Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5d2e7a-4279-47b8-9f4c-40e7c4dbc4b8/1/qccv5BQIB-7POKafDuQfgK-oVNE.mft
File:                     qccv5BQIB-7POKafDuQfgK-oVNE.mft (raw, json)
Hash identifier:          rnUJezE2Zhfwkvu8MyKZV4maCCeD8kGPxmaIODkzlPI=
Subject key identifier:   36:0A:22:FA:9E:67:99:90:22:02:A3:67:84:97:70:FC:04:A4:72:A9
Authority key identifier: A9:C7:2F:E4:14:08:07:EE:CF:38:A6:9F:0E:E4:1F:80:AF:A8:54:D1
Certificate issuer:       /CN=a9c72fe4140807eecf38a69f0ee41f80afa854d1
Certificate serial:       0189F7E39AAA79807DA119B94718E5356804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qccv5BQIB-7POKafDuQfgK-oVNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/5d2e7a-4279-47b8-9f4c-40e7c4dbc4b8/1/qccv5BQIB-7POKafDuQfgK-oVNE.mft
Manifest number:          0613
Signing time:             Tue 15 Aug 2023 06:30:35 +0000
Manifest this update:     Tue 15 Aug 2023 06:30:35 +0000
Manifest next update:     Wed 16 Aug 2023 06:30:35 +0000
Files and hashes:         1: WB4PwQ2QNH4famJc9MKlkRNAcOg.roa (hash: CUDUeIOOV1XjIjVQJlqfUqrUXX8AchWEYynsSKK1asA=)
                          2: qccv5BQIB-7POKafDuQfgK-oVNE.crl (hash: c0Dp7xpl6bbIW5Wt4DJc48975MD3z+fUJkmpNtQlBPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f7:e3:9a:aa:79:80:7d:a1:19:b9:47:18:e5:35:68:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c72fe4140807eecf38a69f0ee41f80afa854d1
        Validity
            Not Before: Aug 15 06:30:35 2023 GMT
            Not After : Aug 16 06:30:35 2023 GMT
        Subject: CN=360a22fa9e6799902202a367849770fc04a472a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:9d:c8:a3:94:95:48:ec:69:63:bc:ce:cc:
                    2d:da:69:41:03:ec:ba:04:78:d5:b2:d7:d7:3f:ed:
                    89:c2:0c:15:b2:3d:45:5b:ef:9e:7a:3d:65:22:df:
                    e0:ef:37:2a:8c:54:9c:0c:41:e0:8d:de:e6:f3:47:
                    98:a7:11:c8:ca:7b:01:2f:a0:6a:c4:8f:85:6f:bc:
                    fc:0b:09:b4:c7:ba:e3:e2:55:d8:fd:74:a3:d8:64:
                    d1:19:78:da:c1:11:6e:b8:74:b9:a9:75:c5:a0:38:
                    7d:e8:e5:8a:3d:5a:03:2f:e4:25:a1:3f:ec:db:00:
                    72:9b:d7:40:9b:63:3c:46:80:40:58:b3:3e:17:17:
                    a3:f4:4b:3b:71:80:66:50:67:cb:8e:5c:88:31:a4:
                    81:26:ed:93:b6:fc:5b:dd:49:8f:64:c0:f3:27:9e:
                    55:65:0d:d1:22:d9:71:76:fd:d9:2a:96:9b:a3:e0:
                    db:fe:95:e4:d6:9f:1f:83:72:b8:a0:e0:4a:9c:60:
                    6e:2c:85:c8:bd:ed:7f:9b:a3:ae:3d:61:40:75:6f:
                    d6:c1:76:2b:27:f7:c8:7c:6c:1e:4e:32:da:d2:79:
                    8d:3b:32:cc:e9:be:23:4c:0a:2c:d3:ad:20:69:dc:
                    b2:77:d7:28:f5:76:86:a7:c2:e3:1d:d6:6c:22:87:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:22:FA:9E:67:99:90:22:02:A3:67:84:97:70:FC:04:A4:72:A9
            X509v3 Authority Key Identifier:
                keyid:A9:C7:2F:E4:14:08:07:EE:CF:38:A6:9F:0E:E4:1F:80:AF:A8:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qccv5BQIB-7POKafDuQfgK-oVNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5d2e7a-4279-47b8-9f4c-40e7c4dbc4b8/1/qccv5BQIB-7POKafDuQfgK-oVNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5d2e7a-4279-47b8-9f4c-40e7c4dbc4b8/1/qccv5BQIB-7POKafDuQfgK-oVNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:77:39:0f:b1:ce:ab:7e:ff:31:da:69:13:88:57:c4:ed:c3:
         76:75:65:98:ad:f1:13:7d:21:b0:2d:1f:32:7f:fd:37:28:cc:
         ea:77:88:92:24:19:00:dc:ad:11:74:25:27:32:e8:f0:8a:4e:
         db:93:3a:c2:d1:10:95:09:da:26:45:c6:8b:02:37:17:24:96:
         07:e4:2b:47:2f:93:1f:3b:2c:68:de:52:df:3f:63:98:32:9a:
         56:bb:e5:62:3e:e4:cf:33:c6:7a:51:de:1c:51:75:a8:df:ee:
         62:fa:d2:84:79:d2:0a:69:f1:13:1d:e1:b2:ff:66:80:83:74:
         15:51:14:94:b2:3a:a0:09:e8:fb:3c:81:ec:55:6c:b9:2e:30:
         26:4d:eb:29:a5:75:5b:47:a0:a5:2a:e8:00:c1:ee:ef:46:69:
         14:de:da:2b:52:92:66:77:41:ac:2c:90:d1:92:b9:03:54:d4:
         92:4e:cd:0f:4b:60:d2:d6:3a:e5:ca:e0:a3:ef:fc:66:e2:69:
         7b:bb:11:0c:e7:ed:5c:5a:29:4d:3e:95:39:2d:7a:20:74:af:
         94:8e:a0:1a:32:57:93:82:cd:3d:dc:1e:4a:71:35:df:4b:c3:
         b3:b5:54:3f:02:c6:12:14:ac:a0:1a:18:42:61:0b:45:5e:00:
         72:7b:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----