Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.mft
File:                     OuUa1QQPRQOvxx3FAYnEqWTRzUA.mft (raw, json)
Hash identifier:          0RPILn24n5HZKEVvx+3ig+lnkPx5WNijsHP8oA1gw8Q=
Subject key identifier:   14:C1:21:CD:FE:23:E1:53:72:89:8B:8A:0C:24:3F:10:06:27:45:0D
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Certificate issuer:       /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial:       018B71029E0FBDEF71E53F15DCEE97D0015E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.mft
Manifest number:          0F6E
Signing time:             Fri 27 Oct 2023 12:01:18 +0000
Manifest this update:     Fri 27 Oct 2023 12:01:18 +0000
Manifest next update:     Sat 28 Oct 2023 12:01:18 +0000
Files and hashes:         1: FRUYfScKLln5tR1k4YNLGnoEHgM.roa (hash: 0cFo6/GlV3yt1sjzUtMZtQirSihbFNDgdL/reAjktUc=)
                          2: OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl (hash: 2ODyKC7nG3aDsHlLfpTjackA1I9mQGjIEsk+PwHMYgw=)
                          3: P45rAV8VKnRKZvaSuhWGDY_YFk4.roa (hash: PBXkdBh0bLGuEDzAGzWRTdyptv2rcMaj4PePnlGyJDk=)
                          4: nG9tPplCFEFaYpmibg3caYPE4xk.roa (hash: ZDHFg+PyNSbKnd9g0yMNpRRpoLkHPvMFxAugIL8x7VQ=)
                          5: oqyYLuOlCc36aoHeS4_qiBtgKVI.roa (hash: C8FOkrg5pWpoJiNwaxojtRH1CzmmcfDSMSbFv8I6GeU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:71:02:9e:0f:bd:ef:71:e5:3f:15:dc:ee:97:d0:01:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
        Validity
            Not Before: Oct 27 12:01:18 2023 GMT
            Not After : Oct 28 12:01:18 2023 GMT
        Subject: CN=14c121cdfe23e15372898b8a0c243f100627450d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:31:a5:bd:df:69:0d:56:c6:7c:9f:65:e1:
                    e1:38:f3:4c:6a:2f:26:2c:0b:84:39:78:c6:a2:23:
                    66:0d:75:4e:dd:87:41:50:78:bb:4f:7e:ce:71:77:
                    86:96:e2:7c:e2:8c:54:ab:d2:77:ba:5f:9c:f2:c7:
                    ed:24:9d:76:58:dd:6c:4e:d0:ac:f4:2c:31:43:78:
                    8b:5c:df:cb:5d:a2:58:7a:2f:3e:80:5c:61:16:5b:
                    f5:74:be:bc:72:f4:83:15:9a:b5:39:f2:9a:a5:20:
                    3e:fd:93:b0:23:9f:35:da:44:bd:ad:0a:2c:eb:10:
                    09:e6:67:8c:8e:75:2d:e2:dc:b0:33:de:73:d4:db:
                    39:b6:eb:51:e7:96:3f:96:14:8c:f5:89:d8:0e:98:
                    49:54:39:6b:d9:29:1f:cb:62:29:6e:fb:da:7e:4b:
                    52:ae:8d:50:c3:67:68:05:64:59:42:ee:c2:56:24:
                    66:eb:c6:f0:58:f0:bd:36:5b:de:7b:fb:aa:d0:ff:
                    c4:79:4f:56:35:52:06:cb:64:96:8d:2f:2b:26:06:
                    19:ff:0c:37:74:2e:30:f7:4a:d5:a1:a0:00:b5:ef:
                    0b:78:fe:40:f4:4d:d8:15:4c:2c:9d:a0:1c:5b:77:
                    af:e8:95:e9:54:db:6a:62:8c:1e:b7:14:7e:de:5a:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C1:21:CD:FE:23:E1:53:72:89:8B:8A:0C:24:3F:10:06:27:45:0D
            X509v3 Authority Key Identifier:
                keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:72:87:ff:be:92:39:de:f0:5e:65:a1:af:96:a4:03:e2:0a:
         3d:7b:d6:58:89:74:d4:8d:81:aa:e6:f8:ea:b3:e2:62:80:9b:
         d9:28:c3:33:7c:bc:ac:5e:bf:a6:9e:8b:e2:d8:3d:99:52:9b:
         14:73:cf:78:e7:98:3c:bf:b9:cc:9f:15:54:28:b3:0b:04:4a:
         5d:47:ba:bb:a7:82:ee:25:ad:7d:02:07:59:74:83:21:eb:77:
         c2:99:c1:1c:1d:08:a7:ce:7b:b4:84:5b:b3:ae:bb:a7:4f:a8:
         1e:51:50:7d:78:da:c5:33:82:7c:18:74:00:ae:b9:15:69:9e:
         8d:c4:5d:99:b2:08:f3:ba:4e:4f:78:81:d6:44:37:ed:1b:d4:
         ce:67:ad:68:77:60:9f:e9:d0:56:87:16:40:b0:6f:c7:7b:d7:
         e9:00:5d:ca:26:9f:87:6b:9e:63:3b:fa:ab:10:cb:5b:b2:41:
         ce:2c:aa:af:ed:37:82:be:7b:c0:a1:73:32:fd:b5:ee:73:83:
         a2:de:52:50:64:60:90:9c:40:96:15:87:e5:da:50:d3:12:48:
         f6:00:0d:07:eb:15:73:6c:00:36:17:ee:c0:12:8b:4f:f9:e4:
         19:11:3c:d1:dc:30:70:29:89:ca:45:8d:ee:1c:d4:80:dc:c8:
         6c:a1:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----