Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.mft
File:                     xRhkSsRh3dLPS8WtXCtCYlNcOMg.mft (raw, json)
Hash identifier:          vmW6C93mDdM4BZZz+TJ0ljgRi6X6fKFSRszqwT6F/SU=
Subject key identifier:   16:96:5E:92:61:88:DA:F0:DD:44:C7:88:6D:EB:CE:2B:00:83:23:58
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Certificate issuer:       /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial:       018A1FDB19420F83744B75201B9309159910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.mft
Manifest number:          055D
Signing time:             Wed 23 Aug 2023 00:46:07 +0000
Manifest this update:     Wed 23 Aug 2023 00:46:07 +0000
Manifest next update:     Thu 24 Aug 2023 00:46:07 +0000
Files and hashes:         1: 2z6xkXbqv_ekGa4urD7tLYHp_WU.roa (hash: cih/LiMXO2nwHU+ROMdWyTr/X5GT5kWdEpR1MMI2ySE=)
                          2: RRTkYp_XL6-Kn2CVxHuTmrQ19uA.roa (hash: olDuXQqhplhe4c5ZI87vVcN+kAEXlaLA3sYNmrNmO0s=)
                          3: xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl (hash: sMS3pKcCfOvANcZ8azUsTGU85wsC4FPDh13/Qa6vjf0=)
                          4: zshCLPd0z986opUydVhy2kKw5a8.roa (hash: jCvkexa+/r7T1pQeFtoIuhPdczTc+NkPHxLgGUlR7ms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1f:db:19:42:0f:83:74:4b:75:20:1b:93:09:15:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
        Validity
            Not Before: Aug 23 00:46:07 2023 GMT
            Not After : Aug 24 00:46:07 2023 GMT
        Subject: CN=16965e926188daf0dd44c7886debce2b00832358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:ce:3a:4c:16:a4:de:5c:cc:51:dc:8e:91:
                    ba:39:a6:f2:a7:5c:dc:40:dc:d6:3c:af:fd:03:e6:
                    cd:75:62:55:ac:66:7a:73:f7:c7:5d:a6:ed:c2:a5:
                    a0:66:b4:64:ed:47:9f:d7:dd:d5:7c:aa:5f:d7:de:
                    ce:9a:ad:99:ed:47:ec:d7:5c:80:2d:0d:1e:2d:61:
                    80:21:ed:47:34:da:53:84:73:b4:c2:d0:6b:f2:de:
                    e7:f5:b5:e3:b4:58:90:b6:71:29:c6:d8:63:97:7f:
                    39:86:59:4e:9b:d7:9f:a5:af:8e:0b:7c:ae:51:c3:
                    db:2b:42:87:9d:a7:13:eb:fc:a0:ad:c6:98:fe:97:
                    de:cb:8e:95:3d:1c:61:12:29:d2:bc:f0:8f:12:76:
                    7b:73:27:1b:5f:f3:5a:cb:1c:71:dd:52:46:d5:08:
                    62:66:66:11:72:e1:9c:59:d3:7a:49:5d:92:98:95:
                    83:d1:bd:30:ea:b3:2b:01:72:f0:41:1e:8f:7f:c1:
                    c5:bb:a4:16:60:d7:00:4a:96:c1:8a:8b:45:0e:d1:
                    d3:c3:55:78:f4:94:3c:f3:18:77:c4:17:f0:d2:a4:
                    78:55:7e:32:de:0b:fe:f4:1d:17:16:73:53:7d:c2:
                    cb:71:58:57:3c:0d:63:1f:de:30:81:64:de:1f:71:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:5E:92:61:88:DA:F0:DD:44:C7:88:6D:EB:CE:2B:00:83:23:58
            X509v3 Authority Key Identifier:
                keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:86:ba:9f:ab:72:6b:88:26:86:46:70:16:ab:eb:40:34:e5:
         f1:23:cf:d7:2b:86:ff:d1:74:46:d7:f0:44:9d:5f:a5:56:74:
         62:eb:34:e1:83:1e:97:54:e0:0e:55:7f:78:73:2c:26:51:52:
         30:fe:1c:9d:89:b2:0f:1f:05:bb:d5:6f:c4:55:12:aa:54:f4:
         ac:0c:9d:34:7b:1d:95:d1:5c:f2:c4:ac:83:b7:af:94:79:5e:
         60:ef:77:43:15:44:1e:d3:1f:c5:0b:fe:2b:48:28:31:a3:43:
         f5:6d:8c:b9:f5:d5:f7:b2:2e:ad:ef:04:a6:33:b1:be:c2:bf:
         7e:44:1d:6d:62:e2:98:da:90:4a:6d:2f:2a:d8:b7:88:d4:14:
         bc:7e:2a:46:ba:19:18:45:e0:ba:c9:4e:fd:22:de:6d:3e:fd:
         85:48:43:8c:0b:38:e4:96:74:06:13:07:66:cc:66:a3:b9:df:
         17:fc:03:11:3f:51:77:44:5f:28:15:35:b0:cd:d3:7f:14:a6:
         60:1e:95:f1:2d:98:88:fd:30:c2:b4:3d:b0:c6:e4:a8:ec:50:
         fd:74:e9:87:1b:87:e7:bc:d7:2d:4a:6c:62:f8:40:24:ac:9d:
         24:10:45:3c:cf:58:56:99:61:fd:75:12:a3:32:9f:24:51:7a:
         7a:3f:ce:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----