:b3:ce:76:e3:
                    5c:66:a9:66:97:9f:6c:b1:7a:98:ea:fc:06:4c:4c:
                    ab:bc:eb:3a:91:1f:7d:0a:3e:a9:e3:93:c1:46:13:
                    2c:07:4c:af:1d:ac:61:6b:91:2d:5c:22:dd:01:ba:
                    c8:a1:38:99:76:e9:18:0b:e8:bd:d1:23:6b:28:63:
                    38:51:77:1d:31:d0:33:eb:0d:60:2c:e9:af:ee:03:
                    69:e1:cc:f8:ba:58:f8:17:7f:dd:ce:49:ff:c4:73:
                    e0:e8:f5:9e:11:67:8b:34:fd:9d:7b:3c:e6:34:57:
                    15:df:c3:bc:ad:19:53:62:e8:4b:4c:f5:5a:6c:05:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3B:45:DC:B8:77:72:1F:82:BA:FE:81:3D:6E:CD:AA:5A:0E:4D:D4
            X509v3 Authority Key Identifier:
                keyid:E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LkNshgW3wH3Dylmg_6iwKyBYdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:90:25:5c:4b:5e:32:97:a0:f8:59:ad:ca:8f:51:04:99:
         2a:7f:06:95:a8:3b:b4:ec:4c:4c:06:7d:a9:8f:97:1b:48:48:
         45:da:cc:b5:57:a7:d2:ef:19:27:e5:e0:80:a7:09:59:ef:7c:
         2f:a6:2a:6f:e2:11:b9:7d:f8:69:f8:90:0b:0e:12:6f:6a:f9:
         75:92:e6:64:8a:c6:09:6d:16:dc:49:0b:09:ba:df:ab:b0:90:
         01:18:0b:86:54:2a:8a:23:00:b3:7d:5a:4a:f1:ff:17:a0:83:
         aa:e4:ce:22:e0:48:db:ea:54:3d:4b:a7:0f:92:59:6e:94:e7:
         2f:9b:18:eb:22:2f:59:df:55:ec:d8:ed:9c:bb:8c:9f:d4:df:
         e7:eb:b0:e1:c0:14:4d:94:ef:0f:da:80:82:a3:cb:f1:b9:82:
         d4:e7:c7:75:b1:d5:73:aa:4b:8a:1f:8f:06:bf:92:05:bb:1d:
         70:2e:2b:f9:d8:48:e4:39:1b:4c:1a:c3:1f:f2:15:b6:63:4c:
         d1:f1:09:26:0b:b4:1c:10:92:82:f1:d9:d2:78:8c:33:d4:51:
         a5:20:e0:b2:84:a4:d6:88:06:d8:e2:00:e1:6e:11:a2:f2:c4:
         85:a3:72:c1:36:3b:7f:b8:ea:a0:12:a5:b7:55:01:30:4a:0a:
         c1:d8:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----