Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/af04a2-7166-440c-b67a-a7e2e4a57632/1/D6SU_hOwHMuSLVjZnHc8KOwi3zs.mft
File:                     D6SU_hOwHMuSLVjZnHc8KOwi3zs.mft (raw, json)
Hash identifier:          GKfy05Ro27aebndIXQDpLuHrt7kZgegTGbjBWAMF2Wc=
Subject key identifier:   A8:25:66:BA:2B:87:8C:B9:F6:5C:98:B2:8F:79:6C:04:38:40:A4:F1
Authority key identifier: 0F:A4:94:FE:13:B0:1C:CB:92:2D:58:D9:9C:77:3C:28:EC:22:DF:3B
Certificate issuer:       /CN=0fa494fe13b01ccb922d58d99c773c28ec22df3b
Certificate serial:       018C80E01B6D72A3ED4110AB08FAE0B58CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D6SU_hOwHMuSLVjZnHc8KOwi3zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/af04a2-7166-440c-b67a-a7e2e4a57632/1/D6SU_hOwHMuSLVjZnHc8KOwi3zs.mft
Manifest number:          0445
Signing time:             Tue 19 Dec 2023 07:00:19 +0000
Manifest this update:     Tue 19 Dec 2023 07:00:19 +0000
Manifest next update:     Wed 20 Dec 2023 07:00:19 +0000
Files and hashes:         1: 4gRIjRObaMxkpCpOW0AlImNIC38.roa (hash: P4AI1PEMGOZD5+qbxByRM0lNj8UPJnSFacp6URlQot0=)
                          2: D6SU_hOwHMuSLVjZnHc8KOwi3zs.crl (hash: nydlFUBJc2TOJn5i3jODGKBQkGI4GCiaRdVn4oR+s5I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:80:e0:1b:6d:72:a3:ed:41:10:ab:08:fa:e0:b5:8c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fa494fe13b01ccb922d58d99c773c28ec22df3b
        Validity
            Not Before: Dec 19 07:00:19 2023 GMT
            Not After : Dec 20 07:00:19 2023 GMT
        Subject: CN=a82566ba2b878cb9f65c98b28f796c043840a4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:b3:86:64:db:d3:c1:a6:bd:80:34:a3:01:
                    eb:b5:51:a7:2b:54:29:c7:ea:32:77:7a:bb:4f:bf:
                    40:c5:58:7c:79:25:b0:58:b1:05:e3:c5:2a:64:45:
                    fc:08:21:bc:e0:47:15:bb:94:da:5c:57:e6:2e:86:
                    30:72:8a:63:6b:d0:d0:9b:7c:71:3b:42:57:cf:be:
                    cb:13:04:a7:9b:c0:c0:9f:91:d7:97:ee:8a:98:25:
                    d7:ea:a7:35:de:f8:80:28:37:1f:84:76:50:e6:0a:
                    eb:29:33:60:bc:fc:2c:7a:e8:89:ee:76:82:e4:fc:
                    63:b8:37:7f:5d:8b:cd:6e:34:b4:a8:2d:b9:03:79:
                    64:1f:ef:36:5d:f4:12:11:a7:62:9f:30:43:37:ae:
                    be:92:ce:57:c8:d7:93:45:20:0b:61:59:d5:20:eb:
                    f3:47:59:47:24:f8:65:56:29:ba:f1:e9:60:0a:ff:
                    c3:33:86:e8:02:8d:5e:3f:4d:37:6e:4c:f5:00:0d:
                    28:2c:88:cc:dd:3d:18:23:eb:fc:01:ae:c0:32:12:
                    cc:1d:a0:93:4a:0b:1b:60:89:5e:cc:f5:71:86:23:
                    94:ed:46:dc:7b:12:d7:15:e9:be:bc:85:dc:85:ab:
                    73:7b:cc:b5:36:65:2d:f4:07:f6:b5:db:6d:f4:32:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:25:66:BA:2B:87:8C:B9:F6:5C:98:B2:8F:79:6C:04:38:40:A4:F1
            X509v3 Authority Key Identifier:
                keyid:0F:A4:94:FE:13:B0:1C:CB:92:2D:58:D9:9C:77:3C:28:EC:22:DF:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6SU_hOwHMuSLVjZnHc8KOwi3zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af04a2-7166-440c-b67a-a7e2e4a57632/1/D6SU_hOwHMuSLVjZnHc8KOwi3zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af04a2-7166-440c-b67a-a7e2e4a57632/1/D6SU_hOwHMuSLVjZnHc8KOwi3zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:54:8c:97:77:8a:4b:a2:99:70:70:d5:a3:a6:e6:d9:aa:
         ae:75:9a:f4:06:a4:c2:d7:12:7d:67:3f:cc:d3:4d:91:9e:c5:
         3c:16:a0:6f:59:72:5e:67:2e:36:c7:c5:2f:33:b3:e6:65:6c:
         cf:69:63:74:96:fb:92:14:d5:ff:15:62:9a:eb:57:ec:38:1b:
         b2:59:c9:d4:f8:3a:a5:46:7b:49:36:8d:53:8f:52:0e:7c:20:
         a2:23:27:39:b6:42:7e:e6:49:16:39:99:6f:19:7e:f8:c8:29:
         fa:d6:68:94:a3:91:5e:33:16:c9:25:53:81:d5:42:6f:90:2f:
         50:74:68:04:4c:c9:31:2a:8d:df:26:a8:8b:96:ae:66:56:7d:
         91:73:4c:a9:69:c7:26:68:ae:2f:f0:30:56:33:f2:fe:d1:6f:
         b1:f0:0b:53:96:c4:9c:41:53:e1:9e:79:80:92:4a:5f:d5:a1:
         0d:53:d2:e6:cf:3e:72:e7:22:47:96:33:a1:4c:c3:09:1c:b7:
         50:90:4b:fb:ac:14:5f:17:d6:5a:5c:ae:d5:5b:93:75:ee:e7:
         fd:81:76:0b:da:06:9b:b6:4f:9a:fe:9b:84:d7:96:13:27:5b:
         81:b4:62:6d:e5:53:40:d5:f2:b5:11:0f:7c:c6:69:e4:c2:ce:
         64:34:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----