Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/hFLucyd_OdJICXRrcmImGCm43-U.mft
File:                     hFLucyd_OdJICXRrcmImGCm43-U.mft (raw, json)
Hash identifier:          8WTgNwk4pvDCTQNZoUjkCNZ/3Y3Ca3/Z6BjH2jyo0Rs=
Subject key identifier:   F1:AA:ED:DA:09:BC:16:3F:C0:07:91:56:3D:B6:23:83:5A:0F:66:53
Authority key identifier: 84:52:EE:73:27:7F:39:D2:48:09:74:6B:72:62:26:18:29:B8:DF:E5
Certificate issuer:       /CN=8452ee73277f39d24809746b7262261829b8dfe5
Certificate serial:       018A63EDD33393F5301953340675E932446A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFLucyd_OdJICXRrcmImGCm43-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/hFLucyd_OdJICXRrcmImGCm43-U.mft
Manifest number:          0864
Signing time:             Tue 05 Sep 2023 06:00:44 +0000
Manifest this update:     Tue 05 Sep 2023 06:00:44 +0000
Manifest next update:     Wed 06 Sep 2023 06:00:44 +0000
Files and hashes:         1: ZFoGJBJ-aP0YJRGUxaegvEAOzc0.roa (hash: wykYQVDgBVYzlbzLdlT9hsJ7plIvkhEb6GF2n1H77so=)
                          2: hFLucyd_OdJICXRrcmImGCm43-U.crl (hash: k5Dw0M11aDDI2dqVwgvJFm/gwK5kzwe+4IFwWNZzgs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:63:ed:d3:33:93:f5:30:19:53:34:06:75:e9:32:44:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8452ee73277f39d24809746b7262261829b8dfe5
        Validity
            Not Before: Sep  5 06:00:44 2023 GMT
            Not After : Sep  6 06:00:44 2023 GMT
        Subject: CN=f1aaedda09bc163fc00791563db623835a0f6653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:07:1b:18:fc:de:a6:e8:47:e9:6e:0a:9c:
                    40:48:31:8c:78:52:82:db:7c:31:39:13:d0:5e:df:
                    8a:dc:35:34:fe:d4:f2:46:6a:d6:d1:f3:23:ae:86:
                    24:6a:88:52:63:c5:8d:33:c4:ea:5d:07:34:bb:0f:
                    59:a6:f3:ff:0e:9d:24:51:f6:bf:65:59:d3:fa:0a:
                    bb:24:c1:53:45:bf:f3:b9:5a:cf:e2:6b:dd:cd:2c:
                    ac:38:d8:ff:9b:1d:76:79:e4:6b:4e:77:4d:79:8e:
                    99:d5:a0:27:a9:19:06:92:9a:07:3a:82:e0:61:7b:
                    d1:d4:4e:7f:bc:00:c4:4e:34:db:67:af:08:1b:ae:
                    af:b4:3f:97:4d:a2:83:6a:11:a8:22:0a:c8:87:51:
                    b0:88:04:3e:dd:30:24:5c:2b:6f:ea:5f:5c:25:0e:
                    69:da:49:15:18:13:24:7b:e0:08:1e:6f:fb:c9:22:
                    6e:aa:9d:08:25:31:51:65:bd:35:4a:49:1e:7b:ac:
                    6c:b6:e1:c8:3d:84:5c:ff:27:62:87:00:63:34:74:
                    72:fa:f6:9d:70:e8:1e:c2:34:dc:d7:5e:d5:b7:e6:
                    29:34:ce:e0:a5:1a:82:d9:85:86:87:1d:0f:68:9a:
                    45:30:46:06:29:f6:79:a7:6b:b4:b5:20:4c:e1:b7:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AA:ED:DA:09:BC:16:3F:C0:07:91:56:3D:B6:23:83:5A:0F:66:53
            X509v3 Authority Key Identifier:
                keyid:84:52:EE:73:27:7F:39:D2:48:09:74:6B:72:62:26:18:29:B8:DF:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFLucyd_OdJICXRrcmImGCm43-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/hFLucyd_OdJICXRrcmImGCm43-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/hFLucyd_OdJICXRrcmImGCm43-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7c:af:0a:35:f8:b6:1b:be:87:0a:34:ed:65:71:d5:a0:33:
         6e:42:3b:85:1a:a2:e5:eb:93:2e:57:d3:fe:a4:09:51:66:2a:
         18:f3:4b:99:4b:60:36:4a:c1:ab:fe:60:40:88:9b:ff:06:21:
         b4:26:8f:de:74:46:07:1a:c4:c9:84:86:7c:14:fd:7e:4b:05:
         68:06:6c:68:dc:e1:e5:f3:8c:5e:78:1f:00:22:76:f8:5f:ed:
         e3:9a:1a:29:dd:5e:67:45:2e:18:9e:14:02:49:2a:0d:b0:72:
         e4:c4:28:c0:3c:ce:89:fb:dd:59:cb:cf:10:52:f5:6a:52:63:
         64:62:70:59:e0:ec:c3:5c:b3:36:b1:18:d1:f3:f8:03:39:dd:
         a9:7c:39:72:7e:97:5c:0c:c4:38:21:6a:27:6a:19:db:57:41:
         8a:80:bc:4c:8c:e1:26:05:9b:40:8d:78:2e:60:f7:6c:c4:b9:
         a6:41:cb:33:77:07:64:5c:0f:3f:35:2f:d5:df:3f:3d:20:83:
         eb:e6:92:61:32:9c:7d:26:cc:36:e9:91:5b:9b:25:68:31:37:
         fc:e8:d8:f8:7e:aa:08:d4:c7:9b:4b:f8:36:10:47:9c:00:62:
         a1:65:2e:45:38:80:1f:1e:fa:d3:35:ad:e8:75:e3:e6:06:aa:
         f8:dc:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----