Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.mft
File:                     CPXGJw3qFb9jnQ4Wnte3wbwyYzU.mft (raw, json)
Hash identifier:          d7TJUjhbmK2iPDWust+zvWZ66duh03aSaye6v5DFVNE=
Subject key identifier:   41:FA:23:9B:44:05:EB:D3:AA:DE:69:75:34:58:90:E9:BD:43:C1:FB
Authority key identifier: 08:F5:C6:27:0D:EA:15:BF:63:9D:0E:16:9E:D7:B7:C1:BC:32:63:35
Certificate issuer:       /CN=08f5c6270dea15bf639d0e169ed7b7c1bc326335
Certificate serial:       0187B3246E753FCE6885CB9C30D1E6860737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.mft
Manifest number:          0A87
Signing time:             Mon 24 Apr 2023 12:02:01 +0000
Manifest this update:     Mon 24 Apr 2023 12:02:01 +0000
Manifest next update:     Tue 25 Apr 2023 12:02:01 +0000
Files and hashes:         1: CPXGJw3qFb9jnQ4Wnte3wbwyYzU.crl (hash: 8BKLgtZR6fqpttTpvyPRlLF/koHTq1P+48SARJ8bFKs=)
                          2: cqt9r6DWmS8AI4v9YwbC-p3Ux1o.roa (hash: Bf9ju2bTsPdueUQSBeBncPPR+vY2LtX25MpGAoel9EU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b3:24:6e:75:3f:ce:68:85:cb:9c:30:d1:e6:86:07:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08f5c6270dea15bf639d0e169ed7b7c1bc326335
        Validity
            Not Before: Apr 24 12:02:01 2023 GMT
            Not After : Apr 25 12:02:01 2023 GMT
        Subject: CN=41fa239b4405ebd3aade6975345890e9bd43c1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:8e:0b:cd:0e:82:5c:5b:d3:5c:5b:57:21:
                    76:01:37:d6:7b:26:46:f1:83:64:3f:ad:03:96:1b:
                    91:c8:38:7a:72:ba:e4:8d:2b:c3:6b:b4:e2:9d:ad:
                    e2:cd:26:4d:97:a5:ee:e2:16:01:6a:5a:c1:07:a0:
                    51:af:b7:13:6c:9e:bc:ea:a0:3c:e7:82:48:e3:2d:
                    4d:58:7e:7b:95:d9:ef:f5:45:58:77:5b:60:f5:64:
                    74:5f:08:41:34:9e:0d:8d:8c:66:a1:0b:6b:d0:44:
                    2d:87:c3:8c:35:8f:40:0d:fa:a1:17:a2:78:eb:df:
                    89:d9:da:88:d6:6c:b7:ce:80:3e:e1:29:59:78:cb:
                    d5:dd:fe:3c:99:a9:79:da:38:52:bc:fe:14:5a:6a:
                    77:0e:9c:8b:a9:67:8e:a0:e5:31:b2:b2:6c:40:db:
                    a4:fd:f9:9b:6b:8b:76:63:4a:38:4b:47:7e:a1:fa:
                    df:7f:c6:b8:aa:dc:bb:73:cd:72:ec:b2:47:5d:a7:
                    2d:8e:18:a7:fb:36:da:0d:fe:d5:7e:49:ed:7f:c5:
                    66:3a:e6:b7:60:bc:8f:95:3f:da:c9:26:22:46:0d:
                    a1:f8:31:40:3f:03:70:1c:f7:78:b6:5c:14:90:22:
                    d3:80:02:27:e4:a5:8f:68:f1:48:6d:62:2c:d4:c8:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FA:23:9B:44:05:EB:D3:AA:DE:69:75:34:58:90:E9:BD:43:C1:FB
            X509v3 Authority Key Identifier:
                keyid:08:F5:C6:27:0D:EA:15:BF:63:9D:0E:16:9E:D7:B7:C1:BC:32:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:50:7c:59:af:0e:97:ed:61:a9:25:23:70:3f:34:2f:3d:c0:
         a2:65:d0:0a:25:bd:41:47:96:dd:5f:05:bc:f4:f8:75:9d:33:
         2f:5b:59:fb:9c:fe:6b:f5:18:7e:06:db:3a:b3:60:aa:e5:26:
         51:91:b8:3a:a4:0e:78:ac:0e:fd:87:a7:64:1c:2b:7e:6c:30:
         1a:cb:2d:c6:0c:0c:03:31:2a:47:c1:96:4d:cb:db:93:91:e7:
         9c:5d:b4:49:f7:05:bb:5d:72:70:23:25:aa:56:fe:e8:06:1a:
         8d:37:e5:56:20:52:15:be:f0:47:38:6a:88:12:b4:a7:67:c1:
         b0:be:e5:c2:7f:36:54:c4:40:19:00:66:b0:8d:46:00:7c:4f:
         c3:07:bc:ca:1b:1f:95:29:16:73:d8:bf:d4:6e:46:8a:a9:19:
         32:c4:53:52:65:bd:64:22:a7:04:e7:e8:f9:ac:91:49:be:64:
         0d:26:65:fe:5a:33:ea:00:91:c7:b3:a1:d6:e8:71:d1:29:6f:
         06:a8:a0:f3:fc:8a:a0:cc:58:31:90:66:13:9a:5a:0e:cd:8b:
         b9:36:c1:c3:02:7e:e5:9b:a6:4c:7a:9f:e2:eb:af:45:57:7b:
         e0:b2:a9:f7:c3:7f:92:b3:39:f1:7a:fd:33:11:6d:96:96:d0:
         81:cf:31:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----