Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/84b6a3-e5d8-46ac-8a3b-fd264b40f809/1/42io9n1iqExdaTeWABhwTMd1j3Y.mft
File:                     42io9n1iqExdaTeWABhwTMd1j3Y.mft (raw, json)
Hash identifier:          vKqOjHFJjR2fMHuSqFK1IE7+qZmae4grdJ2tFfkvTzs=
Subject key identifier:   F1:80:99:1B:68:62:BA:BF:E3:36:DC:45:E2:8C:11:1D:40:BB:15:C4
Authority key identifier: E3:68:A8:F6:7D:62:A8:4C:5D:69:37:96:00:18:70:4C:C7:75:8F:76
Certificate issuer:       /CN=e368a8f67d62a84c5d6937960018704cc7758f76
Certificate serial:       01881E395BE6CE22B1421305B46D7AC75412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42io9n1iqExdaTeWABhwTMd1j3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/84b6a3-e5d8-46ac-8a3b-fd264b40f809/1/42io9n1iqExdaTeWABhwTMd1j3Y.mft
Manifest number:          0D82
Signing time:             Mon 15 May 2023 07:04:15 +0000
Manifest this update:     Mon 15 May 2023 07:04:15 +0000
Manifest next update:     Tue 16 May 2023 07:04:15 +0000
Files and hashes:         1: 42io9n1iqExdaTeWABhwTMd1j3Y.crl (hash: +lcUZS2cXaK2x4+WHlFncCGrme0jYd3AamKVoO6gvG8=)
                          2: uEapgFKEBQRMJGOyvODHkhnH8G4.roa (hash: iUJGNxC/E81C6nEEoc7abzxyDw3Z/grnq89QvbOuJVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1e:39:5b:e6:ce:22:b1:42:13:05:b4:6d:7a:c7:54:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e368a8f67d62a84c5d6937960018704cc7758f76
        Validity
            Not Before: May 15 07:04:15 2023 GMT
            Not After : May 16 07:04:15 2023 GMT
        Subject: CN=f180991b6862babfe336dc45e28c111d40bb15c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:38:15:7e:f9:16:32:15:38:6a:a4:97:08:
                    26:c6:ce:2c:00:df:48:21:81:16:f6:04:09:68:8b:
                    cc:e3:3c:bf:83:5e:eb:08:c6:69:90:4a:6b:7a:09:
                    64:99:ff:57:92:13:ac:5d:6d:17:c2:97:42:d3:4e:
                    76:93:ca:fc:a5:57:6d:72:5a:9c:2b:d7:9e:d7:da:
                    c6:ab:99:f4:92:c5:e5:ae:0d:b1:74:6d:e0:ed:89:
                    66:ee:e4:54:db:53:52:c5:74:79:d8:4d:15:bd:6a:
                    1f:0b:41:18:cc:ab:b6:34:a9:f3:05:83:24:1f:04:
                    d7:4d:a0:d0:d5:52:16:3b:a3:96:ad:cb:7e:cc:b1:
                    f0:8f:e6:49:7b:b7:1b:2c:04:e9:bc:3c:f8:06:8d:
                    ac:b8:75:af:35:6d:81:6f:95:e2:1f:63:d3:d3:c9:
                    78:9d:a1:8d:20:ef:76:3a:f5:09:9f:2a:d0:28:78:
                    0d:0d:82:fe:09:74:fb:d5:6a:c4:1c:f9:5a:64:df:
                    48:a3:3a:f8:71:b3:d8:5b:26:ca:f9:5c:c5:79:a1:
                    4e:e7:9b:51:59:eb:33:3c:c0:98:dc:6a:5b:99:9a:
                    07:e6:d2:04:35:7f:8a:78:cc:33:e2:da:b0:8d:e6:
                    db:6a:ac:7e:4b:5d:72:85:2d:9e:c0:23:0f:66:9a:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:80:99:1B:68:62:BA:BF:E3:36:DC:45:E2:8C:11:1D:40:BB:15:C4
            X509v3 Authority Key Identifier:
                keyid:E3:68:A8:F6:7D:62:A8:4C:5D:69:37:96:00:18:70:4C:C7:75:8F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42io9n1iqExdaTeWABhwTMd1j3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/84b6a3-e5d8-46ac-8a3b-fd264b40f809/1/42io9n1iqExdaTeWABhwTMd1j3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/84b6a3-e5d8-46ac-8a3b-fd264b40f809/1/42io9n1iqExdaTeWABhwTMd1j3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:66:d3:ba:00:3b:a6:f5:09:b8:94:b2:ef:4b:7c:5a:8c:48:
         6b:ed:65:38:03:e5:0e:9a:b3:91:c1:12:a6:0f:0f:67:9a:12:
         f4:17:cd:8e:8b:73:8b:08:00:58:46:33:68:e0:2f:dc:67:38:
         9c:ef:51:7f:e5:cc:c2:da:ec:19:a0:f0:34:a9:a9:a7:d2:81:
         c4:ce:91:e4:0b:c1:fc:ae:43:35:f8:c1:35:89:59:ba:9f:c2:
         e5:23:54:07:91:87:ac:80:95:5d:ad:aa:17:04:a1:b5:bf:e6:
         c6:30:1c:4b:03:47:a6:0c:c7:1c:41:a0:21:41:c1:96:05:a2:
         67:30:25:3f:02:76:4b:8e:60:51:fe:b1:60:6c:78:69:e4:e8:
         41:50:60:8d:2b:79:4b:d6:d4:52:8a:16:f5:5e:06:81:dd:1a:
         11:a7:8f:ab:45:5b:7a:05:f4:c3:0b:69:02:9b:31:61:64:1f:
         c7:7f:4f:ed:a5:a0:0c:cd:31:ae:76:6c:17:df:ca:d2:f9:30:
         49:9c:2c:73:f3:db:b3:02:90:35:ce:db:53:b0:30:66:f6:06:
         6f:61:af:16:96:c4:96:f3:37:9b:27:c9:ce:55:49:25:95:c0:
         40:0b:02:d2:cf:42:80:59:8c:49:85:a4:0d:8e:34:3e:7c:68:
         ec:2d:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----