Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.mft
File:                     1ZLLOdT2ROTNCt_SmSguVMOZUZU.mft (raw, json)
Hash identifier:          humrm6r7eCJCcU19AIFvTw+vX+FrLv+WOzgzsK/0MJc=
Subject key identifier:   8E:43:8E:62:86:C0:27:29:F5:D1:8D:14:74:03:12:C6:E5:90:8E:06
Authority key identifier: D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
Certificate issuer:       /CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Certificate serial:       0188DD495DEC0519680D98E05B6AC9D12B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.mft
Manifest number:          0DFD
Signing time:             Wed 21 Jun 2023 09:29:12 +0000
Manifest this update:     Wed 21 Jun 2023 09:29:12 +0000
Manifest next update:     Thu 22 Jun 2023 09:29:12 +0000
Files and hashes:         1: 1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl (hash: YAeQudmVDUZ8/UbAy6gTcdj3X4vtLhma+eFWZuaQ3Eg=)
                          2: ULOUH35H2YeB53n8RgUKfPQuprc.roa (hash: xg0JavN4Ysa7Nrp+HEvsSXmj8u2s3+IN2SHC5idyQRo=)
                          3: p0z4KnKOB1rOKHOYrqEwNECAxYI.roa (hash: K6+CUwQTDcg+J3JmrhMl7g+OrLn1CZaaS7pjcxKxF5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:dd:49:5d:ec:05:19:68:0d:98:e0:5b:6a:c9:d1:2b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d592cb39d4f644e4cd0adfd299282e54c3995195
        Validity
            Not Before: Jun 21 09:29:12 2023 GMT
            Not After : Jun 22 09:29:12 2023 GMT
        Subject: CN=8e438e6286c02729f5d18d14740312c6e5908e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:8d:9c:19:28:15:1a:ea:45:e7:70:73:96:
                    89:39:5f:8b:69:2a:42:2c:79:b9:52:ab:c6:a4:24:
                    6d:1d:67:db:81:0b:15:ae:c1:ec:7e:64:93:73:f7:
                    b2:8a:b1:2b:e1:3a:de:76:27:7d:11:5d:93:09:92:
                    c8:5d:e2:52:ad:fc:a9:fe:87:96:f4:ab:0d:10:2d:
                    9b:a0:46:41:5f:51:7d:2c:5c:73:a7:20:93:e3:ad:
                    a3:a0:63:cd:3c:28:69:22:5d:9a:ea:5d:08:b7:cc:
                    96:73:d5:c8:23:eb:af:14:54:ef:28:c2:7b:4e:18:
                    46:b8:ca:dc:f8:53:45:b7:07:a3:66:d8:6b:dd:a9:
                    23:82:a3:ec:fa:4d:bc:62:ab:5d:50:bf:be:31:ef:
                    32:1a:4f:7a:2c:59:d5:16:6f:e3:4b:86:1f:76:3e:
                    ff:51:7c:60:07:b5:fd:82:ee:a4:2f:2f:de:a6:26:
                    fe:a9:cc:0c:e2:59:27:01:b7:bc:0b:9b:ca:85:b4:
                    4b:b1:2e:49:f8:48:61:74:90:b7:f2:cc:ea:1e:d3:
                    14:a6:95:25:99:a5:2b:62:18:7c:58:f1:b6:5f:d5:
                    00:ad:5d:4b:f4:c6:1f:3c:b8:c7:31:32:b7:66:a9:
                    bd:fa:01:25:d0:f8:3c:78:12:9f:b8:ea:8b:bb:74:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:43:8E:62:86:C0:27:29:F5:D1:8D:14:74:03:12:C6:E5:90:8E:06
            X509v3 Authority Key Identifier:
                keyid:D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:97:27:98:ce:a2:1c:4d:40:44:2e:3f:7b:b0:3d:be:1d:f2:
         db:f1:ed:ef:26:47:ad:da:88:62:bd:91:00:e6:be:6f:cd:fc:
         32:2e:aa:de:e8:7f:41:bd:ef:b9:86:4e:6f:a4:9b:30:b8:26:
         57:c5:c6:77:f0:b0:d1:26:52:65:7f:f6:03:cc:64:78:03:f4:
         1a:56:a0:bf:70:05:53:76:a5:11:b7:e8:29:27:ff:00:95:5a:
         a0:fe:ce:9d:4c:dc:cc:98:14:aa:df:96:a0:7a:a3:10:44:f3:
         9a:67:63:02:1b:0b:a7:cf:81:0b:c7:40:a5:87:94:e3:94:1f:
         89:ad:32:79:07:dd:00:65:cd:d9:1c:d9:ff:5c:8a:ae:c8:d8:
         5e:4b:65:c8:0b:fb:06:19:97:79:ed:6f:0d:a4:4f:bd:b2:6d:
         27:c8:de:e3:c9:09:e2:3c:a3:f7:7f:41:83:e2:36:ce:ec:8f:
         f6:0c:8c:20:f7:4a:2b:43:49:53:ac:14:ad:f1:ed:3d:dd:14:
         c8:3e:7f:59:ed:5b:1f:65:27:72:71:21:dd:76:c9:92:4f:52:
         d6:cb:b5:78:73:39:0b:00:0b:62:ae:9d:4d:a6:29:c7:8e:cf:
         29:b9:bb:2f:55:b8:69:9a:1c:df:2e:6f:ae:11:62:9c:64:6c:
         a0:db:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----