Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.mft
File:                     3wCFwOYX4HlZSgG6b7Zm_HhOAPw.mft (raw, json)
Hash identifier:          yG9uZD6HyRj8WeNGKuTRynEmoXdLDMr+AdngXGELfZU=
Subject key identifier:   D5:C4:3C:0E:77:BD:EC:07:76:3F:BF:F0:4A:3F:09:F0:6B:9B:6C:E1
Authority key identifier: DF:00:85:C0:E6:17:E0:79:59:4A:01:BA:6F:B6:66:FC:78:4E:00:FC
Certificate issuer:       /CN=df0085c0e617e079594a01ba6fb666fc784e00fc
Certificate serial:       018BF077F9EEC6DEAC373911917462665283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.mft
Manifest number:          0829
Signing time:             Tue 21 Nov 2023 06:01:16 +0000
Manifest this update:     Tue 21 Nov 2023 06:01:16 +0000
Manifest next update:     Wed 22 Nov 2023 06:01:16 +0000
Files and hashes:         1: 3wCFwOYX4HlZSgG6b7Zm_HhOAPw.crl (hash: E3pVhLiu0pxoVXY6pUzgY0bsK3FmzwakwfuBgne4CeE=)
                          2: VWKQ_Lmstyws9TfC2VVYfRXWjF8.roa (hash: +HfQ3a68/KHwaRiVRbS5AxAXKtK0ucjG2SmMY96NxzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f0:77:f9:ee:c6:de:ac:37:39:11:91:74:62:66:52:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0085c0e617e079594a01ba6fb666fc784e00fc
        Validity
            Not Before: Nov 21 06:01:16 2023 GMT
            Not After : Nov 22 06:01:16 2023 GMT
        Subject: CN=d5c43c0e77bdec07763fbff04a3f09f06b9b6ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6e:53:39:fb:25:d8:9b:f3:58:b9:34:0d:d0:
                    39:75:b1:55:e7:20:ad:99:bf:d8:88:82:8a:79:4d:
                    c0:19:17:08:f3:ce:d9:bb:70:c3:01:c6:44:90:2a:
                    b0:22:f5:76:d2:50:8d:f1:ef:44:c1:65:9a:dc:f6:
                    b0:b5:bd:c6:74:3a:c2:6b:88:f7:04:fa:6b:a3:8c:
                    e8:03:30:7c:f6:2e:c8:23:44:d7:74:c0:cf:82:ee:
                    56:17:f6:55:f0:f2:87:b3:33:52:c2:d8:ff:9a:aa:
                    3b:14:8f:d6:01:3f:63:ce:4c:a5:dc:94:56:10:8a:
                    0c:3a:5d:b3:f2:8c:23:ef:4c:eb:23:6b:7d:c7:55:
                    5f:96:3c:55:34:63:02:a8:ae:14:4c:9b:b2:96:02:
                    09:b0:89:96:b8:36:fa:25:41:72:70:22:89:3f:79:
                    ac:fb:1d:71:26:64:5e:e6:8a:b7:d4:fb:1c:fd:f7:
                    2b:cc:bd:fd:aa:55:7d:2b:50:b2:09:70:80:15:b8:
                    b4:df:8a:29:4a:e1:ca:07:7b:0f:7b:60:1d:08:b3:
                    b4:73:29:5a:28:6d:98:b6:d6:e4:6b:c7:50:54:d6:
                    f0:c2:50:3a:27:9b:2a:24:15:f9:99:fe:91:22:8c:
                    17:ce:22:dd:17:0f:56:84:42:3e:d1:27:90:c1:72:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:3C:0E:77:BD:EC:07:76:3F:BF:F0:4A:3F:09:F0:6B:9B:6C:E1
            X509v3 Authority Key Identifier:
                keyid:DF:00:85:C0:E6:17:E0:79:59:4A:01:BA:6F:B6:66:FC:78:4E:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ac:3b:08:56:e5:49:d6:c9:2a:ce:39:c4:10:e2:ca:8e:da:
         2d:42:57:68:24:2d:55:b3:12:9d:8d:f7:4f:3f:4e:f0:d7:5a:
         eb:77:e5:33:46:1a:6b:2b:1b:63:14:31:89:c2:1c:02:70:24:
         bb:94:c2:de:d2:5d:a2:be:c7:5b:9b:ac:05:6e:b1:cd:36:1c:
         50:4a:fc:38:5e:d9:26:be:4b:02:9c:f8:52:1a:77:0c:69:df:
         21:1b:eb:ad:6f:dd:56:70:ee:f9:e3:2c:2d:f8:fa:5b:c6:6f:
         f2:f5:23:08:4d:bb:52:c0:72:bc:83:8e:db:65:24:66:1b:ad:
         64:d3:c2:55:45:4f:59:91:9b:8c:78:b4:7d:d0:6a:5b:32:35:
         a4:e0:14:f7:0b:f2:de:a9:75:68:cc:73:b7:ee:fb:d7:bc:bd:
         9e:b9:18:0f:f7:de:39:2b:01:44:cb:69:3e:dd:2b:86:53:15:
         f7:3c:1f:34:09:c9:cb:8a:4e:4e:8f:4d:53:c4:5b:25:2f:9a:
         f2:73:0d:b3:83:f4:cf:68:d3:10:2f:c3:d4:58:6e:41:8d:72:
         4c:57:04:72:fd:51:64:f0:38:36:e7:40:a2:5f:6f:1e:73:d4:
         25:8e:34:bc:aa:98:fd:0a:68:4f:50:5c:dc:63:73:e7:35:a8:
         b7:e0:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----