Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4cbe10-98b3-40fc-b019-b24dc8f7c791/1/_rtW_D_vKnAsqJDURXSfD8VvwJk.mft
File:                     _rtW_D_vKnAsqJDURXSfD8VvwJk.mft (raw, json)
Hash identifier:          iZGwx5yXcR/W8MGamRyDWnaAC1iN3RLsn2PTe13TNlI=
Subject key identifier:   AB:0F:95:BA:E5:50:A7:0E:6E:1C:33:92:51:7A:D6:B3:7D:D4:97:AA
Authority key identifier: FE:BB:56:FC:3F:EF:2A:70:2C:A8:90:D4:45:74:9F:0F:C5:6F:C0:99
Certificate issuer:       /CN=febb56fc3fef2a702ca890d445749f0fc56fc099
Certificate serial:       0189FD9167CEC308601723D5EBEC086E1136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rtW_D_vKnAsqJDURXSfD8VvwJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4cbe10-98b3-40fc-b019-b24dc8f7c791/1/_rtW_D_vKnAsqJDURXSfD8VvwJk.mft
Manifest number:          0B6E
Signing time:             Wed 16 Aug 2023 08:58:32 +0000
Manifest this update:     Wed 16 Aug 2023 08:58:32 +0000
Manifest next update:     Thu 17 Aug 2023 08:58:32 +0000
Files and hashes:         1: _c2Rwt2AtANwEo8DGQ4x8Eggka8.roa (hash: G0H9Xv5kF5gY85E2lzXAHl2myER1+3s0AKtfpnc1bIc=)
                          2: _rtW_D_vKnAsqJDURXSfD8VvwJk.crl (hash: XP9j0H7Hu2ny0Qn8ML7v1DLXs/UcGIlV9uEfbdxsYQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fd:91:67:ce:c3:08:60:17:23:d5:eb:ec:08:6e:11:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febb56fc3fef2a702ca890d445749f0fc56fc099
        Validity
            Not Before: Aug 16 08:58:32 2023 GMT
            Not After : Aug 17 08:58:32 2023 GMT
        Subject: CN=ab0f95bae550a70e6e1c3392517ad6b37dd497aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:02:4c:dc:d2:47:57:a5:fe:b6:59:8d:f1:
                    2d:ed:0b:71:71:08:08:3b:cc:d1:fe:21:c2:f3:ec:
                    b7:07:d8:b7:f8:cd:97:c9:2b:10:e5:f3:fe:89:70:
                    e1:ca:d3:0d:a8:91:13:5c:2a:0a:d9:26:05:b3:a9:
                    e3:c2:48:44:18:cc:86:4c:a0:76:e2:62:f5:3c:12:
                    25:b9:fb:4f:71:ab:4d:fa:a3:ea:ae:57:b7:e5:1c:
                    3d:4b:d7:b1:a3:39:ce:12:dc:66:96:4a:c1:0d:0e:
                    3d:6a:5f:d3:ed:ac:a7:4b:47:a9:9e:5d:73:39:38:
                    9e:04:35:46:c3:2c:03:68:72:e8:bc:6b:c3:a0:86:
                    e2:69:cb:e5:73:be:4a:fc:cf:c5:ff:8e:52:22:0a:
                    db:ed:be:f5:d3:b0:8b:53:fc:98:1c:26:5a:d9:a4:
                    d8:96:81:3c:e6:38:ed:e0:7c:80:34:8d:25:48:db:
                    dc:14:f7:b5:e6:03:e7:3c:95:5e:ab:15:23:7e:9d:
                    3d:d9:9a:de:7d:2b:0d:8c:62:4e:40:39:9f:ac:44:
                    8c:5c:78:59:b8:6d:29:ed:19:ed:20:ee:05:4d:b4:
                    d2:3b:5f:95:28:a1:19:c0:ff:f1:ec:cd:35:5f:9a:
                    11:69:63:4e:78:1d:b8:5e:5f:5a:0b:86:17:80:48:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0F:95:BA:E5:50:A7:0E:6E:1C:33:92:51:7A:D6:B3:7D:D4:97:AA
            X509v3 Authority Key Identifier:
                keyid:FE:BB:56:FC:3F:EF:2A:70:2C:A8:90:D4:45:74:9F:0F:C5:6F:C0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rtW_D_vKnAsqJDURXSfD8VvwJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4cbe10-98b3-40fc-b019-b24dc8f7c791/1/_rtW_D_vKnAsqJDURXSfD8VvwJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4cbe10-98b3-40fc-b019-b24dc8f7c791/1/_rtW_D_vKnAsqJDURXSfD8VvwJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:16:c1:df:a7:c0:6c:da:ca:b8:5a:33:28:b0:24:e5:19:c1:
         f9:da:71:67:1e:a3:c5:09:b5:c6:a7:fb:06:f4:c1:88:60:63:
         c2:ce:ef:22:e8:14:de:ac:97:8c:74:62:42:44:4f:09:80:1b:
         ad:0c:77:7b:d5:78:82:f0:f7:3d:9b:a5:aa:c6:e7:2d:d1:38:
         36:b1:50:e2:33:0f:08:20:c3:00:47:07:71:eb:f7:b1:ae:a9:
         b0:04:81:d5:ad:28:30:78:e7:44:ef:91:ea:75:4e:7f:44:74:
         9e:3b:ad:a3:dc:bb:dc:f1:9c:cf:3f:3f:df:9a:89:2a:fe:c0:
         1d:c9:f4:76:c9:2b:4e:3b:be:fc:fb:59:d2:6d:16:48:6f:eb:
         b7:76:0f:45:67:1f:65:f4:9e:b8:2e:e0:e9:ea:67:54:61:0b:
         6f:4c:a2:32:61:7e:5b:ee:b2:6e:34:bb:3a:7d:58:8d:12:18:
         fa:79:5e:8a:a3:12:1b:e0:d8:85:fb:c3:d0:32:47:cd:ed:db:
         80:58:ef:1b:cc:29:45:a2:da:ca:90:d4:b5:c4:ea:29:60:20:
         f4:98:75:a0:de:94:33:1c:71:53:d3:af:17:79:af:41:74:97:
         4a:f4:2c:c8:da:9e:1c:90:23:fa:8e:3f:29:c1:d2:15:9a:51:
         9a:db:2f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----