Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/238408-55bb-45e2-bb7a-495428f9d101/1/3BdTxRGoFUYyZiTYMeAE0T80V4c.mft
File:                     3BdTxRGoFUYyZiTYMeAE0T80V4c.mft (raw, json)
Hash identifier:          J9WaCqYk5/6mfJr7QUEk91Vhqs+TSzioQFwFZhknSIE=
Subject key identifier:   7C:E4:24:A0:19:4A:99:03:3F:FF:E6:98:8F:3D:5B:1E:6E:9C:19:B3
Authority key identifier: DC:17:53:C5:11:A8:15:46:32:66:24:D8:31:E0:04:D1:3F:34:57:87
Certificate issuer:       /CN=dc1753c511a81546326624d831e004d13f345787
Certificate serial:       018649DF041D9C25DEB8E8F51E27B5961F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BdTxRGoFUYyZiTYMeAE0T80V4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/238408-55bb-45e2-bb7a-495428f9d101/1/3BdTxRGoFUYyZiTYMeAE0T80V4c.mft
Manifest number:          0C0C
Signing time:             Mon 13 Feb 2023 08:23:17 +0000
Manifest this update:     Mon 13 Feb 2023 08:23:17 +0000
Manifest next update:     Tue 14 Feb 2023 08:23:17 +0000
Files and hashes:         1: 3BdTxRGoFUYyZiTYMeAE0T80V4c.crl (hash: IgfGVdnwdTPoWUnYvbCJjyohm5ztJNymOZIQlEefHwo=)
                          2: EbVdsAjD8cjFdR0kJtpKjmrgsIw.roa (hash: GNvKL/zEXTQBsMaZC1jws4OboEmbjkqSjWAXxvW4TLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:49:df:04:1d:9c:25:de:b8:e8:f5:1e:27:b5:96:1f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1753c511a81546326624d831e004d13f345787
        Validity
            Not Before: Feb 13 08:23:17 2023 GMT
            Not After : Feb 14 08:23:17 2023 GMT
        Subject: CN=7ce424a0194a99033fffe6988f3d5b1e6e9c19b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:fa:55:08:a1:ec:d7:bb:a9:56:64:b3:59:
                    16:8e:82:f4:54:0d:96:15:6e:04:73:b0:d5:da:3b:
                    14:6c:c3:eb:9c:3e:5a:22:51:ac:89:29:cc:46:88:
                    8c:09:8d:7b:23:26:12:34:7c:3c:3c:d3:b7:fb:f4:
                    94:44:07:b9:bb:1e:de:3d:f2:24:f3:07:4d:69:bd:
                    60:01:1f:c4:3a:e2:e1:55:f3:40:3b:f1:ab:d2:db:
                    57:60:b9:06:87:8c:1a:eb:85:a2:c2:db:29:7d:cc:
                    62:bb:cc:fa:92:a9:bf:c5:2c:d3:a8:5d:d6:b0:10:
                    e3:cf:ff:98:95:ea:3f:79:6b:e8:2f:46:a8:4e:0a:
                    84:0d:16:02:eb:9f:7a:84:c3:e9:25:85:b1:cc:49:
                    d7:3a:54:63:9f:2e:90:fd:ab:74:74:92:d3:f7:93:
                    c9:24:27:06:5c:ab:83:27:2b:f0:e9:17:11:f3:60:
                    33:3f:5c:a8:77:7a:ae:c5:d3:ad:59:8f:8d:95:bf:
                    b4:51:51:17:c4:2e:1e:23:56:54:2a:d1:d1:bb:5f:
                    07:42:5e:84:c3:2c:d4:bd:66:ed:12:ee:c4:39:4f:
                    c8:b9:e0:82:0d:04:c1:13:6c:af:3c:74:29:83:86:
                    8f:9d:74:35:05:24:64:c8:8b:ad:cd:cf:dd:f6:87:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:24:A0:19:4A:99:03:3F:FF:E6:98:8F:3D:5B:1E:6E:9C:19:B3
            X509v3 Authority Key Identifier:
                keyid:DC:17:53:C5:11:A8:15:46:32:66:24:D8:31:E0:04:D1:3F:34:57:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BdTxRGoFUYyZiTYMeAE0T80V4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/238408-55bb-45e2-bb7a-495428f9d101/1/3BdTxRGoFUYyZiTYMeAE0T80V4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/238408-55bb-45e2-bb7a-495428f9d101/1/3BdTxRGoFUYyZiTYMeAE0T80V4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:22:56:23:3a:83:2e:9d:e0:61:c2:46:80:29:d1:5e:df:
         62:92:85:1f:78:e5:0f:03:39:56:b5:8b:ec:bb:5f:ca:7a:0b:
         82:c1:a9:a8:bf:8a:c0:e6:0d:ad:40:84:1a:02:72:cf:86:c9:
         32:64:21:84:34:9e:68:56:54:3d:ba:37:a1:d6:16:56:cd:d0:
         f3:a6:81:9c:a4:77:7b:9d:24:dd:ba:fb:5d:e3:d8:97:2d:89:
         22:73:40:4d:92:30:3e:6c:e0:f9:f6:a9:ad:7e:08:05:7b:ce:
         5c:7f:58:53:ee:ad:3c:10:c9:e0:98:65:4a:1b:db:19:2f:04:
         78:69:ab:5a:62:f8:86:cd:58:3a:7f:89:90:6a:64:4f:5b:48:
         28:b8:7e:cb:18:38:f7:ab:23:c3:aa:99:b6:5f:ef:a8:3a:40:
         15:4b:84:36:b2:b5:ce:f0:9b:10:79:56:98:13:be:8b:df:bf:
         eb:e5:21:18:47:b8:80:3e:13:af:55:42:20:92:6d:1c:93:a4:
         94:18:f7:8f:26:9a:c5:17:94:96:ec:98:7e:38:c6:74:90:c4:
         8e:cf:14:d9:df:05:30:8c:74:5e:44:87:4b:d3:53:c2:7a:1a:
         47:4f:7e:e8:ed:eb:4f:de:7d:3a:ed:70:c2:77:f1:7f:f8:ad:
         08:30:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----