Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/FZFv8Lt4zOSjfEK8FrPuusePYlA.mft
File:                     FZFv8Lt4zOSjfEK8FrPuusePYlA.mft (raw, json)
Hash identifier:          xioTdZFT09xlBFJrptXyRDr6VLBVKEG6NSIGob02Pnk=
Subject key identifier:   3E:60:DC:40:77:DA:F9:B6:13:84:27:A4:AD:8F:93:7B:38:7F:2A:9C
Authority key identifier: 15:91:6F:F0:BB:78:CC:E4:A3:7C:42:BC:16:B3:EE:BA:C7:8F:62:50
Certificate issuer:       /CN=15916ff0bb78cce4a37c42bc16b3eebac78f6250
Certificate serial:       018CA9A6165261D9FF82B8525543B9A5D8F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZFv8Lt4zOSjfEK8FrPuusePYlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/FZFv8Lt4zOSjfEK8FrPuusePYlA.mft
Manifest number:          72
Signing time:             Wed 27 Dec 2023 05:01:23 +0000
Manifest this update:     Wed 27 Dec 2023 05:01:23 +0000
Manifest next update:     Thu 28 Dec 2023 05:01:23 +0000
Files and hashes:         1: FZFv8Lt4zOSjfEK8FrPuusePYlA.crl (hash: s1/llWxjWX106UaJSbNmK9xuoA4OoVCLkwwVVkU3SRc=)
                          2: Qs33Qmz0eegLN-OuhKCHy2upy_8.roa (hash: PcFfDj6+iglUwpy8PPGUdoJvzmrxvlGbcQKSucaJYJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:a6:16:52:61:d9:ff:82:b8:52:55:43:b9:a5:d8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15916ff0bb78cce4a37c42bc16b3eebac78f6250
        Validity
            Not Before: Dec 27 05:01:23 2023 GMT
            Not After : Dec 28 05:01:23 2023 GMT
        Subject: CN=3e60dc4077daf9b6138427a4ad8f937b387f2a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:91:27:be:6b:84:d7:16:7a:4e:c1:d0:30:
                    81:fc:09:1b:e1:0e:b9:eb:94:c8:1d:63:47:e9:09:
                    ad:93:8c:d6:2c:f0:ff:03:17:cb:6d:76:98:b1:79:
                    9d:83:4f:85:cd:b5:04:f9:91:c8:b9:76:f0:7e:b3:
                    ce:cf:8b:ec:f7:54:c3:03:ca:82:49:ba:25:81:e5:
                    b1:6b:df:ab:ee:3b:a2:34:f3:1d:3d:f8:ad:0c:f9:
                    a6:7a:1b:e3:db:3e:1a:33:1c:2f:f2:61:39:0f:1a:
                    d4:30:a8:a6:97:bb:aa:dc:f7:98:b2:d3:8f:aa:2d:
                    0c:77:3b:30:d9:a7:02:1f:6b:e7:59:64:15:10:a0:
                    1d:5e:74:f2:5e:8f:3b:cc:32:3d:ae:a4:0b:85:e2:
                    32:c7:e7:88:3d:05:e3:dc:f7:d2:23:a4:39:7f:f1:
                    56:9a:14:02:21:d3:0d:78:d5:fb:23:b0:29:7d:07:
                    fd:6b:a4:53:a3:98:92:55:d6:dd:a4:eb:e1:9a:32:
                    ac:78:88:02:a9:b8:8e:22:86:64:19:21:26:04:6a:
                    9c:44:d5:d6:ee:e6:fd:c0:5f:b2:d6:8a:1c:2e:67:
                    56:a3:7c:24:de:77:a1:c7:44:66:fc:4d:79:dd:72:
                    04:b4:48:0c:e4:40:a3:e8:85:f6:28:3f:98:d3:0e:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:60:DC:40:77:DA:F9:B6:13:84:27:A4:AD:8F:93:7B:38:7F:2A:9C
            X509v3 Authority Key Identifier:
                keyid:15:91:6F:F0:BB:78:CC:E4:A3:7C:42:BC:16:B3:EE:BA:C7:8F:62:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZFv8Lt4zOSjfEK8FrPuusePYlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/FZFv8Lt4zOSjfEK8FrPuusePYlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/FZFv8Lt4zOSjfEK8FrPuusePYlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:40:bd:28:fd:99:ce:0d:e3:71:55:1d:86:0d:a9:fd:f1:f5:
         2f:00:7a:89:97:2d:2c:f5:f5:85:94:20:d6:44:5d:89:d0:89:
         e6:ab:bd:67:89:20:00:79:de:80:ae:5b:d5:b4:35:dc:d3:42:
         61:64:bc:ff:4e:c4:0a:d4:bd:8a:f5:06:ff:f6:dc:74:ab:68:
         3d:bb:9b:57:01:9f:e0:be:42:36:1f:d5:f3:c3:39:22:3a:2a:
         05:5b:5a:64:69:21:9d:bd:ce:05:ba:0b:d8:2c:3a:41:f6:35:
         dc:00:5e:6b:10:91:47:8d:36:ac:ce:39:51:a8:fb:7e:ba:fe:
         b8:2f:b6:ad:15:fd:65:6f:89:4a:81:ad:e1:f7:10:c0:4b:2d:
         cd:7b:20:39:88:b8:55:ba:0e:30:af:01:73:e2:9a:06:bf:57:
         20:15:48:06:9c:d8:94:13:cf:75:c5:fc:84:87:b7:74:3c:12:
         80:df:bd:1e:f9:34:49:68:12:e9:66:70:85:1e:32:0a:f7:75:
         7d:6b:e7:cc:ea:1e:d4:05:8d:42:9f:48:95:13:69:31:b9:db:
         88:46:b3:d3:68:c8:a8:24:65:2b:09:1e:93:2c:61:15:2c:a3:
         b2:51:04:4e:3c:62:df:1e:30:f9:84:c5:9e:7a:c1:63:6d:de:
         c2:19:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----