Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3ca17b-fad9-4904-81ea-c0859dd0929f/1/pNc7jt9X7hcnaXNKNeawmMrhL_s.mft
File:                     pNc7jt9X7hcnaXNKNeawmMrhL_s.mft (raw, json)
Hash identifier:          H2bwTbTy0ou8chDDhWfSv4narsBSSxzuS7+uun+CpeE=
Subject key identifier:   A6:B7:AF:C2:55:D2:35:68:33:82:90:47:ED:46:A1:6F:6F:EA:E2:3C
Authority key identifier: A4:D7:3B:8E:DF:57:EE:17:27:69:73:4A:35:E6:B0:98:CA:E1:2F:FB
Certificate issuer:       /CN=a4d73b8edf57ee172769734a35e6b098cae12ffb
Certificate serial:       018CAF3A35717CE664C21E36B9A1FD8F2B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNc7jt9X7hcnaXNKNeawmMrhL_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/3ca17b-fad9-4904-81ea-c0859dd0929f/1/pNc7jt9X7hcnaXNKNeawmMrhL_s.mft
Manifest number:          042D
Signing time:             Thu 28 Dec 2023 07:01:16 +0000
Manifest this update:     Thu 28 Dec 2023 07:01:16 +0000
Manifest next update:     Fri 29 Dec 2023 07:01:16 +0000
Files and hashes:         1: pNc7jt9X7hcnaXNKNeawmMrhL_s.crl (hash: 6h/fhUhoqpoiZ64sycl0Ts8XnW6uap1Dxlf9HDU5P6c=)
                          2: qwWwbjjyWsXnbutyTTRH1eHusIQ.roa (hash: L81/E6Pm0LtjFTdo5kLI43qHr9DYhq9fRkfeow1LHME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:af:3a:35:71:7c:e6:64:c2:1e:36:b9:a1:fd:8f:2b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4d73b8edf57ee172769734a35e6b098cae12ffb
        Validity
            Not Before: Dec 28 07:01:16 2023 GMT
            Not After : Dec 29 07:01:16 2023 GMT
        Subject: CN=a6b7afc255d2356833829047ed46a16f6feae23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:1a:2a:45:14:13:54:5d:ac:90:75:90:09:
                    3d:b8:0f:77:f9:a6:aa:8f:e6:44:5f:6a:95:44:e9:
                    92:0c:9e:2b:d1:3a:e1:06:fe:47:b5:bf:d3:b7:cf:
                    35:9a:73:3f:ef:d4:da:66:1e:d3:11:40:2c:af:96:
                    0b:87:fd:0c:17:4a:7d:35:2e:75:69:81:3c:85:ff:
                    8d:d4:73:10:8e:59:10:6d:92:f1:dd:74:5c:88:1e:
                    09:7a:17:f9:78:14:b8:07:8e:7f:9b:06:7f:47:37:
                    ac:ab:4c:65:a1:5d:fd:28:a1:c9:af:63:e4:2e:8a:
                    35:d7:6e:fe:c1:24:9f:9c:ce:d5:cc:60:79:4b:20:
                    06:10:63:b1:79:57:55:97:3d:40:c2:bb:f4:3f:b9:
                    12:1d:0d:65:46:a5:bc:f7:0f:01:af:5e:64:bd:2f:
                    41:73:0d:4d:38:0a:41:40:ee:ca:58:e3:fc:1d:28:
                    01:78:bc:ae:c6:39:45:83:4e:62:c7:4f:1b:d3:37:
                    e7:87:1f:ea:cc:1c:e3:de:97:fc:0b:d8:c5:48:92:
                    88:8b:73:ce:c0:62:04:f1:52:23:81:13:e8:20:3a:
                    7a:34:07:1e:07:15:1d:10:a2:36:89:5b:75:61:26:
                    95:c4:ce:ac:c2:45:da:fe:d2:64:e0:14:13:03:7f:
                    0f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B7:AF:C2:55:D2:35:68:33:82:90:47:ED:46:A1:6F:6F:EA:E2:3C
            X509v3 Authority Key Identifier:
                keyid:A4:D7:3B:8E:DF:57:EE:17:27:69:73:4A:35:E6:B0:98:CA:E1:2F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNc7jt9X7hcnaXNKNeawmMrhL_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3ca17b-fad9-4904-81ea-c0859dd0929f/1/pNc7jt9X7hcnaXNKNeawmMrhL_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3ca17b-fad9-4904-81ea-c0859dd0929f/1/pNc7jt9X7hcnaXNKNeawmMrhL_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:79:e5:f3:95:c3:50:03:b5:21:46:32:fb:c7:1f:3e:44:23:
         95:80:9a:5a:6a:9b:5c:5d:b7:b6:4a:84:21:70:3e:5e:be:c6:
         01:bd:ec:09:7e:57:e6:52:f7:e5:37:50:97:f0:6d:18:a4:c4:
         36:85:56:d9:39:26:bb:1e:38:17:61:b9:5f:a2:c2:f1:b9:50:
         b3:53:d9:f0:06:1a:02:7e:f1:4d:0e:4f:19:43:85:a8:ce:85:
         29:f6:bf:0d:25:bc:41:8d:17:b3:fd:f0:2f:44:1e:80:64:ef:
         5c:25:c7:6c:01:83:df:40:ea:8b:8f:2a:34:c5:49:97:1f:a6:
         24:51:fe:ae:7e:42:18:b0:b4:cd:72:41:ea:8b:ae:ea:4e:10:
         2c:46:7c:46:86:84:34:46:3b:29:0b:5a:96:05:5c:d3:a7:71:
         14:03:00:0b:4a:28:f1:d4:bf:1d:3d:19:00:f7:de:90:4a:ae:
         4a:68:c2:1b:67:9b:e8:94:ef:f2:e6:70:88:37:98:db:6d:b9:
         77:96:83:a4:f7:96:9b:fe:b7:39:98:45:a9:97:10:2a:9e:a9:
         3b:e2:f4:b5:20:97:f0:5d:4b:1f:35:6e:81:db:fd:20:e3:51:
         71:3f:e5:1f:6c:ef:5a:8b:fe:e9:2a:5c:59:67:bc:68:27:88:
         13:20:a6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----