Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1347bc-04b1-4f8c-81ce-a9466a2deb74/1/VGOtlilrq_8rXFxs226ifUYKRjE.mft
File:                     VGOtlilrq_8rXFxs226ifUYKRjE.mft (raw, json)
Hash identifier:          qxLIy7YL/0cOh9EDOUO940VTkC9JpLikpfEEzMyfS2s=
Subject key identifier:   C1:95:C5:84:8D:4D:E3:FF:88:95:EA:39:4C:BF:80:7A:CD:1D:0D:5A
Authority key identifier: 54:63:AD:96:29:6B:AB:FF:2B:5C:5C:6C:DB:6E:A2:7D:46:0A:46:31
Certificate issuer:       /CN=5463ad96296babff2b5c5c6cdb6ea27d460a4631
Certificate serial:       018A4161A6D9308F3C8E07C7BD8B893C1352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGOtlilrq_8rXFxs226ifUYKRjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1347bc-04b1-4f8c-81ce-a9466a2deb74/1/VGOtlilrq_8rXFxs226ifUYKRjE.mft
Manifest number:          7F
Signing time:             Tue 29 Aug 2023 13:00:33 +0000
Manifest this update:     Tue 29 Aug 2023 13:00:33 +0000
Manifest next update:     Wed 30 Aug 2023 13:00:33 +0000
Files and hashes:         1: M2eL90wYHBw-FD9SLFYhqlb-AE4.roa (hash: igpAu2d0ZuyHysxjpWtaiU8DwokyTgnR3vVus7IDeyQ=)
                          2: VGOtlilrq_8rXFxs226ifUYKRjE.crl (hash: wvuQ6zfLfgGg5B2nQBaMuWYFg//5ODqALurfM8W6LL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:41:61:a6:d9:30:8f:3c:8e:07:c7:bd:8b:89:3c:13:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5463ad96296babff2b5c5c6cdb6ea27d460a4631
        Validity
            Not Before: Aug 29 13:00:33 2023 GMT
            Not After : Aug 30 13:00:33 2023 GMT
        Subject: CN=c195c5848d4de3ff8895ea394cbf807acd1d0d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:11:29:31:ad:c5:79:b1:6d:1e:51:c0:13:
                    e3:7f:95:f8:5b:b3:52:2f:5c:e4:37:ad:a4:9f:43:
                    5e:b7:76:18:2c:50:49:96:4f:75:fa:8c:5d:a7:70:
                    74:ac:3c:3f:31:ef:3c:70:dd:2c:77:59:f0:45:0e:
                    02:ec:84:7c:25:ac:40:ec:20:5d:0f:d5:c5:f3:b1:
                    7f:dc:6a:d1:49:94:2b:15:3a:e4:54:a5:e6:09:39:
                    7f:6b:46:8e:27:e2:46:28:60:9a:8a:4c:9e:a4:96:
                    80:22:27:d3:52:b6:38:2a:90:5a:42:28:e8:a1:60:
                    53:76:c5:bd:fb:db:5b:c1:51:da:82:10:b7:3d:c5:
                    ff:02:e6:ae:37:d5:e0:c8:de:bb:f5:4f:60:64:a1:
                    bd:cc:f1:1d:49:03:c2:7f:ce:e7:ab:ff:f6:65:04:
                    33:14:c9:9a:e0:18:3c:f8:69:b6:e0:d6:d7:e3:6a:
                    7c:22:1e:84:87:72:3d:bc:b3:3a:c4:d5:70:03:23:
                    2a:ec:6c:a4:29:c5:69:55:85:29:bf:e2:51:91:61:
                    89:57:47:6f:aa:54:91:ce:d3:78:bc:13:07:1b:ee:
                    9f:93:88:6a:c0:83:3e:f0:b6:4f:5b:3b:2e:2f:db:
                    4b:84:77:57:0f:aa:d7:6c:1f:db:0d:1b:bc:2e:80:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:95:C5:84:8D:4D:E3:FF:88:95:EA:39:4C:BF:80:7A:CD:1D:0D:5A
            X509v3 Authority Key Identifier:
                keyid:54:63:AD:96:29:6B:AB:FF:2B:5C:5C:6C:DB:6E:A2:7D:46:0A:46:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGOtlilrq_8rXFxs226ifUYKRjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1347bc-04b1-4f8c-81ce-a9466a2deb74/1/VGOtlilrq_8rXFxs226ifUYKRjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1347bc-04b1-4f8c-81ce-a9466a2deb74/1/VGOtlilrq_8rXFxs226ifUYKRjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:31:46:ac:e6:f7:df:c4:2c:53:c1:e9:ca:b4:d1:a4:b8:9d:
         4a:95:42:d6:01:4c:90:1a:0f:20:39:e3:14:6e:29:cc:4f:a4:
         4e:e2:88:1a:09:cc:cb:4c:2f:55:4c:25:8b:98:c5:d5:73:3e:
         fd:81:8d:5d:0b:4c:28:d4:93:59:13:64:fc:b4:ac:bd:e7:37:
         e7:9f:34:80:b3:3d:df:c3:62:1f:c3:ca:fc:ef:db:99:3b:2a:
         25:c2:f7:92:33:b7:cf:c1:db:02:81:4e:ac:cf:a1:3a:8e:8c:
         04:3e:96:dd:1f:f6:9b:43:5a:89:eb:b7:f1:6c:d1:a2:31:c3:
         94:4a:78:42:96:f3:6d:ce:63:b3:ab:89:58:ff:be:72:0a:c2:
         be:de:89:ab:a8:c0:ea:d2:d6:9f:91:41:ca:a2:f5:f9:b1:52:
         68:8a:d4:bb:02:e8:94:37:d5:75:a4:87:bb:9d:c3:13:44:d9:
         4e:e5:1c:11:82:69:3a:76:98:fa:4a:5b:16:22:03:59:1f:60:
         fa:c9:a1:de:69:9a:b1:2b:25:20:c2:4e:d8:77:fa:79:23:6f:
         25:1b:dd:d4:76:52:b4:c5:03:86:b3:c2:be:59:15:cd:50:8d:
         49:cb:48:ea:4f:13:a2:30:da:58:17:b9:e9:23:df:58:40:d3:
         e0:24:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----