Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/96937c-89c6-41dd-a7ad-d7f672e90a2e/1/4qG_zZpDoJOKwhNIJzHl6lhIkMA.mft
File:                     4qG_zZpDoJOKwhNIJzHl6lhIkMA.mft (raw, json)
Hash identifier:          +1hZcKveauMO9fI6UtZvPkpqyncPlWFsN6h0M5AkJTM=
Subject key identifier:   9A:22:3D:85:2C:E3:14:45:38:27:94:90:63:E7:78:56:6C:9A:0A:84
Authority key identifier: E2:A1:BF:CD:9A:43:A0:93:8A:C2:13:48:27:31:E5:EA:58:48:90:C0
Certificate issuer:       /CN=e2a1bfcd9a43a0938ac213482731e5ea584890c0
Certificate serial:       018C58C00DE9B3643BA294EFEA02D572A39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qG_zZpDoJOKwhNIJzHl6lhIkMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/96937c-89c6-41dd-a7ad-d7f672e90a2e/1/4qG_zZpDoJOKwhNIJzHl6lhIkMA.mft
Manifest number:          083E
Signing time:             Mon 11 Dec 2023 12:00:30 +0000
Manifest this update:     Mon 11 Dec 2023 12:00:30 +0000
Manifest next update:     Tue 12 Dec 2023 12:00:30 +0000
Files and hashes:         1: 4qG_zZpDoJOKwhNIJzHl6lhIkMA.crl (hash: Pts3Btx6FAehK8LfVD105yLoobZOCB8UEyQNJItYdcM=)
                          2: XLbD0X_tDPIfyYzv42IsCJQCGiU.roa (hash: vAe6FG5K5ysfyKtO0d3+3cQSGtytjZxHz/X/ydRLcAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:58:c0:0d:e9:b3:64:3b:a2:94:ef:ea:02:d5:72:a3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a1bfcd9a43a0938ac213482731e5ea584890c0
        Validity
            Not Before: Dec 11 12:00:30 2023 GMT
            Not After : Dec 12 12:00:30 2023 GMT
        Subject: CN=9a223d852ce314453827949063e778566c9a0a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:ee:20:d0:fd:55:28:f3:df:ef:5e:4a:0c:
                    0f:ea:0c:de:a5:fa:dc:45:8f:bf:71:b2:1d:5a:d8:
                    fb:21:63:de:68:8e:27:e7:12:a3:d6:45:fb:7c:6d:
                    2f:c0:10:b7:dd:2d:d7:a9:fb:69:c1:b2:19:7a:5a:
                    d3:70:6a:60:14:63:4d:83:42:66:44:d1:fc:bf:ad:
                    7a:0f:e2:b8:47:70:bb:30:b1:9a:ae:c8:0a:85:97:
                    76:da:81:a9:b1:d3:f6:9d:0b:29:78:62:68:4f:36:
                    56:50:11:27:61:2d:c7:e7:0e:f5:49:97:38:bf:78:
                    b7:62:da:d1:f4:51:6a:33:6f:fe:bc:2f:4b:51:a2:
                    3c:12:ef:f4:12:d7:9a:1f:e5:b2:4a:26:f5:c5:c8:
                    3d:02:90:71:c8:2f:46:70:91:73:50:7e:8a:b7:7c:
                    fd:95:f7:22:1b:7c:09:94:ab:35:38:69:be:87:c4:
                    e7:08:0d:e9:45:91:02:35:c1:38:64:4d:62:16:e5:
                    87:86:44:07:26:b0:45:04:8a:1e:88:9c:e7:18:68:
                    b3:cb:a9:d0:5d:7e:ed:54:51:2f:0f:63:a2:2c:48:
                    8d:c8:fc:f3:3c:bc:fe:26:77:7f:f3:cc:2e:fb:a4:
                    38:7b:91:88:0a:8b:c3:0e:19:f4:22:c4:4e:e5:72:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:22:3D:85:2C:E3:14:45:38:27:94:90:63:E7:78:56:6C:9A:0A:84
            X509v3 Authority Key Identifier:
                keyid:E2:A1:BF:CD:9A:43:A0:93:8A:C2:13:48:27:31:E5:EA:58:48:90:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qG_zZpDoJOKwhNIJzHl6lhIkMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/96937c-89c6-41dd-a7ad-d7f672e90a2e/1/4qG_zZpDoJOKwhNIJzHl6lhIkMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/96937c-89c6-41dd-a7ad-d7f672e90a2e/1/4qG_zZpDoJOKwhNIJzHl6lhIkMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6b:5c:1d:0c:c6:5a:8f:ee:75:ab:b3:88:37:cf:b1:70:b6:
         77:e9:b4:64:04:51:ff:b1:7b:45:87:7b:4d:2d:e2:3f:aa:23:
         77:20:a1:a0:17:19:06:94:a6:13:e2:3a:29:af:20:9a:29:dd:
         b7:c7:12:d6:bc:c7:07:b4:e3:1b:9a:3d:01:06:54:49:91:68:
         ad:31:c4:87:68:4c:a3:da:f9:8a:3e:83:69:b0:44:0e:a9:f2:
         1a:76:24:9c:c7:ea:73:11:35:a9:4f:a5:37:90:8d:7e:0b:1f:
         cd:d6:52:96:90:29:8d:28:db:35:52:c5:98:a7:9f:a7:9d:a6:
         65:52:e4:e1:c7:10:a7:62:19:33:ca:1b:51:e4:a4:f7:8f:a0:
         90:6d:6d:ec:17:7d:51:3d:30:34:78:b9:b0:6c:24:cb:8f:e4:
         85:50:af:34:12:89:82:02:6e:ab:ce:80:fe:15:8c:c8:1d:f1:
         d5:b2:36:99:cf:99:77:a9:6a:e8:f1:77:d6:23:fd:49:36:9d:
         f7:af:ee:54:de:1d:ca:e3:12:a8:31:25:1c:79:21:b2:28:1c:
         df:43:4c:5c:4b:0c:9a:60:da:ef:59:cc:24:c7:67:fd:04:ff:
         54:ef:40:ee:9c:f9:8a:b3:e4:45:68:f0:60:50:ff:4d:4e:dd:
         e2:96:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----