Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/511ae5-2b40-48a4-93fb-cc14252c0fa1/1/S9rxV_M7X94hCJmpVINNxybTSms.mft
File:                     S9rxV_M7X94hCJmpVINNxybTSms.mft (raw, json)
Hash identifier:          rEUYaL8ft73HIxBSrrzjyXcp/hO3HldFHnnVpJmfMEA=
Subject key identifier:   57:42:2A:87:9E:45:06:CF:AA:EE:97:D2:1C:33:E7:F9:83:CA:A3:40
Authority key identifier: 4B:DA:F1:57:F3:3B:5F:DE:21:08:99:A9:54:83:4D:C7:26:D3:4A:6B
Certificate issuer:       /CN=4bdaf157f33b5fde210899a954834dc726d34a6b
Certificate serial:       0187BC7094282532FA97C86D4647BFD37C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S9rxV_M7X94hCJmpVINNxybTSms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/511ae5-2b40-48a4-93fb-cc14252c0fa1/1/S9rxV_M7X94hCJmpVINNxybTSms.mft
Manifest number:          0CDD
Signing time:             Wed 26 Apr 2023 07:21:47 +0000
Manifest this update:     Wed 26 Apr 2023 07:21:47 +0000
Manifest next update:     Thu 27 Apr 2023 07:21:47 +0000
Files and hashes:         1: S9rxV_M7X94hCJmpVINNxybTSms.crl (hash: FzoPmdD2a0Cj0HddSmYez+d3RxVivNz8u2HsIuza5tg=)
                          2: dAIjUwsO5zcCkb68Z-FcwrnWMCw.roa (hash: WVIg9CGVc62xwbSDrjQvQ3Utvw5OV1BU/9vm6kvTnyI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bc:70:94:28:25:32:fa:97:c8:6d:46:47:bf:d3:7c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bdaf157f33b5fde210899a954834dc726d34a6b
        Validity
            Not Before: Apr 26 07:21:47 2023 GMT
            Not After : Apr 27 07:21:47 2023 GMT
        Subject: CN=57422a879e4506cfaaee97d21c33e7f983caa340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7a:75:9e:28:a7:f4:e6:93:c3:45:0a:f8:73:
                    94:81:9b:ea:2e:4a:15:bd:f1:80:38:56:75:8b:5e:
                    f0:9d:8e:89:4a:6d:18:b0:32:87:46:c6:e6:ca:af:
                    d9:88:db:3b:5d:8b:cf:fc:ff:96:a6:4d:65:ed:26:
                    58:01:cd:f2:43:cd:11:f6:ce:0f:77:3f:af:9c:99:
                    8c:d8:0f:c0:5b:7a:6a:ec:4a:85:4f:76:f2:d9:ee:
                    82:bc:79:66:06:1e:8c:37:ca:8e:5e:ce:be:94:dc:
                    be:61:d4:3f:2a:23:81:57:25:af:54:43:6f:0c:9d:
                    7a:ed:11:e2:a9:4b:5b:8d:99:8d:80:0c:04:fa:44:
                    1e:da:bc:eb:82:2c:a3:c3:ee:34:7f:ef:48:d4:01:
                    41:03:f7:a4:d0:e4:c1:62:b4:84:00:bb:92:41:f5:
                    9e:3d:1f:7f:c8:82:75:f9:df:89:90:21:96:6f:e1:
                    57:ce:ef:65:d1:24:c3:02:88:d2:e5:9e:3f:38:4f:
                    6b:34:9f:08:b9:36:a1:7b:12:4c:a5:87:38:3a:2e:
                    2b:10:de:75:7f:ec:a7:36:85:3c:92:20:20:6d:bd:
                    4e:cb:b4:af:01:1a:11:1c:b0:67:76:5d:97:b2:ec:
                    97:6e:3f:6d:1d:d3:b8:1c:17:7d:dc:0a:fb:d4:7a:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:2A:87:9E:45:06:CF:AA:EE:97:D2:1C:33:E7:F9:83:CA:A3:40
            X509v3 Authority Key Identifier:
                keyid:4B:DA:F1:57:F3:3B:5F:DE:21:08:99:A9:54:83:4D:C7:26:D3:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9rxV_M7X94hCJmpVINNxybTSms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/511ae5-2b40-48a4-93fb-cc14252c0fa1/1/S9rxV_M7X94hCJmpVINNxybTSms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/511ae5-2b40-48a4-93fb-cc14252c0fa1/1/S9rxV_M7X94hCJmpVINNxybTSms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:22:af:3f:65:29:53:a1:6f:86:f9:9e:d5:f8:3c:6e:b4:
         18:bb:33:74:ee:4f:71:e5:b7:25:21:66:1b:cc:59:85:33:4a:
         c7:05:88:58:ed:b2:a8:eb:34:e8:1a:a9:9e:eb:d5:01:a1:25:
         e2:52:b1:38:95:a2:e7:2c:ec:7f:41:60:6d:ba:b4:93:f5:98:
         33:b8:bf:4c:33:36:6c:8a:a5:3e:cd:5b:25:b9:8a:1e:1d:6d:
         d6:75:f8:ae:f3:b9:2f:12:8f:f5:11:de:86:88:c6:b9:cd:c6:
         ff:fe:00:f3:1c:01:be:0f:fe:e7:a9:cc:bf:73:3c:91:03:cf:
         3c:82:78:90:b7:31:ef:1b:65:3f:d2:bb:af:ac:72:ac:94:ba:
         30:7c:e1:8f:b1:28:7a:29:cd:93:be:a6:07:76:38:a7:74:da:
         39:8f:f1:cd:b0:f4:f0:f8:14:78:71:4c:8c:78:d6:c5:d0:21:
         b5:39:c5:e3:7d:1e:04:db:0e:90:c0:78:65:ab:7a:c3:43:a2:
         8b:f8:67:45:58:e2:cf:1a:3c:c6:64:3a:d3:9a:bd:16:65:cb:
         fe:54:c1:b9:ee:a8:f0:6f:70:87:ef:eb:03:54:fa:8f:c8:30:
         8f:87:36:8a:ea:3f:45:9c:02:e6:dd:a0:23:9a:2c:eb:c9:13:
         be:6e:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----