Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ccb9bd-fec4-4cf7-9fe4-e193a28f6838/1/WoH1QDau91StlBMAcqsIedg6DHQ.mft
File:                     WoH1QDau91StlBMAcqsIedg6DHQ.mft (raw, json)
Hash identifier:          hpffFevKlc1n1PckVZGKtr0riDp5fDUO39PkTvCMuEs=
Subject key identifier:   DB:64:DB:87:5E:B6:77:75:8B:4A:9D:F0:AE:74:C9:B5:07:CA:01:85
Authority key identifier: 5A:81:F5:40:36:AE:F7:54:AD:94:13:00:72:AB:08:79:D8:3A:0C:74
Certificate issuer:       /CN=5a81f54036aef754ad94130072ab0879d83a0c74
Certificate serial:       0188B3A8950149CFAC995A1870D9894CFCCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WoH1QDau91StlBMAcqsIedg6DHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ccb9bd-fec4-4cf7-9fe4-e193a28f6838/1/WoH1QDau91StlBMAcqsIedg6DHQ.mft
Manifest number:          030E
Signing time:             Tue 13 Jun 2023 07:29:09 +0000
Manifest this update:     Tue 13 Jun 2023 07:29:09 +0000
Manifest next update:     Wed 14 Jun 2023 07:29:09 +0000
Files and hashes:         1: Gm3ijc49k0gzSHKh5lQI-9wNdwQ.roa (hash: hfmManW2PQetGl3ubnhzX8rsY4JxMzwPEMr5kwqdWgw=)
                          2: NiLdAe0UVP7vtvwu4-cPu7DbLBw.roa (hash: tmyEQ9UZAyYgChMTDN10qqx1IuX7qHv8blFVAI5HGPs=)
                          3: WoH1QDau91StlBMAcqsIedg6DHQ.crl (hash: Pk49Olc/x+4sCop5lHI8jXNjkp7Y/sQX8BuUXDnrWvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b3:a8:95:01:49:cf:ac:99:5a:18:70:d9:89:4c:fc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a81f54036aef754ad94130072ab0879d83a0c74
        Validity
            Not Before: Jun 13 07:29:09 2023 GMT
            Not After : Jun 14 07:29:09 2023 GMT
        Subject: CN=db64db875eb677758b4a9df0ae74c9b507ca0185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:74:99:1a:8e:7a:f5:83:6f:1b:51:66:d7:
                    42:72:6a:d8:37:20:8c:65:bd:8e:85:5c:87:28:f4:
                    f6:03:c0:d2:cc:bc:40:ef:9c:d9:7a:b5:23:1d:6b:
                    db:c2:b5:68:51:56:d9:63:9b:70:43:a7:c8:a5:ee:
                    a3:06:5b:b1:56:96:8c:62:0f:e1:51:cc:44:f2:c1:
                    b5:f2:32:01:d0:5e:41:2f:29:37:24:61:04:ec:17:
                    8e:e4:84:af:e0:b9:04:71:b1:cd:3b:58:26:08:ba:
                    50:9e:d6:e3:51:4c:00:f8:cf:02:02:da:3b:d1:02:
                    91:4e:55:49:ee:f1:66:79:69:a0:9c:7a:28:d5:02:
                    89:0a:d4:f7:ca:1d:24:19:7f:99:88:f6:d0:ed:fd:
                    fc:4e:55:8e:9a:67:cd:26:48:7b:e0:75:1a:a8:dd:
                    02:4e:d5:b4:ad:13:97:56:93:6b:e1:39:b3:26:b2:
                    21:eb:bd:48:16:3a:c9:aa:18:94:75:38:f6:2a:9a:
                    a7:28:b4:6b:1b:17:b0:cd:46:18:41:1f:8b:e4:38:
                    62:b7:6b:1e:0c:50:13:12:ac:24:b6:b0:eb:c9:aa:
                    14:1f:8f:3d:f4:c8:d1:d4:67:3a:62:4d:18:dd:61:
                    78:7b:41:ec:ab:aa:cb:fa:d7:25:da:9f:79:16:c6:
                    00:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:64:DB:87:5E:B6:77:75:8B:4A:9D:F0:AE:74:C9:B5:07:CA:01:85
            X509v3 Authority Key Identifier:
                keyid:5A:81:F5:40:36:AE:F7:54:AD:94:13:00:72:AB:08:79:D8:3A:0C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoH1QDau91StlBMAcqsIedg6DHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ccb9bd-fec4-4cf7-9fe4-e193a28f6838/1/WoH1QDau91StlBMAcqsIedg6DHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ccb9bd-fec4-4cf7-9fe4-e193a28f6838/1/WoH1QDau91StlBMAcqsIedg6DHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:2a:ad:bd:38:54:a7:2e:cc:c7:28:c2:29:48:e4:5e:5f:
         20:97:35:1f:ff:1b:25:fe:84:9c:d2:95:ae:0a:09:e4:69:e6:
         53:6a:6f:a4:b4:60:59:b1:6b:ba:44:1d:1a:1c:a4:d5:ec:99:
         86:d4:e6:00:b9:fa:55:c8:7a:66:22:1a:85:cb:97:83:e6:08:
         ae:3e:a0:37:d0:78:2e:b4:81:c9:f9:65:fb:63:14:6c:9f:74:
         76:7a:1a:97:b8:c6:f8:92:c8:d0:b3:07:80:21:34:7b:f6:76:
         10:ec:6c:0f:4c:33:7f:e0:40:8d:6b:66:cf:a6:a6:24:99:af:
         7a:8c:9b:89:e5:f9:38:30:5a:2b:8c:d8:ef:48:29:85:fd:16:
         7d:b2:43:dc:07:6b:76:28:f7:65:25:a3:a4:b4:28:d9:17:94:
         5f:d2:02:3d:7c:8e:0e:42:a9:18:f4:85:c4:84:89:4a:72:da:
         c5:c4:a1:43:2f:4b:71:51:36:50:3b:88:5d:f8:b2:16:86:96:
         06:63:e0:9c:7d:e6:80:5b:52:cc:87:fa:6b:5c:41:bd:fc:bb:
         1a:4e:bc:d1:2f:bf:c1:93:e5:a3:de:ae:0a:ce:d5:9f:eb:d6:
         1e:a0:8c:e9:cc:87:04:b5:b5:d3:09:71:fc:2d:05:a5:96:21:
         03:7f:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----