Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/wDKXYl-F1dwY8Ey3s-1SjHYNld4.mft
File:                     wDKXYl-F1dwY8Ey3s-1SjHYNld4.mft (raw, json)
Hash identifier:          HiV1vB4LL9gI0MBSVyNk1Atuu7+YoZ+btwae4U5/Ghw=
Subject key identifier:   5A:C8:BA:F6:5D:3F:CA:E6:CA:C1:51:F5:4F:33:02:D9:CF:EA:F3:AF
Authority key identifier: C0:32:97:62:5F:85:D5:DC:18:F0:4C:B7:B3:ED:52:8C:76:0D:95:DE
Certificate issuer:       /CN=c03297625f85d5dc18f04cb7b3ed528c760d95de
Certificate serial:       018C7A026D2878CFDD28E93B737E3D41968D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDKXYl-F1dwY8Ey3s-1SjHYNld4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/wDKXYl-F1dwY8Ey3s-1SjHYNld4.mft
Manifest number:          087F
Signing time:             Sun 17 Dec 2023 23:00:28 +0000
Manifest this update:     Sun 17 Dec 2023 23:00:28 +0000
Manifest next update:     Mon 18 Dec 2023 23:00:28 +0000
Files and hashes:         1: 2u1TeP1mLg5zkbTCpIW2N9Yyf5A.roa (hash: nqithXDkbgostv8StI1/XD4Bz/eXHfcg0OUTSHbVDRA=)
                          2: wDKXYl-F1dwY8Ey3s-1SjHYNld4.crl (hash: wCrHrY+ta3w4vTHBBa8qosXXiAUT86yLwH09XEtck1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7a:02:6d:28:78:cf:dd:28:e9:3b:73:7e:3d:41:96:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03297625f85d5dc18f04cb7b3ed528c760d95de
        Validity
            Not Before: Dec 17 23:00:28 2023 GMT
            Not After : Dec 18 23:00:28 2023 GMT
        Subject: CN=5ac8baf65d3fcae6cac151f54f3302d9cfeaf3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5b:fb:65:fb:ce:79:48:85:25:ae:e6:c3:aa:
                    a2:bf:4c:c8:b3:40:09:f5:a1:9c:42:22:38:83:53:
                    43:f7:83:a4:e1:a9:52:07:87:ec:29:21:a2:3e:2e:
                    6c:da:15:6a:e9:86:f9:11:df:36:8c:70:eb:0c:3c:
                    01:99:84:1d:30:5e:a2:57:5f:68:20:06:ab:be:23:
                    da:be:e3:a5:a0:a6:f3:d7:fe:9c:69:76:90:35:80:
                    32:ea:9a:b1:71:34:2b:84:c3:b4:bb:ef:07:87:ae:
                    84:51:95:80:59:50:38:04:5e:6c:90:e9:52:d3:df:
                    06:10:c0:34:6d:26:16:b9:21:39:16:24:77:76:67:
                    9e:99:e7:dc:a5:5f:6f:e1:38:6a:66:9f:b4:f4:0e:
                    2d:78:08:c7:70:ad:d3:6a:25:96:71:e2:b0:c4:e2:
                    aa:8f:eb:f6:2d:63:c0:7d:4e:ed:a4:db:64:05:9e:
                    e3:f0:19:4f:9e:a3:9f:6c:83:43:83:e1:0e:70:07:
                    af:ff:d1:83:66:7f:f2:18:dc:56:37:04:04:45:a5:
                    f3:5d:34:eb:9d:04:6a:00:ec:4a:6f:18:30:13:cf:
                    60:35:85:d3:3c:b2:41:45:bc:aa:d2:67:0e:a5:1d:
                    2d:6b:2f:c6:1d:e7:88:60:2c:e3:91:ba:e1:3e:58:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C8:BA:F6:5D:3F:CA:E6:CA:C1:51:F5:4F:33:02:D9:CF:EA:F3:AF
            X509v3 Authority Key Identifier:
                keyid:C0:32:97:62:5F:85:D5:DC:18:F0:4C:B7:B3:ED:52:8C:76:0D:95:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDKXYl-F1dwY8Ey3s-1SjHYNld4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/wDKXYl-F1dwY8Ey3s-1SjHYNld4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/wDKXYl-F1dwY8Ey3s-1SjHYNld4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:0e:55:bf:a3:a3:4c:b9:a7:90:82:eb:29:77:59:ee:d5:1c:
         e1:da:10:65:ae:ca:70:f9:84:b1:cf:fe:37:aa:3b:3d:5b:e2:
         3f:d5:4d:cf:13:b8:47:f4:c3:72:4a:db:dc:e7:6f:b4:64:f6:
         43:33:54:5c:93:ed:37:0c:ce:d5:8f:76:05:68:f8:10:2a:d4:
         d3:87:9a:c6:be:62:a9:3a:0f:83:05:f7:ed:bd:1d:72:12:9e:
         29:ed:03:be:a0:50:80:fa:09:13:c3:0f:00:eb:32:4c:91:11:
         c0:f1:18:aa:9c:d9:fd:45:a4:5e:59:de:71:31:4a:af:52:fd:
         31:a1:0d:36:91:38:f6:0c:8b:df:1b:5d:ff:65:5d:e1:88:6e:
         7b:ff:68:08:02:63:0c:bd:e8:7c:78:84:e9:3a:fe:f6:a8:5d:
         87:43:68:f8:e6:62:ad:32:29:ac:e7:27:d4:62:94:38:b5:29:
         0a:1c:9d:c1:ef:52:d2:c3:94:fc:b9:f9:fc:b6:62:62:69:82:
         30:62:77:84:e3:c5:24:c8:1a:20:c0:16:a7:ce:5b:eb:7d:d0:
         54:2d:d7:ed:de:48:da:00:22:d2:6a:7f:13:ec:64:c7:26:91:
         14:c7:ec:6e:4d:12:ca:0e:f8:38:23:a6:64:8c:99:00:e5:31:
         c6:6f:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----