Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft
File:                     4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft (raw, json)
Hash identifier:          uIlaUYrGUnhGfN5nUeSMXrCIMLCkiGVP3Gi4/IG8ZZU=
Subject key identifier:   B6:B6:34:70:F1:2E:07:B9:95:43:9D:8B:6F:8B:F7:36:AA:36:C6:5B
Authority key identifier: E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
Certificate issuer:       /CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
Certificate serial:       0188E692CC4B46EEBB2B750F8B4091933279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft
Manifest number:          0DF7
Signing time:             Fri 23 Jun 2023 04:46:00 +0000
Manifest this update:     Fri 23 Jun 2023 04:46:00 +0000
Manifest next update:     Sat 24 Jun 2023 04:46:00 +0000
Files and hashes:         1: 4Uqaxyzosoq2NJ2tB19O7D3LhH0.crl (hash: RBtNz/Vhe5lvO1aLnu3GoluvOUJauo70QSYbjbM0cS0=)
                          2: dVUChmjEOY0ib68ccijGM9A8JcM.roa (hash: nnE0yoogmTw4KcP2Z0nOvyefiIkmKzIon8cnkGvLczg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e6:92:cc:4b:46:ee:bb:2b:75:0f:8b:40:91:93:32:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
        Validity
            Not Before: Jun 23 04:46:00 2023 GMT
            Not After : Jun 24 04:46:00 2023 GMT
        Subject: CN=b6b63470f12e07b995439d8b6f8bf736aa36c65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:a5:5f:67:69:ad:ae:71:b0:c5:4d:6c:47:
                    dc:24:aa:de:13:08:3a:5e:bd:3c:52:6f:ca:80:87:
                    79:52:f2:f7:61:1f:5d:74:3e:e4:11:00:ef:1f:31:
                    39:8a:d0:01:19:59:0c:a6:db:78:18:20:0c:9d:da:
                    46:a9:c8:75:87:d1:a6:fe:c4:37:de:18:6b:c4:06:
                    ee:a5:61:7a:f6:3b:80:e9:04:d9:e0:de:fc:d1:5d:
                    be:21:57:52:97:21:9d:5e:ab:cb:f1:e9:14:d5:bb:
                    5c:1d:9b:4d:0c:1e:cf:77:02:2d:62:f6:3a:b6:d4:
                    65:c4:3b:1a:b5:85:c8:9b:61:9e:4b:4a:f2:c1:b8:
                    d0:0a:32:f8:94:bb:72:bf:39:14:b2:f8:7a:0b:dd:
                    28:8a:99:5e:04:72:2f:56:28:61:77:d9:ec:d0:91:
                    ae:ca:f0:35:95:2e:f7:33:ce:78:8c:34:8f:fb:f5:
                    0a:6b:7f:31:e6:82:71:72:08:48:26:cf:b1:de:7b:
                    f0:36:7c:15:37:67:81:a1:ed:f5:04:25:37:a7:29:
                    49:4f:bb:8e:f2:85:ed:29:a5:97:89:46:5a:46:58:
                    e7:e7:11:d9:78:31:5c:a4:ae:ce:06:bc:1b:e1:50:
                    b1:5f:4a:09:7d:26:f4:7c:1d:e0:fd:7e:d4:7e:cb:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B6:34:70:F1:2E:07:B9:95:43:9D:8B:6F:8B:F7:36:AA:36:C6:5B
            X509v3 Authority Key Identifier:
                keyid:E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:0b:ed:8b:69:06:f6:e7:01:80:56:ce:85:7f:10:1f:b6:
         bc:5b:f2:e2:fe:49:c6:13:64:d0:56:92:41:fc:72:c4:a1:dc:
         e0:fe:d1:d5:52:36:3a:c2:df:88:75:00:6f:00:5f:20:89:4c:
         e6:e6:4b:07:29:2e:6d:8f:78:48:bb:b6:a3:33:a8:57:f3:fe:
         81:ad:33:7c:bf:8b:25:d4:4a:ff:e7:d4:86:a0:f4:0d:b1:78:
         4b:c0:4a:9c:46:cd:22:d7:57:17:47:ad:c3:38:05:00:6c:59:
         d0:ee:b5:b7:b1:e6:a9:78:8d:d7:17:f0:68:60:f1:62:99:02:
         77:8c:9d:da:5b:02:c4:bf:e2:0b:d6:4e:42:40:fc:70:b4:ce:
         50:57:fc:25:18:14:2e:14:d5:79:4f:dc:06:8a:72:d4:1a:0f:
         20:a0:50:63:ff:be:7f:05:86:d6:13:14:b6:dd:a5:a2:39:f5:
         59:d0:c7:13:0a:39:cd:39:46:67:6e:6b:45:3d:05:07:25:a7:
         40:f9:97:d0:44:f1:0a:5b:38:b5:ae:60:82:22:4f:ca:8a:63:
         9b:ce:0b:d3:52:e0:b0:41:e7:69:02:43:49:7b:ce:a8:39:fd:
         b7:27:46:41:14:ec:70:98:57:41:f4:e4:fc:55:cf:77:9e:6a:
         e9:07:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----