Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.mft
File:                     WzTfYRNMCrlEWmzLs-xj6vD6AlU.mft (raw, json)
Hash identifier:          ZGg6HLLLwejLBW/e/6MYvn87WsOm41jG15n/TssHM/Y=
Subject key identifier:   80:44:34:0D:C7:BD:F2:60:36:2B:CC:4A:99:0A:1B:96:C3:41:F9:3B
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Certificate issuer:       /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial:       0187DBFFDAC8592F6CFD102C3FE70CA2E5AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.mft
Manifest number:          0CC4
Signing time:             Tue 02 May 2023 10:26:30 +0000
Manifest this update:     Tue 02 May 2023 10:26:30 +0000
Manifest next update:     Wed 03 May 2023 10:26:30 +0000
Files and hashes:         1: 8C93CFxS7X11mlpfGFw23hILBV4.roa (hash: OaJf+YaRZZfYdm91NUXkvorv/sIlkaYV1TVTC2tWg+w=)
                          2: UnM07P6UUOTXqln_yEn4PlSWGUo.roa (hash: Y9pFH0y5MlXxgb8kAN3kC4pKeTDt+FQxsLWIQ4eeb2E=)
                          3: WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl (hash: uWv5B2Nsg9ZZ5JCi40M97Ywk2ftkaiTMGVa8tVXYeF0=)
                          4: sqgH8inQ1vCy_Vff5X_xtHppVeg.roa (hash: loDhxKNcB2eJ0wsJBztCmaOwbNCyJ97VJyqruZ/Toic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:db:ff:da:c8:59:2f:6c:fd:10:2c:3f:e7:0c:a2:e5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
        Validity
            Not Before: May  2 10:26:30 2023 GMT
            Not After : May  3 10:26:30 2023 GMT
        Subject: CN=8044340dc7bdf260362bcc4a990a1b96c341f93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:e7:e2:e3:16:a8:d7:92:44:d5:df:1d:5c:
                    94:a4:83:63:3e:fa:a4:a5:73:10:24:ae:6a:1a:84:
                    a9:0a:6a:cb:ab:76:61:02:74:5e:82:b9:f7:e8:20:
                    75:38:a2:7e:ca:8e:be:31:8e:9b:c7:5a:4b:e2:6e:
                    12:b0:84:01:e8:6f:0e:b3:26:c2:c1:74:df:31:80:
                    44:1a:77:48:a5:9a:04:cf:ae:5c:e7:ef:08:ae:78:
                    c0:ab:79:fc:82:d7:38:a8:b7:e1:6a:10:e5:fe:91:
                    dd:fc:79:31:a2:b7:26:4f:06:80:a2:6d:b5:21:b2:
                    27:81:0e:83:f6:7b:15:c7:84:27:5e:f6:bc:40:df:
                    2d:4d:92:57:40:23:ee:04:64:77:d5:47:90:b8:a6:
                    c1:94:41:84:14:22:ef:47:02:1b:97:cf:4e:2e:20:
                    20:8e:53:97:4d:15:eb:44:64:02:f8:fb:9a:3f:35:
                    f8:50:fe:34:c6:61:77:0e:12:72:3a:56:a8:a2:5b:
                    2d:1f:f0:11:0d:7b:7f:0c:44:8b:6a:45:35:75:e2:
                    9b:38:c3:b1:25:62:7f:66:7f:8f:ef:c0:18:52:32:
                    3d:8c:a7:97:9c:a6:cc:7f:fb:97:40:dc:82:74:27:
                    bd:7e:3e:7a:db:91:5c:d1:4f:6e:cb:6a:8e:b5:37:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:44:34:0D:C7:BD:F2:60:36:2B:CC:4A:99:0A:1B:96:C3:41:F9:3B
            X509v3 Authority Key Identifier:
                keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fe:09:48:c8:ab:c5:a2:7c:e6:b7:51:1d:d5:23:38:00:e5:
         46:30:2f:a6:f5:38:37:f0:24:63:f5:8b:02:16:0f:c1:26:5d:
         08:02:be:35:6a:7a:ce:71:95:ce:95:08:ed:b7:d1:ef:54:55:
         5b:ec:07:c1:81:10:37:44:93:46:61:f3:0f:31:67:d1:32:61:
         98:f1:ff:44:8e:d2:3d:cc:ab:cd:26:f0:38:93:9a:64:48:3b:
         15:df:33:bd:9c:74:f9:be:e5:06:d7:1c:f8:27:b2:df:c0:83:
         d8:16:f5:a7:39:75:e9:41:20:ac:47:7f:55:ea:1e:5a:9f:7b:
         63:7d:17:f5:41:14:5a:f6:bb:29:1d:09:c0:65:17:a8:ae:33:
         b9:2d:d9:c7:0c:63:d4:f1:16:7b:0b:dd:02:e0:9e:03:3c:69:
         95:18:c5:63:ad:93:58:74:9b:9a:e3:74:d5:f0:09:b1:15:c9:
         bd:08:26:b6:ea:c4:10:17:bc:11:3d:0c:6d:78:8c:b9:e3:8e:
         4b:78:13:36:a6:3f:21:ab:1e:cd:c4:40:27:2c:10:a3:31:be:
         88:bc:25:45:ce:53:2f:2f:ba:fe:32:b6:eb:9a:cf:38:f0:e5:
         2c:c5:c1:4c:44:24:b5:45:41:4d:d9:3f:c7:a2:cb:ec:24:6a:
         b7:e5:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----