Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/180643-e6e0-4dbb-96c5-2e643e4ce9ef/1/Cq33EUaP-steKJfGLfsEdQG5nWU.mft
File:                     Cq33EUaP-steKJfGLfsEdQG5nWU.mft (raw, json)
Hash identifier:          viRsV/D4v6I1TstnpuKA6PZrHqKZyw8byN83Uw93s+c=
Subject key identifier:   FB:AC:8B:F1:65:3D:07:A1:EB:B3:3A:B2:EC:A8:52:0A:F7:30:D1:3F
Authority key identifier: 0A:AD:F7:11:46:8F:FA:CB:5E:28:97:C6:2D:FB:04:75:01:B9:9D:65
Certificate issuer:       /CN=0aadf711468ffacb5e2897c62dfb047501b99d65
Certificate serial:       018AB5E64029210A72D632E85BA75F01C98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cq33EUaP-steKJfGLfsEdQG5nWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/180643-e6e0-4dbb-96c5-2e643e4ce9ef/1/Cq33EUaP-steKJfGLfsEdQG5nWU.mft
Manifest number:          0A25
Signing time:             Thu 21 Sep 2023 04:01:20 +0000
Manifest this update:     Thu 21 Sep 2023 04:01:20 +0000
Manifest next update:     Fri 22 Sep 2023 04:01:20 +0000
Files and hashes:         1: Cq33EUaP-steKJfGLfsEdQG5nWU.crl (hash: 49Bd4npZNrPk+fzebWjgNTCPpXZXhBl6vCRw8YdLlQo=)
                          2: KR0OBdYAT_skLJVT_CdTGVh0bt0.roa (hash: atCuTzQz04XsWLq1DA9OeVUqF0Z2ntmYzmp/bm254ds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b5:e6:40:29:21:0a:72:d6:32:e8:5b:a7:5f:01:c9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aadf711468ffacb5e2897c62dfb047501b99d65
        Validity
            Not Before: Sep 21 04:01:20 2023 GMT
            Not After : Sep 22 04:01:20 2023 GMT
        Subject: CN=fbac8bf1653d07a1ebb33ab2eca8520af730d13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:41:a1:48:7e:79:45:61:cd:6c:9f:c5:2a:
                    64:32:4d:06:14:1b:b2:1b:06:08:0c:d7:cc:a6:58:
                    72:e8:c2:02:f7:13:95:86:07:a5:29:d0:68:0f:20:
                    6f:b8:bd:1c:0a:5e:c2:0b:4a:0b:dd:c0:55:ff:c3:
                    b2:98:47:6a:3e:f8:8c:8e:51:2e:b6:80:ff:be:7f:
                    f4:d7:32:05:90:c6:f6:ab:52:ac:de:f0:cd:bf:a0:
                    84:58:aa:b3:f9:b0:cb:88:f2:56:b6:dd:7b:f1:17:
                    bb:93:3b:d6:46:e5:5b:d0:a2:dd:ed:f7:6b:88:3d:
                    59:c5:3e:26:e3:f4:6a:f6:a1:eb:e6:0b:48:c8:98:
                    d6:48:a1:b1:8a:5c:ee:97:5a:3a:96:88:9e:51:9a:
                    be:23:4c:72:0f:43:29:27:f7:f9:31:5b:cb:db:6b:
                    7d:d8:7f:33:b2:ab:e3:fe:a1:7a:50:04:72:57:62:
                    14:c5:5e:a0:1b:aa:24:67:69:40:b1:70:bc:a6:0e:
                    52:9c:0a:d6:9c:e1:52:13:e8:62:78:4b:09:29:71:
                    6c:ad:07:dd:02:48:d1:6f:50:d3:5a:c9:74:83:3f:
                    3d:69:5b:5d:39:dc:3e:ea:10:56:ae:d9:2e:9d:05:
                    48:71:85:56:ca:9d:de:ad:da:76:8a:13:d4:ee:f7:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AC:8B:F1:65:3D:07:A1:EB:B3:3A:B2:EC:A8:52:0A:F7:30:D1:3F
            X509v3 Authority Key Identifier:
                keyid:0A:AD:F7:11:46:8F:FA:CB:5E:28:97:C6:2D:FB:04:75:01:B9:9D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq33EUaP-steKJfGLfsEdQG5nWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/180643-e6e0-4dbb-96c5-2e643e4ce9ef/1/Cq33EUaP-steKJfGLfsEdQG5nWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/180643-e6e0-4dbb-96c5-2e643e4ce9ef/1/Cq33EUaP-steKJfGLfsEdQG5nWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:01:13:c1:89:d2:3c:ba:36:f9:fb:be:d9:0d:e0:67:88:32:
         92:a5:cc:cb:d5:dc:0a:34:1b:f3:2a:27:b4:a5:2b:d9:78:f4:
         a7:68:3e:7f:31:49:e3:24:cb:c1:b9:70:13:dd:97:64:32:ad:
         67:db:6d:ca:1c:4f:f1:7f:a9:1b:83:bb:86:bf:8f:43:3a:15:
         62:89:4c:05:79:d5:0a:43:fb:31:93:06:ab:40:13:63:00:6c:
         67:f8:cf:0d:8d:f1:46:de:8a:49:16:fa:a8:10:45:dd:a3:42:
         b5:ce:89:0a:07:20:92:b7:32:8c:f1:54:97:20:ba:db:4f:94:
         94:22:c5:fa:87:54:44:84:fc:8e:81:93:02:aa:ee:73:fd:a9:
         31:3b:74:6f:29:b8:8c:c9:1f:6d:9a:13:8b:9c:5c:eb:71:b8:
         37:0a:24:62:32:1a:06:7c:67:3c:f8:2b:87:2a:f3:79:be:86:
         25:bb:83:ca:e5:97:6d:33:1b:a7:6d:cc:3f:f9:49:df:0d:51:
         e2:69:b1:5a:60:f5:bd:59:46:94:1e:eb:3d:fc:d7:e5:17:7a:
         40:7d:36:bb:01:b1:49:14:69:ab:86:20:e4:00:85:89:88:f8:
         48:06:80:86:34:b7:fc:af:75:78:18:bb:4f:38:87:a6:81:64:
         37:32:27:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----