Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.mft
File:                     xMIKsvJE7Gp_Cc8esXUujDKCSPI.mft (raw, json)
Hash identifier:          0qvMvhFdiD0k+6Cw0lF0bwyMJsfvXVTYba3nyCgu18k=
Subject key identifier:   FC:18:3F:65:DA:34:35:CA:B8:AF:EE:84:94:79:98:50:2E:D1:05:6E
Authority key identifier: C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
Certificate issuer:       /CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Certificate serial:       01894E505BD4F9B5A6E7462074247F697B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.mft
Manifest number:          0E2F
Signing time:             Thu 13 Jul 2023 08:13:56 +0000
Manifest this update:     Thu 13 Jul 2023 08:13:56 +0000
Manifest next update:     Fri 14 Jul 2023 08:13:56 +0000
Files and hashes:         1: B29sFB_oXf8_hxrMQj3jPqY4fK8.roa (hash: CmSv52zB9ixCqbjmz8g+3vtq6Hg8PDH83+D8/nwysPs=)
                          2: _STJRhAaGtTprZXDUB8qIuPAZXU.roa (hash: xfvbArO5C6z0ozoxsDXEseZ+EzQc1pP+zmayuSsuHqA=)
                          3: gHlOcJJd_D1THataR2qtktclOrc.roa (hash: ZoAdunlossuNrGzGxmaBdvh/I0tXly1igmdP5y6+8zo=)
                          4: xMIKsvJE7Gp_Cc8esXUujDKCSPI.crl (hash: KQ+hRWBhLeFh3tqoNk0fFsjVMMJF+e9oCyIdfJOUH9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4e:50:5b:d4:f9:b5:a6:e7:46:20:74:24:7f:69:7b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
        Validity
            Not Before: Jul 13 08:13:56 2023 GMT
            Not After : Jul 14 08:13:56 2023 GMT
        Subject: CN=fc183f65da3435cab8afee84947998502ed1056e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:d7:11:83:dd:cd:20:80:03:31:e8:e5:1e:
                    d0:fe:eb:4f:99:4e:1c:c1:5d:c8:8d:cf:f9:7e:73:
                    32:4b:21:bf:9a:0d:40:87:38:2d:ad:1b:7a:f5:2c:
                    8f:6c:23:83:e5:bd:0d:6a:0c:ad:87:86:13:ad:63:
                    b0:9a:a0:7a:8d:c5:f9:c6:ee:9a:93:7a:21:8e:c7:
                    83:c0:e0:81:97:1f:06:1f:b9:2e:8d:1f:f7:1c:52:
                    f4:76:d8:b5:4f:0c:c2:74:37:89:7e:6f:cc:34:3f:
                    d1:32:6a:34:54:b1:89:d0:3e:b8:3b:2e:2a:ad:86:
                    6b:d6:ac:0e:17:c1:0b:dd:c5:b1:f0:87:03:e4:64:
                    47:6c:8f:a4:8a:e7:e1:64:16:f4:26:e5:b9:19:00:
                    70:13:30:67:98:12:f8:e2:a9:b7:13:ec:9c:75:03:
                    c0:90:99:d1:f5:e1:6f:79:bf:69:ea:8b:94:f4:27:
                    71:e4:19:fb:19:9a:9a:ff:6f:b8:de:2e:13:e7:6d:
                    77:a3:50:31:94:00:39:b1:e9:65:2d:e7:19:a8:cf:
                    ea:c2:70:76:bb:bb:34:a0:9b:81:79:82:b8:b2:36:
                    75:5a:77:32:13:df:c1:82:53:46:be:c6:d7:c7:c8:
                    ba:cf:15:77:c4:5a:99:c2:89:b1:d7:bf:01:6e:bc:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:18:3F:65:DA:34:35:CA:B8:AF:EE:84:94:79:98:50:2E:D1:05:6E
            X509v3 Authority Key Identifier:
                keyid:C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:62:57:e7:b6:0c:c6:4c:a1:21:a9:92:62:46:48:3a:dd:
         73:e6:f9:ab:2e:6b:50:30:34:cb:f1:e3:53:f4:bc:8a:a7:9b:
         2c:5a:7a:dc:3e:b8:67:7c:05:0d:2b:c7:4c:5d:57:04:13:1c:
         a2:e8:25:01:7b:2e:ba:f2:e5:57:1d:a2:8f:10:c7:33:a3:86:
         74:30:78:1c:45:16:6e:80:5e:e4:98:af:08:57:17:20:4e:df:
         9f:fa:86:a0:ad:ad:3b:82:7b:93:59:f0:26:31:f1:8e:d5:d9:
         5c:a1:74:7f:19:e5:15:f0:c5:79:02:45:cb:fc:26:d8:ad:df:
         2c:d0:45:b9:d1:b2:0a:ef:6b:a3:52:d5:8a:82:4d:0b:cd:b0:
         bd:51:84:74:ac:a1:5f:76:4e:14:2a:29:48:c8:c4:9a:73:33:
         e6:a7:77:d5:91:2e:78:70:75:26:1c:50:a3:e9:1d:08:f7:2f:
         a3:0a:4f:f7:8f:24:63:52:4b:ed:82:f2:b7:e1:98:65:24:0c:
         ce:40:d3:65:dc:3b:3d:8d:85:7b:f9:8d:d6:75:df:2f:6f:07:
         76:51:2c:62:66:e5:63:cc:77:9f:48:49:d8:ce:55:9c:6c:dd:
         b1:37:f4:88:6f:63:7b:2e:fe:a5:bb:90:00:30:01:df:6c:a1:
         33:19:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----