Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.mft
File:                     Am_WtloRo6csIvqtoGwx8vYzFjc.mft (raw, json)
Hash identifier:          O/H5vJWHN7sx/vqJLg7jy98bAm/gag0d1J0WF+p0K0Q=
Subject key identifier:   F7:FE:91:10:28:66:EF:8D:E2:0B:C2:F2:02:34:7A:85:92:B2:A1:6D
Authority key identifier: 02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
Certificate issuer:       /CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Certificate serial:       0189736E3AA93AF4E3D2EA951288EE72DFEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.mft
Manifest number:          08A1
Signing time:             Thu 20 Jul 2023 13:12:30 +0000
Manifest this update:     Thu 20 Jul 2023 13:12:30 +0000
Manifest next update:     Fri 21 Jul 2023 13:12:30 +0000
Files and hashes:         1: Am_WtloRo6csIvqtoGwx8vYzFjc.crl (hash: NL7rnLS/uoNGiXToTDVUvIaHggjLlNNLk2hjp+F1NCU=)
                          2: cueDDeu2ZHY7ZCxUqG_8XaRgyH0.roa (hash: yPlzMqr8usIVP/aiLjKQvAjm4gHpyL+Z7/lHSudagPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:73:6e:3a:a9:3a:f4:e3:d2:ea:95:12:88:ee:72:df:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=026fd6b65a11a3a72c22faada06c31f2f6331637
        Validity
            Not Before: Jul 20 13:12:30 2023 GMT
            Not After : Jul 21 13:12:30 2023 GMT
        Subject: CN=f7fe91102866ef8de20bc2f202347a8592b2a16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:21:28:fb:02:07:78:16:40:9e:02:71:11:
                    8e:66:1f:f4:2c:d3:ec:a8:5a:61:af:c0:e5:21:8a:
                    a9:02:48:cb:e9:ac:94:d4:09:c1:aa:9e:be:b8:f1:
                    33:f9:a5:50:4d:db:c3:6d:42:87:84:9f:64:63:55:
                    47:b7:6c:51:9f:6e:36:25:31:25:3a:c3:2a:3f:85:
                    ba:a2:08:be:44:e0:8b:ff:c1:44:50:fc:99:3b:b8:
                    3b:56:73:36:21:af:de:4b:8e:9d:3c:93:99:d2:78:
                    5d:ae:66:7d:df:ae:9b:cb:93:78:20:98:b8:52:69:
                    83:a5:72:b3:2a:d9:66:2b:18:27:af:11:d8:89:6e:
                    5f:6a:cd:2a:c4:fc:91:e1:81:b9:ee:8d:5d:93:18:
                    af:44:81:9f:83:43:ea:71:d2:0f:be:4f:d6:81:80:
                    f1:2e:e4:7c:20:20:81:f0:bc:54:c8:a7:06:28:f5:
                    26:dc:6c:fc:54:00:fc:35:ff:f0:ce:a7:3a:d5:84:
                    cd:f1:95:ea:bc:1e:4a:95:d9:af:11:09:ad:b5:4a:
                    cf:ff:d5:5d:67:7b:49:0d:94:19:cb:84:03:9d:fe:
                    15:b7:ae:19:4a:09:80:e3:bc:6f:f7:59:df:c5:5c:
                    e1:d7:81:d4:61:6d:99:c2:d2:82:44:58:55:f6:76:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FE:91:10:28:66:EF:8D:E2:0B:C2:F2:02:34:7A:85:92:B2:A1:6D
            X509v3 Authority Key Identifier:
                keyid:02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f4:82:3f:81:f2:9d:3f:be:a5:34:2e:74:cb:14:65:f3:f2:
         60:25:43:27:cf:e3:29:64:d8:3d:84:4b:13:88:01:31:19:47:
         a9:66:75:27:e7:d1:97:30:54:32:b2:7c:60:2c:29:28:72:2e:
         63:63:f8:69:a6:c9:25:25:be:00:7f:83:2b:fe:a3:14:e7:4a:
         aa:bc:1a:8d:69:61:4d:43:79:0b:79:41:99:2c:b0:3c:f2:2b:
         2a:f2:04:80:71:4c:e7:bf:51:d0:ee:45:5c:ff:5f:94:f5:fa:
         be:db:ef:15:86:b4:2e:81:09:94:74:04:60:64:4a:73:56:74:
         40:a3:d8:16:8b:fc:81:64:5a:08:fe:eb:1a:32:43:0e:44:ef:
         db:7b:56:a5:b3:25:47:f1:47:b4:f9:51:bd:2c:cf:fe:38:4e:
         f1:94:cc:a9:2d:02:b5:55:17:b3:dc:f2:18:38:4d:7c:29:fb:
         32:be:67:4d:d2:1e:d3:c4:8f:6b:b7:db:d0:df:a7:f5:5d:63:
         a5:d5:a5:bd:95:69:4e:92:71:df:b5:ea:8f:58:58:b9:4d:00:
         fa:4f:3f:1c:ce:cd:5c:3b:21:e1:82:2f:31:c9:85:22:86:1a:
         2e:0b:0e:fd:d9:b4:7f:a0:54:75:ff:2a:f3:92:c1:bd:72:34:
         dc:49:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----