Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.mft
File:                     I0BAUrjKlyu7L_aoE8pB6KlVnso.mft (raw, json)
Hash identifier:          qdIo2HzmgokgeGPk7zInTbifGaPFe26By5n/dgZBCBo=
Subject key identifier:   40:8B:82:03:39:07:A6:30:77:53:AF:0E:95:E2:C7:E6:6B:AE:00:BA
Authority key identifier: 23:40:40:52:B8:CA:97:2B:BB:2F:F6:A8:13:CA:41:E8:A9:55:9E:CA
Certificate issuer:       /CN=23404052b8ca972bbb2ff6a813ca41e8a9559eca
Certificate serial:       0188574D7181B188B7468A90B28D35CC7B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0BAUrjKlyu7L_aoE8pB6KlVnso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.mft
Manifest number:          0DA5
Signing time:             Fri 26 May 2023 09:04:33 +0000
Manifest this update:     Fri 26 May 2023 09:04:33 +0000
Manifest next update:     Sat 27 May 2023 09:04:33 +0000
Files and hashes:         1: HhR8blB8h7E52uTZgbwUD9FPT84.roa (hash: pqVhte1QOEmjmOCNE3AhuV6F+cu7uFL8/CS5XqD5ksM=)
                          2: I0BAUrjKlyu7L_aoE8pB6KlVnso.crl (hash: Nmjbp89uCypZ0WxvJO8/3jIsOWm1zyLh7+e8p+0P5N4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:57:4d:71:81:b1:88:b7:46:8a:90:b2:8d:35:cc:7b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23404052b8ca972bbb2ff6a813ca41e8a9559eca
        Validity
            Not Before: May 26 09:04:33 2023 GMT
            Not After : May 27 09:04:33 2023 GMT
        Subject: CN=408b82033907a6307753af0e95e2c7e66bae00ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:dd:1d:7c:d1:a2:ef:51:b7:ec:b6:92:f0:
                    7d:d2:df:e8:cd:af:2e:3d:7b:95:18:66:db:d1:0d:
                    f8:8c:cd:89:8a:7b:1e:3f:5d:02:32:5d:77:71:a2:
                    89:b1:05:6e:d5:42:f6:c0:09:42:7a:ba:d3:ca:a3:
                    2c:85:c0:19:67:2b:1b:d1:83:0b:52:cf:7f:f0:24:
                    6a:9a:90:06:52:aa:d3:94:15:0d:6e:e5:c5:f1:a0:
                    96:b9:30:aa:99:0f:c8:6b:35:90:75:58:a2:7f:f5:
                    e5:ef:5f:d1:0e:08:10:98:79:36:4a:cb:cf:98:19:
                    bb:d1:87:8f:65:cb:45:5e:27:b1:76:d0:10:3c:6c:
                    77:8c:94:93:36:a9:e2:8e:d4:13:4f:01:bc:c7:8f:
                    4b:86:f9:59:2b:83:b7:c8:c5:ac:34:bf:d0:0a:70:
                    d6:60:5b:ad:a1:08:fd:3c:9d:fd:18:10:58:df:25:
                    f8:b2:73:af:b6:8a:6c:73:d3:45:0b:57:14:bb:62:
                    28:cd:50:4a:2d:98:8f:26:e8:b4:52:fa:32:99:b3:
                    cc:69:ae:d6:4b:f2:62:fa:4e:43:f4:67:da:bf:26:
                    d3:de:a6:89:f4:0b:c2:82:32:91:41:3a:03:a1:af:
                    9d:65:76:63:23:d6:f4:55:0c:54:1f:24:05:2f:9d:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8B:82:03:39:07:A6:30:77:53:AF:0E:95:E2:C7:E6:6B:AE:00:BA
            X509v3 Authority Key Identifier:
                keyid:23:40:40:52:B8:CA:97:2B:BB:2F:F6:A8:13:CA:41:E8:A9:55:9E:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0BAUrjKlyu7L_aoE8pB6KlVnso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:63:13:7d:39:88:26:1b:76:12:23:65:18:c2:72:67:cd:
         f1:9b:cc:c5:ad:25:14:0c:6c:0d:46:a6:63:e1:3a:94:84:73:
         c6:b1:dc:ec:e0:95:6c:ee:b5:d1:b4:08:3e:5a:6c:6d:8f:88:
         41:34:0d:c7:89:47:7e:6e:3e:2f:e1:4a:ec:dd:0c:eb:bc:03:
         82:d1:a4:93:29:9f:c8:ef:52:74:df:53:7c:13:56:1e:8c:f6:
         44:1c:a1:bc:58:c0:3d:ad:ae:ad:1d:df:b1:7d:52:64:c0:dc:
         e7:0a:10:b8:de:b7:a7:0b:a8:05:fa:bc:b5:bb:70:7b:b3:12:
         49:9e:ac:88:9c:bc:97:97:16:8a:95:9f:b9:ea:04:08:ec:bd:
         57:b0:2f:23:44:af:91:8f:11:9f:ce:20:9c:eb:43:fe:93:8c:
         4b:ae:50:5e:dd:7c:82:1e:da:28:2f:49:bb:aa:f2:7c:aa:4b:
         8b:18:18:af:dc:0d:73:9f:19:20:1d:74:b1:73:0a:64:20:79:
         56:b6:25:5b:26:f9:4f:df:49:7e:c6:8e:99:24:b4:d2:7c:51:
         72:26:8a:9e:91:e1:fa:46:df:6f:ef:89:f8:a1:70:cc:74:d2:
         50:11:ac:53:a5:61:52:25:41:8f:b8:ae:b4:b8:52:a7:17:33:
         b0:84:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----