Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8dbf34-d49a-4e5c-80cd-6acdf4751a48/1/p6liQrSRliK_KZSdJxOPZBKjbxc.mft
File:                     p6liQrSRliK_KZSdJxOPZBKjbxc.mft (raw, json)
Hash identifier:          FFysHr+0SJkze4AZhgV81O60/Ez11d9yxgFWlpY+54g=
Subject key identifier:   EC:A4:FC:00:1A:A7:81:95:4C:0F:A0:61:32:70:45:84:74:9A:7A:89
Authority key identifier: A7:A9:62:42:B4:91:96:22:BF:29:94:9D:27:13:8F:64:12:A3:6F:17
Certificate issuer:       /CN=a7a96242b4919622bf29949d27138f6412a36f17
Certificate serial:       01896232BA2F95B371CAA39B97D365FB3BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6liQrSRliK_KZSdJxOPZBKjbxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/8dbf34-d49a-4e5c-80cd-6acdf4751a48/1/p6liQrSRliK_KZSdJxOPZBKjbxc.mft
Manifest number:          0E3C
Signing time:             Mon 17 Jul 2023 04:53:58 +0000
Manifest this update:     Mon 17 Jul 2023 04:53:58 +0000
Manifest next update:     Tue 18 Jul 2023 04:53:58 +0000
Files and hashes:         1: lXfWM0PV0d6QPd7VQ8u8s85HOPc.roa (hash: YEZyQ5xy+JS9OBjBwX7XbqEYKf0wnucQlYVf05sAevI=)
                          2: p6liQrSRliK_KZSdJxOPZBKjbxc.crl (hash: gONebmx18VxvUl7JZbUrHvX/kJrNsa+eb1QVSAC//DU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:32:ba:2f:95:b3:71:ca:a3:9b:97:d3:65:fb:3b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a96242b4919622bf29949d27138f6412a36f17
        Validity
            Not Before: Jul 17 04:53:58 2023 GMT
            Not After : Jul 18 04:53:58 2023 GMT
        Subject: CN=eca4fc001aa781954c0fa06132704584749a7a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:8c:36:7f:8a:c8:0b:1d:ad:8e:18:c8:4d:
                    4b:42:3e:f6:d3:e4:c8:12:c9:75:86:e3:48:ae:21:
                    3f:82:37:b8:a2:bb:50:98:16:dc:57:08:df:16:a1:
                    53:e5:68:16:06:a5:24:b4:e1:67:36:37:ce:31:b8:
                    ee:45:5c:d7:6f:e4:8b:53:d5:25:87:42:e3:e8:51:
                    02:0c:60:25:e5:8f:21:40:c4:c1:16:8b:36:43:77:
                    9f:66:55:ad:3e:bb:95:47:53:86:a9:36:ba:4f:72:
                    58:a9:d8:ae:9a:14:71:fe:a4:a0:56:a5:af:30:e4:
                    e1:f4:9d:13:8d:89:ec:ad:e4:3e:a9:48:fe:bf:7c:
                    d0:7b:d2:1a:3a:ec:9b:6c:a9:78:51:39:cd:9b:2f:
                    7a:ea:1a:8a:6a:66:63:bb:26:8a:94:55:4b:bc:f9:
                    65:6f:8a:8e:50:6b:00:28:d5:bc:d6:04:1f:77:4c:
                    30:56:c5:16:29:11:67:0b:74:c6:d2:3b:51:c7:98:
                    d0:70:0d:d3:05:83:51:3b:8a:08:73:ac:40:e8:19:
                    32:86:5c:d6:32:18:2b:2c:85:bd:41:d8:09:44:44:
                    88:19:31:fb:31:e2:25:ef:ce:6b:5e:27:3d:4f:4c:
                    26:c4:7f:11:75:f3:42:87:18:c7:6d:a5:1f:cd:a9:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A4:FC:00:1A:A7:81:95:4C:0F:A0:61:32:70:45:84:74:9A:7A:89
            X509v3 Authority Key Identifier:
                keyid:A7:A9:62:42:B4:91:96:22:BF:29:94:9D:27:13:8F:64:12:A3:6F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6liQrSRliK_KZSdJxOPZBKjbxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8dbf34-d49a-4e5c-80cd-6acdf4751a48/1/p6liQrSRliK_KZSdJxOPZBKjbxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8dbf34-d49a-4e5c-80cd-6acdf4751a48/1/p6liQrSRliK_KZSdJxOPZBKjbxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:a9:04:8b:26:62:06:9a:8b:77:52:d0:43:de:e9:6d:da:
         1a:8f:4a:1a:af:63:7f:33:01:4f:c9:fc:5e:f1:7c:54:3f:bc:
         30:b0:43:15:4b:81:aa:36:25:7d:38:39:db:7a:0a:c4:54:87:
         88:cd:7f:b2:75:08:f8:7e:d6:be:74:98:8f:c8:77:a0:72:a2:
         e4:1a:50:4b:6f:cc:e0:9a:39:50:ab:23:e3:1d:f7:2f:4e:3e:
         49:10:88:92:8e:9d:19:76:3d:93:7c:af:86:d8:18:59:63:65:
         a3:a5:e1:42:54:2a:b2:71:90:bb:d9:ad:34:f3:fb:be:37:79:
         9d:1f:56:c3:42:19:96:98:85:87:54:0c:44:d8:3f:40:bc:0c:
         e1:55:e4:ca:45:da:68:a5:c4:90:6c:5f:40:2a:4a:ff:93:d7:
         20:31:dc:4c:a8:9d:9b:ea:9d:2c:4b:08:35:3b:72:89:fc:03:
         c0:6c:94:64:84:0a:d9:b2:b1:c8:e5:4b:68:f5:13:13:22:f3:
         c1:91:12:0e:45:d5:48:2c:eb:97:99:7e:a2:29:4c:48:70:86:
         90:63:d3:c7:49:e6:c0:47:43:04:fb:39:12:2c:37:fd:9a:f3:
         64:8c:bf:81:bb:f5:77:2f:f3:ce:57:b4:b3:ac:42:a4:3d:12:
         d8:c4:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----