Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.mft
File:                     Oz__ceWfNQY_gJ_F6zr0xBn3vzM.mft (raw, json)
Hash identifier:          pQpIk7rHV3hKLq1Q7sZk0lTaIy0PlYyn+uubIGF4N48=
Subject key identifier:   CC:09:25:BE:2A:EB:6B:DD:B7:55:44:0E:37:35:8D:A7:A3:75:CF:7B
Authority key identifier: 3B:3F:FF:71:E5:9F:35:06:3F:80:9F:C5:EB:3A:F4:C4:19:F7:BF:33
Certificate issuer:       /CN=3b3fff71e59f35063f809fc5eb3af4c419f7bf33
Certificate serial:       01891F2879C171A7F57CC1300DFF0915F4F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.mft
Manifest number:          07EE
Signing time:             Tue 04 Jul 2023 04:28:13 +0000
Manifest this update:     Tue 04 Jul 2023 04:28:13 +0000
Manifest next update:     Wed 05 Jul 2023 04:28:13 +0000
Files and hashes:         1: Oz__ceWfNQY_gJ_F6zr0xBn3vzM.crl (hash: DEdy85nDIbthv2Sy61dYbBtdg3w6R7MJoki5ZreX75A=)
                          2: TkehTKBQ5fxelBtd5V8T3vNlnKM.roa (hash: UJlOVCdZX9WeconeqrQ9HwZRjBsMPUufUIbhp0txYOI=)
                          3: xYYSmipaVsbSrBMTtmqUNwnNh_c.roa (hash: jlJDnkfsaPdyUaXC48t8oNiAKVwhsZfv2RkXwGTL6Ec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1f:28:79:c1:71:a7:f5:7c:c1:30:0d:ff:09:15:f4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b3fff71e59f35063f809fc5eb3af4c419f7bf33
        Validity
            Not Before: Jul  4 04:28:13 2023 GMT
            Not After : Jul  5 04:28:13 2023 GMT
        Subject: CN=cc0925be2aeb6bddb755440e37358da7a375cf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:71:5e:48:d8:78:6e:1c:c7:6e:1e:4e:5a:
                    d1:c2:1e:2a:f7:3b:9c:bc:99:2e:27:76:43:37:53:
                    16:4e:bc:52:cf:c9:b2:d7:45:46:f6:cd:21:2c:15:
                    0f:02:05:be:ce:dd:f5:bf:00:dd:bd:7d:e9:14:2b:
                    c7:9e:d1:28:81:bc:e2:37:e9:8a:8f:4d:5f:3a:95:
                    11:36:8b:30:fe:0f:16:8c:21:9d:4b:b5:78:c2:64:
                    2f:45:73:3d:04:0a:af:3e:03:14:b0:fd:9c:e2:f0:
                    a5:b7:f9:bb:77:43:33:f6:e6:df:75:68:8f:d2:ed:
                    6d:4e:5b:19:8a:64:8c:6f:3b:26:c3:59:88:fb:48:
                    ff:e2:97:06:fe:74:f5:09:03:ea:8d:10:ff:df:a0:
                    b8:18:3d:35:35:b9:e1:f0:9d:a0:38:b8:76:e3:e1:
                    0c:11:9b:1c:8c:a3:b9:50:fc:d6:75:c5:16:8b:37:
                    98:13:a8:e2:22:ca:de:57:a2:85:57:27:68:06:2c:
                    b2:dc:90:b1:75:6a:98:e1:b2:dc:6f:3f:14:d1:42:
                    b5:6b:94:c1:85:b3:c7:05:1b:1f:eb:76:c5:02:3f:
                    20:59:30:cc:f7:5d:71:26:b9:54:e0:43:52:ff:bf:
                    50:86:59:fd:13:60:7c:27:cd:8b:7a:b0:aa:93:26:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:09:25:BE:2A:EB:6B:DD:B7:55:44:0E:37:35:8D:A7:A3:75:CF:7B
            X509v3 Authority Key Identifier:
                keyid:3B:3F:FF:71:E5:9F:35:06:3F:80:9F:C5:EB:3A:F4:C4:19:F7:BF:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:25:50:3c:44:e3:e2:06:40:4f:de:20:72:e5:2f:12:1b:
         2d:64:9f:ee:a7:ce:16:fd:29:81:10:6b:b1:48:c6:72:a5:10:
         6b:09:c1:11:2a:68:b3:fd:96:bb:c7:ce:8c:dd:0b:02:cd:3b:
         4b:86:39:ef:31:a2:ac:4e:9d:9c:df:78:96:0a:33:76:23:14:
         66:46:bd:08:54:40:13:98:38:3e:f1:c3:b0:1c:ae:31:7f:1d:
         4b:b7:61:2d:21:47:9f:1c:3f:de:63:90:0b:6e:cd:94:06:cc:
         e6:09:03:81:13:8a:9a:f7:a9:73:13:f7:ae:4b:f5:9a:9f:c8:
         ca:54:1f:ba:81:57:8a:70:d5:a8:86:5b:1a:1b:12:9e:a3:5e:
         8a:26:1c:46:04:62:5e:88:46:2e:5b:63:95:98:d7:f3:1d:5d:
         8b:b9:b8:fc:7b:ee:75:7f:93:63:54:e4:31:9f:cc:b7:3f:95:
         bb:31:65:69:3f:a0:43:81:e1:77:a5:e7:73:4f:94:ba:dd:78:
         fd:7b:8d:62:fb:3b:fb:eb:ca:40:3b:0f:e1:77:04:52:a4:12:
         f1:18:e5:5e:c7:bf:df:6b:c8:eb:25:7c:da:13:4e:88:b8:89:
         30:7d:59:f5:c3:62:1f:30:1f:8e:b5:c6:3c:5b:e5:44:23:e7:
         65:ee:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----