Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/crcI-ECnVEotfLjNB-IlaDc60DQ.mft
File:                     crcI-ECnVEotfLjNB-IlaDc60DQ.mft (raw, json)
Hash identifier:          JsCvqDlue+TrdGzXp3rcnRlMjYFW7v/a59rEEb1d9IY=
Subject key identifier:   F0:8B:70:0B:9E:56:9F:B5:B2:0A:76:C2:BC:AE:31:50:89:CE:96:0F
Authority key identifier: 72:B7:08:F8:40:A7:54:4A:2D:7C:B8:CD:07:E2:25:68:37:3A:D0:34
Certificate issuer:       /CN=72b708f840a7544a2d7cb8cd07e22568373ad034
Certificate serial:       01894DD96F33686375B349BFAD056191BFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crcI-ECnVEotfLjNB-IlaDc60DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/crcI-ECnVEotfLjNB-IlaDc60DQ.mft
Manifest number:          0E32
Signing time:             Thu 13 Jul 2023 06:04:02 +0000
Manifest this update:     Thu 13 Jul 2023 06:04:02 +0000
Manifest next update:     Fri 14 Jul 2023 06:04:02 +0000
Files and hashes:         1: Wt8ESiZqOnEzoaDQ_IOfmPSc78Y.roa (hash: b3IOV3RLVRIX64/ujTweA948K4Ru/hKzm3yu87X4Ikc=)
                          2: crcI-ECnVEotfLjNB-IlaDc60DQ.crl (hash: K4ipXrQSw9vgcqC0inDu6Oq2WGgDgVgXxeNMJhQUbQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4d:d9:6f:33:68:63:75:b3:49:bf:ad:05:61:91:bf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b708f840a7544a2d7cb8cd07e22568373ad034
        Validity
            Not Before: Jul 13 06:04:02 2023 GMT
            Not After : Jul 14 06:04:02 2023 GMT
        Subject: CN=f08b700b9e569fb5b20a76c2bcae315089ce960f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:d1:a0:d7:99:b4:47:74:e6:7a:72:91:24:
                    33:ba:d4:c5:2c:5e:3e:a3:e9:f8:2a:28:0c:d0:fa:
                    11:ed:21:cd:21:4a:71:25:94:6e:52:53:15:2d:78:
                    2f:8e:0a:50:4b:73:50:49:f4:39:f7:1c:56:44:ec:
                    99:f9:da:30:20:73:8f:66:5e:86:a3:aa:d5:c9:58:
                    56:07:73:c7:1c:49:e8:dc:00:c4:5e:5f:9c:4e:75:
                    ba:d9:d3:49:0f:bb:fa:3f:4e:21:3d:3d:4f:5d:36:
                    db:80:ca:fe:43:45:8f:41:d6:eb:e5:be:a4:f3:f1:
                    b8:b8:56:85:31:92:b3:bf:86:7f:08:e3:ab:cb:00:
                    10:ba:bb:3f:84:70:c2:7a:f6:39:17:10:df:7f:6b:
                    52:7c:24:4d:b3:67:42:b0:6e:69:c2:d9:cc:d3:a9:
                    fc:88:05:d2:2b:54:e6:3f:54:d1:eb:21:be:51:e9:
                    ff:1b:b7:06:18:dc:6d:50:f4:f5:71:05:01:bb:13:
                    55:0c:5a:db:0f:ec:b7:61:7d:7e:15:ee:d9:97:df:
                    fb:c7:65:2a:01:67:d2:76:25:25:1a:f1:c7:02:0c:
                    d3:99:14:cb:f1:34:c9:49:9d:67:a7:0c:04:fa:65:
                    32:8b:9e:97:48:ba:f0:9f:14:c1:fa:55:e5:3f:b8:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8B:70:0B:9E:56:9F:B5:B2:0A:76:C2:BC:AE:31:50:89:CE:96:0F
            X509v3 Authority Key Identifier:
                keyid:72:B7:08:F8:40:A7:54:4A:2D:7C:B8:CD:07:E2:25:68:37:3A:D0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crcI-ECnVEotfLjNB-IlaDc60DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/crcI-ECnVEotfLjNB-IlaDc60DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/crcI-ECnVEotfLjNB-IlaDc60DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:07:0b:63:c5:62:31:ad:84:8c:05:01:0c:1b:08:ae:d1:0b:
         b2:b4:ae:aa:3f:ef:aa:6f:d9:b7:06:93:fa:ef:88:01:a6:73:
         77:89:3b:f1:94:87:d6:c4:de:38:44:af:fa:80:69:ad:85:d0:
         3e:6b:4c:8b:ce:dd:2c:5f:cd:48:79:58:49:39:70:36:85:7e:
         81:94:c7:74:49:99:46:c5:46:cf:02:81:d1:db:19:36:07:ec:
         6c:7f:9d:26:ab:84:f3:0d:59:1a:10:b2:94:1d:52:bf:37:64:
         2c:e5:06:6d:35:a8:90:20:56:5b:c5:b4:12:81:d2:bc:7f:ca:
         09:84:b5:08:ff:12:2d:10:46:71:c8:1d:4b:56:6b:ab:09:5f:
         e9:a4:c6:a1:1a:8f:b5:84:be:b6:51:36:d9:9d:7b:31:f7:c6:
         a0:15:25:36:4f:53:2b:0e:4a:8b:97:e7:03:29:09:90:a0:5e:
         18:55:26:42:b8:9c:c0:68:f0:52:7c:76:15:1c:04:c7:7a:7d:
         fc:52:91:0c:88:0d:7c:e3:4e:1e:5a:a2:0e:35:e3:c6:23:bf:
         14:d4:8e:c7:56:ef:9d:c4:42:e4:44:04:eb:8a:85:f0:af:54:
         85:7b:69:bb:6a:1a:54:31:5f:51:de:c1:68:0e:91:b5:f3:67:
         28:8f:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----