Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0be3df-6080-4655-b238-6576f5901455/1/UE0SCxwgmEns-a5RevgaroHRaLc.mft
File:                     UE0SCxwgmEns-a5RevgaroHRaLc.mft (raw, json)
Hash identifier:          Oluh02dLo6R7U1VYKrTjnyVBoOVczdhjlfLWJJlxs0U=
Subject key identifier:   DF:00:0B:96:AC:CB:98:10:6F:26:D7:CA:78:42:09:66:44:77:36:56
Authority key identifier: 50:4D:12:0B:1C:20:98:49:EC:F9:AE:51:7A:F8:1A:AE:81:D1:68:B7
Certificate issuer:       /CN=504d120b1c209849ecf9ae517af81aae81d168b7
Certificate serial:       018BCBFD6F43E8D13E16DD634FA4154F8268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UE0SCxwgmEns-a5RevgaroHRaLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/0be3df-6080-4655-b238-6576f5901455/1/UE0SCxwgmEns-a5RevgaroHRaLc.mft
Manifest number:          0705
Signing time:             Tue 14 Nov 2023 04:01:05 +0000
Manifest this update:     Tue 14 Nov 2023 04:01:05 +0000
Manifest next update:     Wed 15 Nov 2023 04:01:05 +0000
Files and hashes:         1: SYP6RasbddTS1w7o9Y8DQ466utg.roa (hash: wWbawUZhKFeBD0AWdfCB0p4yiJAoi47VkEMhLJfHiL4=)
                          2: UE0SCxwgmEns-a5RevgaroHRaLc.crl (hash: 7zj2ZaqyAu4ka19t7FdI1Q1mkVln2UyGa0hwDM045wA=)
                          3: iT8k2TPtWMTnBqaFmR1KyJSwUEU.roa (hash: I69dxf4pGecMOe3K78qN14yUaSRgEKzv6keebdW9FK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cb:fd:6f:43:e8:d1:3e:16:dd:63:4f:a4:15:4f:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=504d120b1c209849ecf9ae517af81aae81d168b7
        Validity
            Not Before: Nov 14 04:01:05 2023 GMT
            Not After : Nov 15 04:01:05 2023 GMT
        Subject: CN=df000b96accb98106f26d7ca7842096644773656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:ec:e7:d3:b3:f7:ba:88:45:83:31:88:bf:
                    44:56:de:a5:65:19:70:39:a8:00:59:3b:8a:17:67:
                    ba:f8:65:d4:39:a2:2b:9a:4b:4c:db:66:35:d4:ff:
                    e9:b3:c2:4f:ad:71:be:3a:11:f9:89:55:48:ad:46:
                    12:05:71:0c:0d:9c:1f:42:87:98:e3:e3:6d:8f:15:
                    d3:d6:11:4b:99:64:87:8b:80:6d:e8:80:d5:00:d4:
                    ca:7e:a0:d9:1c:a2:a4:74:85:76:71:7e:02:48:a0:
                    a0:ed:0a:9b:c2:1c:72:2e:6d:83:d7:fa:fd:86:25:
                    8d:a4:0c:95:b7:ec:fb:af:a7:ab:9f:5b:d2:9c:f7:
                    94:59:93:31:d6:be:c4:ef:50:8b:8e:7f:67:bf:88:
                    11:54:9d:fb:4e:9e:de:83:ce:c3:95:28:d3:19:63:
                    c3:24:f7:67:68:b5:69:3f:5f:e3:d2:18:95:24:fe:
                    a5:da:31:d2:81:b2:92:01:5f:7c:41:ea:9d:87:fd:
                    a1:be:c7:d4:66:44:98:8e:54:3b:08:cc:85:51:c9:
                    fd:a1:17:5a:da:4d:73:d3:3d:5c:ba:48:c4:ab:4e:
                    44:5d:5e:ad:51:1d:52:fc:24:a8:9c:74:8a:cc:d5:
                    2a:91:fa:79:0f:45:e9:2d:3f:b4:b9:2b:da:6c:74:
                    bd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:00:0B:96:AC:CB:98:10:6F:26:D7:CA:78:42:09:66:44:77:36:56
            X509v3 Authority Key Identifier:
                keyid:50:4D:12:0B:1C:20:98:49:EC:F9:AE:51:7A:F8:1A:AE:81:D1:68:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UE0SCxwgmEns-a5RevgaroHRaLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0be3df-6080-4655-b238-6576f5901455/1/UE0SCxwgmEns-a5RevgaroHRaLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0be3df-6080-4655-b238-6576f5901455/1/UE0SCxwgmEns-a5RevgaroHRaLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:79:a6:f8:63:28:83:e5:f9:eb:66:ab:0e:4a:04:48:e7:
         e3:54:6e:a1:7f:9c:23:d4:79:06:44:f8:be:61:b2:6c:95:9c:
         9d:b8:2c:6b:d8:a6:ae:05:77:33:d2:23:77:ae:e7:f4:32:ab:
         23:d9:73:a9:f8:8b:99:a2:ba:2d:1f:ac:cd:7d:77:61:69:40:
         fb:62:8c:14:c5:0d:77:01:8f:a6:72:84:21:c2:d6:3c:d8:ab:
         61:bf:3f:ae:7d:30:19:0e:20:47:de:06:a2:e2:c3:fa:71:b3:
         a0:bc:4a:2c:74:f5:70:c7:20:99:94:69:3c:ed:db:4a:54:97:
         1d:c3:07:44:45:54:74:76:9b:e1:40:86:b7:17:a4:b3:4e:87:
         ac:9b:de:f1:cb:61:d1:ba:d2:08:21:6c:56:d4:88:59:6a:0c:
         0a:19:78:7e:15:2d:58:ed:bd:5c:4e:4e:8b:2a:5f:f5:08:40:
         e6:31:f1:6c:f4:33:46:e1:61:ab:ba:28:2e:a4:63:c0:8a:3d:
         8b:c1:e8:3e:87:6d:c5:6e:e5:41:f7:09:15:15:0c:56:af:bc:
         d5:13:f1:28:54:6c:a6:5a:eb:5a:7d:4f:9b:20:69:3a:e1:de:
         49:4c:57:75:a1:e9:dc:8f:cb:c7:15:1c:f6:96:92:86:a1:24:
         02:ba:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----