Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ea1aa8-1cfc-488f-a4c4-fe95a3288395/1/CV44rxGx-4PtLzMeCd9yq0cXlOM.mft
File:                     CV44rxGx-4PtLzMeCd9yq0cXlOM.mft (raw, json)
Hash identifier:          U9I7SLRlzmo/ubzcmRYtNjhd9ouKI4a/C0TPuaKDpEM=
Subject key identifier:   49:A2:7B:00:89:35:85:DA:B1:36:83:7E:69:9C:86:CD:9F:7E:71:FA
Authority key identifier: 09:5E:38:AF:11:B1:FB:83:ED:2F:33:1E:09:DF:72:AB:47:17:94:E3
Certificate issuer:       /CN=095e38af11b1fb83ed2f331e09df72ab471794e3
Certificate serial:       01867DA9D95EA5DDE8E5491D53741B27FB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CV44rxGx-4PtLzMeCd9yq0cXlOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ea1aa8-1cfc-488f-a4c4-fe95a3288395/1/CV44rxGx-4PtLzMeCd9yq0cXlOM.mft
Manifest number:          013C
Signing time:             Thu 23 Feb 2023 09:45:28 +0000
Manifest this update:     Thu 23 Feb 2023 09:45:28 +0000
Manifest next update:     Fri 24 Feb 2023 09:45:28 +0000
Files and hashes:         1: CV44rxGx-4PtLzMeCd9yq0cXlOM.crl (hash: tUjn5nvXxPU5Bk3MLzE+MiV5g2zSFnz3ySiZ7WbuM3c=)
                          2: voHRK8-7WDGR_Xe3dM1ckL5YHFQ.roa (hash: UC+MMxPBBxMGWvz/B498RjW0k2b6TlYticVeLyiYe+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7d:a9:d9:5e:a5:dd:e8:e5:49:1d:53:74:1b:27:fb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095e38af11b1fb83ed2f331e09df72ab471794e3
        Validity
            Not Before: Feb 23 09:45:28 2023 GMT
            Not After : Feb 24 09:45:28 2023 GMT
        Subject: CN=49a27b00893585dab136837e699c86cd9f7e71fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:89:4d:93:e4:9b:e4:69:c3:71:32:fc:e8:
                    f2:f7:19:da:ad:41:25:3e:2d:5d:f7:cc:02:d2:4d:
                    f0:e7:88:eb:fc:6f:94:50:80:08:5d:32:62:21:87:
                    c5:6e:38:22:60:a6:9b:6e:98:db:73:ee:48:07:23:
                    85:8f:b2:db:dd:cf:82:65:46:96:e5:cb:bc:ac:f3:
                    4f:6a:93:52:a1:07:79:c8:cc:c0:c4:94:25:ae:9f:
                    77:4a:ef:5c:56:c9:82:24:b5:46:86:ff:1b:58:41:
                    e7:2e:4f:36:c4:64:64:cd:4e:bb:65:dd:28:37:6c:
                    9f:0a:df:0b:e8:7e:22:f0:27:dd:68:40:25:96:a0:
                    d6:f7:7c:a8:31:de:91:77:36:12:88:04:1b:5f:97:
                    8e:4b:1a:cc:c1:86:db:6a:38:2e:b0:27:86:68:58:
                    f6:4d:88:3c:6f:32:f7:5f:1b:46:88:ce:c6:59:eb:
                    7a:af:bb:2b:cb:80:b5:97:76:64:b2:14:4d:e6:75:
                    e8:54:1d:f4:24:06:10:e2:d1:36:3d:d0:a7:b2:08:
                    a2:31:33:05:8e:4d:72:ab:d2:58:4b:40:96:06:b2:
                    e9:a8:5e:78:b6:96:1a:c9:d8:47:5b:02:58:31:88:
                    4f:75:21:a0:4a:ac:f0:c6:ee:e3:b5:cc:71:17:1f:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:7B:00:89:35:85:DA:B1:36:83:7E:69:9C:86:CD:9F:7E:71:FA
            X509v3 Authority Key Identifier:
                keyid:09:5E:38:AF:11:B1:FB:83:ED:2F:33:1E:09:DF:72:AB:47:17:94:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV44rxGx-4PtLzMeCd9yq0cXlOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ea1aa8-1cfc-488f-a4c4-fe95a3288395/1/CV44rxGx-4PtLzMeCd9yq0cXlOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ea1aa8-1cfc-488f-a4c4-fe95a3288395/1/CV44rxGx-4PtLzMeCd9yq0cXlOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:66:f0:19:d4:9f:58:e7:cf:15:82:89:90:1b:20:5c:a9:
         58:64:af:4a:4c:7d:e8:a1:9f:ce:88:bd:92:a0:63:ff:7d:fc:
         f0:39:18:98:81:be:00:3b:26:62:be:cb:7d:33:28:27:71:da:
         11:a4:27:a4:23:22:7b:98:98:e6:15:70:aa:b3:83:aa:81:2f:
         01:0e:26:81:0d:60:0e:b6:f0:82:99:7d:03:af:ea:f7:e3:a5:
         38:75:3e:32:7b:6e:88:b1:8e:78:5d:b6:21:c1:6f:57:70:fe:
         5d:23:d6:a2:1f:f6:81:dd:03:0d:7f:98:2d:c7:fb:d6:46:cb:
         31:5a:d8:d9:e9:66:ab:0d:8f:8b:fd:19:d6:15:99:ab:6d:d0:
         a1:e4:e4:db:27:33:b5:61:82:0d:4c:3d:e1:38:b1:79:c4:c8:
         6c:13:46:3f:fb:a1:78:81:b1:fd:9b:88:35:34:87:df:b4:65:
         f2:eb:a0:e3:87:48:25:a5:df:7c:85:f5:44:71:9a:ec:d1:40:
         fc:21:35:69:71:40:c0:65:75:6b:75:32:35:47:7c:7c:4e:7c:
         5c:9e:2a:c5:ed:e8:81:5a:11:58:49:de:c2:54:e0:ad:54:b1:
         90:a9:5d:61:2a:d2:ba:60:86:ac:85:db:f5:96:0d:c2:36:e6:
         85:0f:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----