Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.mft
File:                     dG-6vyolWp14yqJ-_opVdpleX8U.mft (raw, json)
Hash identifier:          /FyGpNf87LzgAciDLuGLmnDu50dRjkcdf5XoDGwmN8Q=
Subject key identifier:   E7:5D:6B:03:69:7E:3C:A5:F6:A5:69:EB:BC:9A:99:BE:6E:0C:1D:22
Authority key identifier: 74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
Certificate issuer:       /CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Certificate serial:       018BEB19ED6EDA5E7401FA0E9DAC047F3819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.mft
Manifest number:          0901
Signing time:             Mon 20 Nov 2023 05:00:26 +0000
Manifest this update:     Mon 20 Nov 2023 05:00:26 +0000
Manifest next update:     Tue 21 Nov 2023 05:00:26 +0000
Files and hashes:         1: dG-6vyolWp14yqJ-_opVdpleX8U.crl (hash: +H5KkZxANXXgBLleusD5BJ5VbDd5xm1amqsxIN3g4zE=)
                          2: ekX2qd7EDdahCY_y1n4gjgTswkU.roa (hash: l+b+5xfJEzyKk6KrNmqirkOI4/nEbh7PpTpvQIUNfII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:19:ed:6e:da:5e:74:01:fa:0e:9d:ac:04:7f:38:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
        Validity
            Not Before: Nov 20 05:00:26 2023 GMT
            Not After : Nov 21 05:00:26 2023 GMT
        Subject: CN=e75d6b03697e3ca5f6a569ebbc9a99be6e0c1d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:70:b7:f1:75:90:f6:00:67:51:b2:a4:9c:
                    6e:ae:1d:15:b6:3f:1a:93:92:d7:34:01:4c:6e:34:
                    16:b1:1c:c4:74:f5:27:bc:ff:9e:7a:07:ab:50:72:
                    3d:6f:62:90:46:ef:9b:84:f4:00:94:3d:68:9c:d6:
                    ac:64:eb:66:61:a9:8a:47:d7:7d:79:63:56:84:a2:
                    22:8d:e8:65:00:ba:b8:b5:41:3c:88:73:17:0b:e2:
                    df:24:20:85:0b:65:6b:39:28:c9:0e:3b:69:8a:39:
                    5e:b9:b2:5d:8d:6f:0a:58:64:bf:1d:86:1d:a2:91:
                    ec:b3:9a:3b:47:45:9d:1d:c8:92:ba:19:4c:8b:c0:
                    09:fa:c6:b7:c2:38:ac:6a:80:a4:30:56:d4:bd:ed:
                    98:0d:36:f2:8e:b6:20:cd:d7:b1:be:7b:21:f9:04:
                    e9:76:90:32:69:6a:09:51:3e:7c:b9:e6:88:db:aa:
                    6b:21:c5:3f:12:1b:1d:14:3a:32:0c:ec:d9:05:fe:
                    79:1b:c8:81:64:12:87:51:ae:b6:2e:cf:94:83:a1:
                    f8:49:df:0a:12:66:7e:46:b1:04:30:ab:55:7f:6c:
                    0c:9f:20:67:07:ef:e6:60:f3:5c:b9:e7:32:dc:ef:
                    3d:e2:ca:df:13:be:c7:c0:43:84:26:18:2f:a2:a0:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:6B:03:69:7E:3C:A5:F6:A5:69:EB:BC:9A:99:BE:6E:0C:1D:22
            X509v3 Authority Key Identifier:
                keyid:74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:e6:48:a5:77:40:d0:66:e4:7c:38:35:a6:5b:4e:09:c5:
         81:6c:c2:43:4f:e0:f8:8f:bb:6f:07:72:43:f1:f7:22:ff:94:
         7f:f2:2e:c9:95:f1:de:20:2b:4c:92:bf:67:9f:f1:cd:b5:eb:
         06:46:94:23:c9:46:76:02:09:0a:62:46:9a:b3:8f:7f:d2:d7:
         44:d7:31:0a:5c:7c:81:6d:10:15:f4:e2:c5:13:f9:79:dd:8b:
         ad:c7:c0:c5:30:80:48:27:f4:96:e3:05:e0:38:67:07:c1:67:
         0a:6d:94:9e:1a:85:47:1a:cb:97:34:5c:60:46:f5:c8:29:de:
         4a:aa:d2:7e:10:6f:bb:92:90:59:dc:8c:93:ec:bd:bc:f8:f5:
         68:38:2b:82:ad:91:a7:cb:cf:77:89:a9:1b:08:c0:2f:8d:21:
         1b:e0:c2:61:09:e8:e1:69:ee:e9:02:c8:64:62:bc:35:78:c3:
         b1:1f:04:45:15:4e:0c:ad:cf:59:46:de:17:fc:86:2e:05:a8:
         59:0d:68:5b:f3:0b:69:be:df:ca:09:99:62:a6:fe:5a:53:ee:
         62:65:67:3b:c6:4b:ae:d6:4c:b3:3f:fe:b7:e8:15:e7:82:44:
         db:f3:51:35:c0:fb:be:7c:2e:6c:df:ee:9c:16:3d:fb:07:a6:
         a1:fb:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----