Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.mft
File:                     1QNAizJ9gOaxtslxftZ2npt3UOI.mft (raw, json)
Hash identifier:          7zI99/2V20UqZankBrMZPDQ1EWIMWPa9FSsBLJeSHgA=
Subject key identifier:   C5:28:0D:68:15:7B:C8:12:D7:63:30:90:0D:FB:F5:B8:42:2A:6C:8C
Authority key identifier: D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
Certificate issuer:       /CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Certificate serial:       0187FA092FFD3524B16153C11216049000EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.mft
Manifest number:          0CC3
Signing time:             Mon 08 May 2023 06:25:18 +0000
Manifest this update:     Mon 08 May 2023 06:25:18 +0000
Manifest next update:     Tue 09 May 2023 06:25:18 +0000
Files and hashes:         1: 1QNAizJ9gOaxtslxftZ2npt3UOI.crl (hash: eDz9PJ3PzSbj3xRqWGbWmT4oXys3/NY67CNIyc2ZsdU=)
                          2: wgWrzWft6x6UNlPqU5N3_t9FvDQ.roa (hash: clmy3LTa3aOyrjeTASHuoB48OOkPP+XjfjH1TSAgvv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fa:09:2f:fd:35:24:b1:61:53:c1:12:16:04:90:00:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
        Validity
            Not Before: May  8 06:25:18 2023 GMT
            Not After : May  9 06:25:18 2023 GMT
        Subject: CN=c5280d68157bc812d76330900dfbf5b8422a6c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:27:bf:ec:c2:0f:b7:82:7a:08:77:88:36:
                    3e:e7:15:ba:a0:2c:90:7c:52:b6:bd:9c:35:52:38:
                    fa:52:b8:35:54:d3:a0:e1:6a:c2:64:a4:e4:cb:23:
                    21:d0:86:5c:90:9e:21:bc:ce:9d:f3:6d:0f:de:c6:
                    ad:a9:9c:c9:f8:23:35:3d:84:c6:0d:e1:ce:1a:f0:
                    9d:b0:9b:27:93:5a:38:27:a8:32:1b:63:6e:cb:52:
                    51:46:9a:0b:b5:15:97:15:bf:fc:fb:2a:30:ec:d0:
                    27:73:93:17:4f:91:cb:0b:b8:61:71:f0:e8:be:ff:
                    73:ed:3b:71:f5:ea:1a:5b:28:25:68:c2:91:2d:63:
                    15:2f:80:07:22:2a:de:15:a4:1e:4d:d4:6f:b2:11:
                    7a:f6:6c:d4:e9:98:69:0d:3d:b8:b0:ce:df:71:62:
                    a6:fd:a6:3b:19:cc:51:0e:22:df:1b:ff:62:57:fe:
                    c4:9c:73:74:43:d1:de:5d:f7:6b:de:d6:d8:2f:d1:
                    fd:e7:99:ca:08:54:56:6b:5d:e8:22:18:b6:5a:60:
                    60:ca:b5:b4:f3:44:38:ff:bf:38:b4:3e:ef:a3:a5:
                    df:2c:44:5c:ce:23:b9:bd:cf:cb:d7:ff:41:b7:1b:
                    10:9b:1d:70:20:b2:4e:32:f8:40:29:c0:cb:04:09:
                    da:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:0D:68:15:7B:C8:12:D7:63:30:90:0D:FB:F5:B8:42:2A:6C:8C
            X509v3 Authority Key Identifier:
                keyid:D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f1:d5:e6:b2:33:03:f8:2d:30:ca:76:8e:b7:1f:88:54:08:
         b9:94:1e:22:f5:53:fd:0b:8b:6b:dd:79:dd:45:4c:97:39:06:
         49:82:0e:b2:14:77:2d:ba:f6:40:dc:02:08:c8:12:24:a4:d9:
         46:de:99:46:16:f3:7e:f0:d8:2c:b0:31:94:35:95:15:c3:8f:
         ef:14:14:79:4c:95:ac:71:22:34:94:01:a4:2e:92:38:d0:14:
         4b:6b:9e:12:2e:32:4c:62:c5:2d:a2:45:b9:3e:5f:87:62:a2:
         50:4c:d5:40:b2:33:93:73:ae:50:df:db:47:03:23:18:59:75:
         0f:d9:ad:07:12:28:eb:fa:1d:de:22:20:34:d4:23:62:ec:4f:
         cc:f9:2f:79:4d:f7:66:13:92:15:7f:f0:e6:57:0c:e3:6d:4b:
         66:c9:b3:6d:99:72:ea:16:6a:62:c0:47:f8:81:93:68:29:aa:
         c9:27:13:95:42:39:f2:51:e7:1e:a3:7e:30:27:06:29:e4:87:
         6d:9a:af:e9:d7:0a:0a:df:8c:f3:32:4c:6a:45:86:9f:b5:20:
         c8:54:1f:33:e1:5c:5a:37:b1:7a:6a:d8:6d:e7:8e:12:f5:87:
         3a:78:96:0c:8a:f6:3a:19:5b:5a:06:23:94:dc:22:a9:13:33:
         53:e2:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----