Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/timryKdk11kc6ODL0GN6tU3bQfw.mft
File:                     timryKdk11kc6ODL0GN6tU3bQfw.mft (raw, json)
Hash identifier:          x0JMZTzddOq0YkL0ZZILgJlcw9A2GII4oMV42BKPLwo=
Subject key identifier:   44:8A:3D:15:4B:DF:D1:20:8A:DE:E8:A2:DA:E8:34:0B:F1:95:55:71
Authority key identifier: B6:29:AB:C8:A7:64:D7:59:1C:E8:E0:CB:D0:63:7A:B5:4D:DB:41:FC
Certificate issuer:       /CN=b629abc8a764d7591ce8e0cbd0637ab54ddb41fc
Certificate serial:       018AD04AE12FCE3D4AD79584AF6524F4A5C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/timryKdk11kc6ODL0GN6tU3bQfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/timryKdk11kc6ODL0GN6tU3bQfw.mft
Manifest number:          057B
Signing time:             Tue 26 Sep 2023 07:01:22 +0000
Manifest this update:     Tue 26 Sep 2023 07:01:22 +0000
Manifest next update:     Wed 27 Sep 2023 07:01:22 +0000
Files and hashes:         1: timryKdk11kc6ODL0GN6tU3bQfw.crl (hash: TE9rdu7JFlt1oapioK2Pn4VlxTGAgJ44U+Ksj0bFnYU=)
                          2: vc_qtbmFPqBQgbCoXkp-eYP7R7o.roa (hash: HNNzTvPQ88ADUoOOnwsk+7zesVSWFAAFont5a3t3skU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d0:4a:e1:2f:ce:3d:4a:d7:95:84:af:65:24:f4:a5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b629abc8a764d7591ce8e0cbd0637ab54ddb41fc
        Validity
            Not Before: Sep 26 07:01:22 2023 GMT
            Not After : Sep 27 07:01:22 2023 GMT
        Subject: CN=448a3d154bdfd1208adee8a2dae8340bf1955571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:1c:38:b6:fc:54:26:7e:ec:d4:b6:a3:a3:
                    27:2a:f1:d0:4c:4b:09:c2:3b:e9:73:4c:68:82:e9:
                    9f:c3:cb:8e:55:4d:5e:bd:77:d2:b6:a0:4f:af:52:
                    ff:c5:d4:57:fb:3e:45:35:ba:fe:4b:93:de:e5:0f:
                    d0:15:f8:1b:2a:7f:05:2d:b1:93:72:38:26:72:d6:
                    7e:49:ff:b5:83:62:61:7e:79:db:f9:f0:19:af:f6:
                    2a:28:38:ae:ec:b2:31:97:74:68:9a:6a:a6:b6:40:
                    90:ab:97:39:88:8d:09:8a:ee:8b:04:7c:43:b9:8a:
                    70:1e:2a:f6:35:39:39:c2:85:f0:58:fb:48:ad:b9:
                    09:de:a2:3d:9c:bb:12:52:31:15:de:8a:f4:d1:f1:
                    a7:38:2a:81:b9:46:14:a8:89:b7:5f:51:8c:5f:56:
                    fa:d2:16:0f:11:9f:0d:4c:70:b2:e0:9b:fb:51:48:
                    dc:11:af:63:cc:3b:3e:23:59:75:06:25:66:83:ae:
                    88:bd:2c:1e:7a:21:b6:9c:36:32:d4:3b:f1:06:48:
                    d0:9a:e8:42:84:fc:32:44:60:1e:a8:03:2a:f9:b0:
                    d7:96:0a:d8:2f:1f:7a:d6:60:e8:50:44:2e:27:8d:
                    28:66:90:c2:3f:16:80:29:c2:55:d4:92:bb:17:30:
                    f4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8A:3D:15:4B:DF:D1:20:8A:DE:E8:A2:DA:E8:34:0B:F1:95:55:71
            X509v3 Authority Key Identifier:
                keyid:B6:29:AB:C8:A7:64:D7:59:1C:E8:E0:CB:D0:63:7A:B5:4D:DB:41:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/timryKdk11kc6ODL0GN6tU3bQfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/timryKdk11kc6ODL0GN6tU3bQfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/timryKdk11kc6ODL0GN6tU3bQfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:55:5c:35:e7:d6:50:84:4c:8e:ff:27:a8:83:ac:75:61:2f:
         2a:c4:e6:7b:f6:9a:a2:0d:ba:56:7a:16:93:3c:14:54:66:30:
         d8:28:b1:e6:d9:a7:7a:37:f4:4d:d5:e3:07:15:22:b1:3f:39:
         ae:0f:2c:7e:60:c6:5f:86:37:7d:c4:15:5c:cf:52:e6:d7:dc:
         1f:f3:34:7c:e5:aa:39:63:2b:58:4f:0b:7c:b4:cf:ce:f1:f3:
         40:a0:17:2b:b0:6e:4d:df:a3:9f:ec:d1:e6:48:42:5a:ab:25:
         3e:42:7c:fa:92:48:90:f5:0d:61:94:f7:a7:c4:fd:4d:34:6f:
         51:f2:86:75:58:ba:96:62:92:e2:18:52:bc:5a:13:ab:c2:23:
         5f:77:f5:25:3d:e0:d0:ef:dd:8e:f8:39:17:14:a3:ea:ba:d8:
         d3:49:40:02:a9:ee:0b:30:be:6b:11:5b:ad:80:f3:30:e1:b1:
         51:9b:69:ec:f4:21:fc:de:62:b3:2a:52:26:c3:d6:7c:50:75:
         c7:ba:cb:30:74:81:c3:a2:3f:ac:35:2f:2d:22:9b:25:1f:9c:
         48:54:9a:cf:aa:3c:a7:d2:bc:0e:5a:9e:9c:28:36:74:12:8b:
         41:2e:7b:14:76:54:b2:bf:0f:bf:62:b1:ee:d7:08:5d:8e:66:
         64:f8:43:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----