Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.mft
File:                     4LnGXclQU-Q34yyZrPO9xelcse4.mft (raw, json)
Hash identifier:          Kin016hrRLWHA7KtrfxrFKEBYPTcWxEFLv+vP7e5vxQ=
Subject key identifier:   0E:05:26:80:61:04:0A:82:55:9B:C1:A7:11:43:3D:CC:9E:33:F7:F0
Authority key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Certificate issuer:       /CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Certificate serial:       018CAF036467EAA072AF4014A680D9B659B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.mft
Manifest number:          1007
Signing time:             Thu 28 Dec 2023 06:01:24 +0000
Manifest this update:     Thu 28 Dec 2023 06:01:24 +0000
Manifest next update:     Fri 29 Dec 2023 06:01:24 +0000
Files and hashes:         1: 2GiYWCqgnTIID6EALGcJJSsnZxU.roa (hash: i02F97lvwL/HSP+qjkTjHOVVib9lvoYmmfnO234hRuI=)
                          2: 4LnGXclQU-Q34yyZrPO9xelcse4.crl (hash: xL4kAgE/C/BTclYt/rZlj2ydSbZKFll8r/5TeRJEO0s=)
                          3: gvYmKgsxkju-CWf3LCef-n0CAdY.roa (hash: uoZv7m3rOa849clj8/F7Vmp+yH3AzZEY6vhZ6pfSL0w=)
                          4: uWcllUezYj6ji0LePvkdAXJC06w.roa (hash: SUFT2OuNBk+RubuI4bQR1XdoaVFm5Qx1stZUCEOESEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:af:03:64:67:ea:a0:72:af:40:14:a6:80:d9:b6:59:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
        Validity
            Not Before: Dec 28 06:01:24 2023 GMT
            Not After : Dec 29 06:01:24 2023 GMT
        Subject: CN=0e05268061040a82559bc1a711433dcc9e33f7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f5:3a:c3:a7:d2:af:a9:5a:be:57:40:db:b4:
                    e9:7a:94:da:27:a0:5f:49:36:48:d5:50:53:c9:84:
                    36:af:46:5b:cb:e7:1f:b4:fc:ab:98:9b:20:14:93:
                    68:fc:c4:9c:86:28:f9:f2:28:88:89:c3:d8:41:79:
                    4b:2d:10:30:48:17:b5:5c:7f:0d:54:c5:f2:21:26:
                    0f:24:7d:16:48:67:09:4f:c3:ff:ca:59:f3:65:84:
                    3b:75:9f:fa:6f:e5:57:46:af:5a:57:f7:81:e1:23:
                    98:2a:5b:1a:aa:80:d9:ac:cc:a5:fe:03:79:b1:a9:
                    31:0e:24:f3:1c:81:b7:88:82:39:b4:03:f7:42:27:
                    74:86:1d:0c:a2:e6:d6:21:f9:eb:27:71:3c:98:41:
                    e6:2a:5b:59:2c:8e:2b:6f:c1:4e:c3:7e:38:d4:19:
                    df:22:b2:26:e6:58:8f:14:71:d9:4d:84:89:2c:44:
                    c2:38:e0:a9:cf:b8:d2:58:9a:86:e9:a8:50:e4:03:
                    11:ab:08:9a:59:6e:8e:fb:7f:34:d9:84:e9:f8:fb:
                    65:8c:20:bb:92:fc:95:94:5a:bf:b2:5d:06:98:d3:
                    3c:e5:8b:fa:57:12:96:b8:67:69:6d:eb:41:b5:79:
                    ba:19:66:90:7a:09:c0:b7:68:07:70:6e:f1:1d:a4:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:05:26:80:61:04:0A:82:55:9B:C1:A7:11:43:3D:CC:9E:33:F7:F0
            X509v3 Authority Key Identifier:
                keyid:E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:df:2b:8e:48:46:4d:ba:82:e6:95:b3:f3:23:e7:12:27:85:
         58:1d:d8:20:d7:61:79:d0:85:33:95:25:2d:a8:3f:53:ac:71:
         76:01:ba:34:e0:07:78:f7:87:ff:9d:87:bb:e5:8a:2b:2e:6f:
         92:7c:59:51:43:6e:dd:6b:2a:fd:26:5d:b3:65:e8:0f:74:98:
         f3:04:af:c9:94:55:01:3f:9f:f3:5b:81:ff:87:22:ce:d4:80:
         be:a1:e7:a4:f9:09:52:ff:db:5f:2b:30:4d:13:ce:ad:cd:df:
         ad:53:b0:19:a9:d9:3f:f1:04:88:ee:36:bb:dc:14:e9:0b:7b:
         1e:c4:57:0c:60:1d:7c:9d:7c:6e:bb:8b:df:8e:5a:68:b7:69:
         fe:41:eb:f3:7e:f8:47:67:e1:f3:41:f1:c6:76:a2:39:c6:d3:
         73:41:49:6b:14:7c:5c:ae:6b:50:03:80:1f:b1:b4:40:6c:6e:
         1c:82:25:38:a8:ff:f5:f0:5a:30:7a:57:c7:d3:3a:b6:d3:30:
         91:c5:0c:45:a6:e6:21:c9:0d:b4:f9:6d:e0:52:5b:3e:50:97:
         86:98:c2:08:b8:87:bb:ea:1e:8a:28:82:ff:a5:46:cc:55:b3:
         e8:a5:18:c2:35:0e:43:08:13:35:9d:a9:62:aa:7b:5b:b2:03:
         5d:b6:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----