Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.mft
File:                     Nx4E_xhbULnmHsX0bisQh3SR2II.mft (raw, json)
Hash identifier:          MoAGqebmGIQGDatYcVNlvlAmyWtymF3YyOX2zWmg14M=
Subject key identifier:   42:DA:B6:A3:A8:1C:59:0C:3F:B8:9F:C0:AF:C4:B1:BA:2E:EE:24:02
Authority key identifier: 37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
Certificate issuer:       /CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Certificate serial:       018A21D28C5A964DE086096740D50D573728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.mft
Manifest number:          0EAC
Signing time:             Wed 23 Aug 2023 09:56:00 +0000
Manifest this update:     Wed 23 Aug 2023 09:56:00 +0000
Manifest next update:     Thu 24 Aug 2023 09:56:00 +0000
Files and hashes:         1: Lao2xNJUTVOZ6y5Yjwe4u0cIowU.roa (hash: f/rPCQq9pM2Xt4H03zuDR4x+B0irLZDlJlpuddPQhx8=)
                          2: Nx4E_xhbULnmHsX0bisQh3SR2II.crl (hash: aXOrJAN89EjaJLtzkaPXLl8qToKY25tnSkBF3g/YbEE=)
                          3: YyvYQGthpmnX3q3P_55UYre18lo.roa (hash: 28WCPgqAvmIlYIbu541Lapagfu3HlR2z9YdCDfhTU4Y=)
                          4: gt5xEPC8QV_EsdIVWUEADv4NhlI.roa (hash: wyBpfvclvGK5yAseAQOy9PImTGB43VjJF4u6HBO6gDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:21:d2:8c:5a:96:4d:e0:86:09:67:40:d5:0d:57:37:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371e04ff185b50b9e61ec5f46e2b10877491d882
        Validity
            Not Before: Aug 23 09:56:00 2023 GMT
            Not After : Aug 24 09:56:00 2023 GMT
        Subject: CN=42dab6a3a81c590c3fb89fc0afc4b1ba2eee2402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:87:7d:9c:07:62:9b:39:bd:92:70:26:52:
                    70:89:fe:d4:fb:ce:53:4b:62:84:c0:4c:0d:7d:61:
                    72:ec:56:c4:11:eb:9e:d4:e0:d1:78:72:f9:3b:ff:
                    ad:7a:8d:61:6f:f3:34:9f:1e:3f:00:b6:da:3b:35:
                    3c:30:d4:b5:88:f6:30:cb:28:4b:59:b2:88:83:d8:
                    ce:f5:c9:40:f6:00:64:90:b6:33:29:83:9f:75:bc:
                    1d:5d:04:de:f2:96:6c:8c:6a:87:3e:cc:70:0b:79:
                    1b:c8:42:59:d2:6c:cc:47:37:17:dd:69:a4:ca:b0:
                    e4:6d:35:d0:74:db:e5:e8:ea:f9:6f:65:ae:24:b2:
                    24:de:b1:b8:73:d1:43:3f:44:e0:1b:67:a5:1b:00:
                    b3:f2:63:1e:f6:1c:37:bf:45:85:75:9c:dc:e2:d3:
                    e6:bb:87:31:58:fa:05:89:c0:35:71:77:38:eb:a0:
                    e3:4c:bd:b3:bf:1a:c9:1a:1e:d0:5e:ac:c1:c0:90:
                    ff:bc:31:b4:e2:ba:7e:8e:c3:8a:59:db:c3:7a:63:
                    69:61:15:be:f2:03:f3:13:cd:d7:fa:85:84:38:0e:
                    0b:51:49:47:93:da:8f:98:16:38:c9:2f:e7:e4:c1:
                    90:10:9f:d9:d7:0b:5e:e7:29:fa:88:9c:9c:33:e2:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DA:B6:A3:A8:1C:59:0C:3F:B8:9F:C0:AF:C4:B1:BA:2E:EE:24:02
            X509v3 Authority Key Identifier:
                keyid:37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:bf:4c:e3:f6:78:a7:86:41:8c:e9:ce:88:cc:98:ba:27:3e:
         16:c3:dd:6c:b8:8f:90:07:aa:66:b1:7b:fe:ae:d1:0e:66:c9:
         d4:2b:93:fa:c6:5e:4d:93:ea:3e:1d:0f:a1:69:17:18:b1:b5:
         c3:25:43:a3:aa:2d:30:2b:c7:a3:38:f5:a3:28:1e:b2:21:51:
         36:72:21:b5:61:ee:f5:30:bc:58:aa:5d:73:45:c8:38:7d:1b:
         bd:bd:fe:56:34:ae:e5:9d:2f:bc:56:d8:e2:71:dd:ba:69:53:
         57:95:0f:53:8c:13:21:20:29:8c:52:d4:5d:74:62:21:da:b3:
         c0:2b:65:76:c9:d3:b7:d8:94:4d:de:70:17:b6:a6:c8:2a:f0:
         4d:07:1d:9b:7d:b3:ed:3d:d4:9d:14:77:19:20:49:40:f8:08:
         9a:59:c5:ae:9a:c0:2b:41:16:fd:ff:4a:01:70:70:ad:60:e2:
         4a:58:c0:29:65:c3:67:30:af:a3:ff:d0:78:50:19:1a:ce:85:
         5b:fd:f1:cf:be:3f:dd:52:5e:97:4e:41:23:98:e6:41:47:ac:
         8b:c1:6b:15:1e:00:c7:ca:f8:fc:1a:0f:03:83:50:52:75:a2:
         e2:8b:35:e0:12:b2:ee:e0:71:86:aa:e6:bb:3d:86:15:54:3f:
         4f:82:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----