Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f26afa-f76a-4474-9223-cd0fa1063e13/1/5iH2js7aVvMw5QZ-0-pSx7mCqK4.mft
File:                     5iH2js7aVvMw5QZ-0-pSx7mCqK4.mft (raw, json)
Hash identifier:          xQJKZSiuol+72S38D6dTnC6gGfV3D9UXloMZaDpNNBM=
Subject key identifier:   82:CC:B4:47:F3:AA:CE:A0:95:33:FC:F6:33:72:89:28:A4:4A:4A:74
Authority key identifier: E6:21:F6:8E:CE:DA:56:F3:30:E5:06:7E:D3:EA:52:C7:B9:82:A8:AE
Certificate issuer:       /CN=e621f68eceda56f330e5067ed3ea52c7b982a8ae
Certificate serial:       0189D4BB897A3A9B56FBB0F1A62BE39D4DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iH2js7aVvMw5QZ-0-pSx7mCqK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f26afa-f76a-4474-9223-cd0fa1063e13/1/5iH2js7aVvMw5QZ-0-pSx7mCqK4.mft
Manifest number:          087A
Signing time:             Tue 08 Aug 2023 10:40:07 +0000
Manifest this update:     Tue 08 Aug 2023 10:40:07 +0000
Manifest next update:     Wed 09 Aug 2023 10:40:07 +0000
Files and hashes:         1: 5iH2js7aVvMw5QZ-0-pSx7mCqK4.crl (hash: xLoksp0oG7dNVPWE1qJJ5/+e9ikAm8poKru1VA2wP5s=)
                          2: AgvIIL6Xy1fPN8RVioiy8wQdUjo.roa (hash: neoaPKzwi06sRe8JwQj1Zg0RT5WgLC5RgMhGmaNJxHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:bb:89:7a:3a:9b:56:fb:b0:f1:a6:2b:e3:9d:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e621f68eceda56f330e5067ed3ea52c7b982a8ae
        Validity
            Not Before: Aug  8 10:40:07 2023 GMT
            Not After : Aug  9 10:40:07 2023 GMT
        Subject: CN=82ccb447f3aacea09533fcf633728928a44a4a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:90:a1:17:80:df:d6:a3:1d:1b:04:0d:00:
                    59:05:e0:9e:2c:34:ed:12:f0:96:27:3a:f8:74:66:
                    41:15:39:28:0f:80:ec:1d:50:90:f2:ac:98:5e:17:
                    4a:66:92:91:ec:cf:ee:b5:a5:ee:34:2d:56:a4:92:
                    44:89:87:a4:d8:85:54:ee:8a:77:b3:08:41:d0:c3:
                    4c:21:21:a1:33:9e:fb:cd:7b:d8:89:c2:73:30:b8:
                    fc:5a:06:59:0f:f4:21:c1:40:da:a5:5b:25:dc:77:
                    36:91:4d:ea:3b:e5:d8:4e:09:55:ca:74:cc:27:1f:
                    8c:b9:97:1b:90:e1:64:56:1e:ba:c8:9c:ae:d2:1d:
                    ef:61:b9:e1:ea:c7:c8:63:e4:da:3f:5e:ca:4b:32:
                    7b:4a:e2:be:d6:13:14:7c:8d:28:fa:f0:94:1b:5f:
                    dc:d9:dd:ec:49:7d:a1:2c:ca:53:6c:af:bf:75:12:
                    aa:26:b4:3f:1e:2a:b9:78:13:57:2f:9b:33:54:9f:
                    23:7f:e9:d3:16:98:92:d8:3d:96:7d:4c:d6:ad:29:
                    ca:a8:b5:8a:07:7a:ca:de:9b:83:24:57:8f:af:5c:
                    5c:6b:81:c7:29:7e:92:c5:48:12:7e:11:67:38:01:
                    a9:7d:a8:e7:c4:8b:82:1f:df:93:40:9d:27:69:6c:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:B4:47:F3:AA:CE:A0:95:33:FC:F6:33:72:89:28:A4:4A:4A:74
            X509v3 Authority Key Identifier:
                keyid:E6:21:F6:8E:CE:DA:56:F3:30:E5:06:7E:D3:EA:52:C7:B9:82:A8:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iH2js7aVvMw5QZ-0-pSx7mCqK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f26afa-f76a-4474-9223-cd0fa1063e13/1/5iH2js7aVvMw5QZ-0-pSx7mCqK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f26afa-f76a-4474-9223-cd0fa1063e13/1/5iH2js7aVvMw5QZ-0-pSx7mCqK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:43:28:f2:57:aa:d4:39:f1:24:6a:d0:22:0a:ba:93:1f:
         bb:52:df:18:b7:f6:7e:24:eb:61:8e:64:0c:fe:af:26:25:f2:
         bb:c8:48:f2:cf:eb:11:68:ce:97:4b:d3:f6:b8:49:4a:67:5e:
         c3:9b:e6:66:47:b7:4c:a2:fc:89:fb:a2:89:5a:48:db:84:25:
         4d:a9:2b:08:6b:4c:52:c1:b9:4a:95:c1:18:69:a7:7c:33:9c:
         8a:ad:b9:b1:26:bd:f5:06:cb:fb:c6:b7:31:53:02:d3:63:45:
         96:1f:6f:01:73:64:3d:6c:08:f4:dc:05:83:1f:ba:f5:06:bb:
         d4:08:cf:d4:85:88:af:94:f7:51:5e:ad:a5:a6:e4:32:40:27:
         51:b5:a7:e3:33:77:bf:b4:24:ca:b0:4a:c8:fc:df:b7:a1:5f:
         7e:30:f2:ee:d3:19:3f:01:05:55:06:9a:cb:12:93:d6:ee:09:
         9d:0f:06:1a:d1:83:5b:f2:4c:9a:64:7f:a7:ff:76:70:c7:2d:
         70:88:af:cc:f9:b2:6b:48:03:5d:ae:15:ff:69:f6:3a:93:9c:
         87:3f:78:6f:f0:1f:65:74:a0:72:5f:da:96:65:18:62:8a:78:
         2b:87:ad:1e:13:4c:da:44:36:44:2f:9e:1b:7a:2c:3c:5a:28:
         b9:f9:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----