Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.mft
File:                     Q5J9yZixEB4Wx45bNrEwe_Jci6o.mft (raw, json)
Hash identifier:          XjhfVKklGEI5mQyGpdsACOCxRB+Khz0FmvffHBO0wQg=
Subject key identifier:   38:D3:9A:12:D0:33:53:FF:64:DC:C9:40:CF:02:55:46:72:43:EB:B1
Authority key identifier: 43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
Certificate issuer:       /CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Certificate serial:       0187544AB738692009E3B7D458B6A2B5E478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.mft
Manifest number:          0D12
Signing time:             Thu 06 Apr 2023 01:59:55 +0000
Manifest this update:     Thu 06 Apr 2023 01:59:55 +0000
Manifest next update:     Fri 07 Apr 2023 01:59:55 +0000
Files and hashes:         1: Q5J9yZixEB4Wx45bNrEwe_Jci6o.crl (hash: Mn9UZGL4+bjr52J6LVt48X9rDZDJVoeFmCwtjtyrE0U=)
                          2: wJb7aVdMEjBu3t4nawVnxO6ubiw.roa (hash: o22ctUDFcgycb3aVDgRzW1UPs8jQnrbw1nftV1gojMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:54:4a:b7:38:69:20:09:e3:b7:d4:58:b6:a2:b5:e4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
        Validity
            Not Before: Apr  6 01:59:55 2023 GMT
            Not After : Apr  7 01:59:55 2023 GMT
        Subject: CN=38d39a12d03353ff64dcc940cf0255467243ebb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:a4:03:74:7c:f9:b0:1e:ba:d7:0c:b6:7e:
                    4f:2e:ae:09:1e:81:18:87:db:7a:17:8c:de:b4:5f:
                    71:30:db:5c:17:22:49:c0:0e:ef:a8:1f:87:88:ab:
                    a5:0f:57:80:58:77:f5:ce:ff:a4:68:14:1c:55:d0:
                    83:9a:3a:1b:9b:d6:85:56:b5:ea:08:f4:f4:a9:c6:
                    e5:73:14:24:97:2f:b6:b6:89:07:27:1d:16:ac:18:
                    3a:38:b4:36:2a:31:e3:f5:2d:19:74:d1:72:e3:32:
                    87:3a:43:4b:fe:e9:50:8b:26:9c:4e:37:b2:b9:43:
                    56:75:ef:5d:20:e8:9e:75:29:d1:0b:3d:2f:94:30:
                    8c:6e:f4:2e:ec:f0:64:9d:71:a2:e7:c1:bd:49:af:
                    55:63:79:de:74:4f:13:c6:66:14:48:e3:85:17:94:
                    c8:fc:33:b7:56:25:3d:0b:e5:8b:28:3c:5f:af:4b:
                    81:93:0e:45:3e:b0:c0:79:1e:ba:f1:16:fd:cb:97:
                    8b:01:62:64:cf:e7:5e:93:45:b0:1a:1b:61:2c:54:
                    c9:94:af:45:0e:9e:a5:06:80:17:f1:9b:fa:c1:55:
                    1b:fe:24:bb:ec:83:b6:09:17:2a:69:b9:a7:7e:58:
                    99:74:93:a9:6d:e2:54:4f:5e:eb:a3:6d:9a:21:cf:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:9A:12:D0:33:53:FF:64:DC:C9:40:CF:02:55:46:72:43:EB:B1
            X509v3 Authority Key Identifier:
                keyid:43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4f:65:35:20:e2:b7:54:3e:e3:f6:04:1f:fe:3b:54:fb:ff:
         23:6b:cb:7a:d9:f6:69:6f:44:19:15:fb:4b:be:27:56:3f:c9:
         0e:2a:ee:74:3f:bb:c8:7c:43:eb:29:d0:fe:94:d3:d0:a0:44:
         07:56:ee:91:06:cd:d1:f7:5c:9c:3f:77:cb:7d:8a:e0:53:e5:
         38:2a:c1:bf:a9:40:1f:79:8c:15:ce:cb:91:40:39:2b:94:bc:
         8a:dc:d1:b0:92:6a:08:b9:28:f8:56:a8:9e:5e:50:91:90:56:
         89:23:18:38:d7:8d:27:8f:d7:eb:32:fb:b2:3c:47:cc:89:ae:
         4f:d5:40:41:36:85:70:0b:d7:f4:f1:0e:a1:3c:a6:83:56:c9:
         e8:17:fc:1b:3b:70:fe:6b:1c:c8:d5:86:98:05:45:5e:e0:85:
         53:4d:f9:f8:3b:7b:b1:ef:95:b9:33:3e:ed:69:3c:f4:9f:0f:
         98:b1:b0:44:ea:97:ca:27:34:e3:dd:ac:23:a5:f5:e4:40:04:
         2e:34:36:47:2d:4a:63:39:e0:f8:37:96:8f:ca:c8:04:d9:eb:
         3f:81:21:42:02:9a:98:b0:4e:c1:50:ab:4b:d5:37:38:00:03:
         06:bb:ad:81:b5:68:9a:3d:28:b6:d9:61:7f:10:81:9e:a6:00:
         c5:be:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----