Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/4o0B6YQjbIEYxUY4HNmg-SAcc9g.mft
File:                     4o0B6YQjbIEYxUY4HNmg-SAcc9g.mft (raw, json)
Hash identifier:          IAIt2o7jWpg0RZz1dSNRihwMA3Mw1XUDDbOFgpJ5Prk=
Subject key identifier:   55:37:F7:40:B2:97:84:C8:E2:C9:3F:DE:D7:2B:56:D5:3C:6C:DF:62
Authority key identifier: E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8
Certificate issuer:       /CN=e28d01e984236c8118c546381cd9a0f9201c73d8
Certificate serial:       018C8AF7677DCDC45F947DABC4176D2D84FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/4o0B6YQjbIEYxUY4HNmg-SAcc9g.mft
Manifest number:          0FF1
Signing time:             Thu 21 Dec 2023 06:01:58 +0000
Manifest this update:     Thu 21 Dec 2023 06:01:58 +0000
Manifest next update:     Fri 22 Dec 2023 06:01:58 +0000
Files and hashes:         1: 4o0B6YQjbIEYxUY4HNmg-SAcc9g.crl (hash: M7OsqNlood0l956Y2ODXtxwWfVE9f5HlnJcOlIsas2I=)
                          2: 50l8myUCEZNG9-JBwIyZfxKI9R0.roa (hash: OluNTIjgmtr9CJthh7OkZRfmgMAyPr+hSyK4qh8H14Y=)
                          3: TrTIJkqoY0KCq-Vu3iL0HvoV-gI.roa (hash: pw1UPB1HrjrELK0YPpUdTvEV3exwHIWByqtQq4lBh/E=)
                          4: ghVCENEznnqpCuM6dDaLC34hRGw.roa (hash: JMroB7iL+Q+ev0aGo/nRO0JG6+fZSgsWb5X/MBsqtKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:f7:67:7d:cd:c4:5f:94:7d:ab:c4:17:6d:2d:84:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e28d01e984236c8118c546381cd9a0f9201c73d8
        Validity
            Not Before: Dec 21 06:01:58 2023 GMT
            Not After : Dec 22 06:01:58 2023 GMT
        Subject: CN=5537f740b29784c8e2c93fded72b56d53c6cdf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:6d:e6:ce:cf:0e:9a:bb:52:c1:46:d0:99:
                    24:e8:93:e8:3a:fb:10:c6:20:93:e8:8f:3e:74:b4:
                    84:fb:ce:2b:4c:97:ff:9d:e3:bd:b6:a8:50:42:f8:
                    92:04:b7:ea:7c:63:c1:7d:50:c6:58:50:6f:b7:a7:
                    28:e4:d0:d2:56:16:c0:e6:fe:b4:e2:35:7a:6a:6b:
                    06:9e:30:15:3e:30:c0:81:b9:4a:5a:4e:a7:d6:6a:
                    a9:45:62:f8:0a:a5:a1:81:e3:ed:97:89:1d:f5:8d:
                    3d:ef:85:ee:30:19:5e:62:8d:d5:3a:2b:9c:f7:bb:
                    13:fd:2d:85:08:b3:ae:b4:e6:a0:75:f7:0f:4d:14:
                    61:b2:ea:4f:e4:23:ce:f2:ee:5c:35:e1:6a:ce:64:
                    76:02:d7:8a:44:30:87:76:76:06:2f:42:1e:85:fe:
                    4d:7f:b7:b2:4d:da:5f:43:c2:c8:c4:34:71:8e:fe:
                    d5:89:3b:ef:d8:49:e7:10:90:ab:53:f2:c7:89:f9:
                    7d:0c:39:9e:05:18:4d:91:4f:5b:1d:67:02:4e:d1:
                    f3:1f:f7:a8:86:1b:d1:86:ad:c2:36:15:39:f1:c9:
                    2a:46:07:72:7c:f7:64:5d:42:a1:cf:f3:15:74:69:
                    0b:04:9f:a3:60:10:d3:f2:7e:31:e5:40:a7:6e:86:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:37:F7:40:B2:97:84:C8:E2:C9:3F:DE:D7:2B:56:D5:3C:6C:DF:62
            X509v3 Authority Key Identifier:
                keyid:E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/4o0B6YQjbIEYxUY4HNmg-SAcc9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/4o0B6YQjbIEYxUY4HNmg-SAcc9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:49:7c:85:92:76:7a:85:d9:77:70:24:f2:4f:10:27:99:aa:
         e6:2b:92:fe:2c:03:5b:94:0a:be:94:70:3b:3b:70:24:1d:24:
         0e:f3:6d:a7:ac:0f:fa:fc:d3:d6:0f:b4:62:f0:0d:f0:34:f9:
         19:bc:5d:2d:4f:6e:71:74:2f:41:e4:b5:20:4f:8f:aa:2e:a8:
         dd:ae:6b:3a:4e:12:d0:e1:8a:fe:b1:f2:ba:ec:3e:99:f9:8a:
         74:64:92:4e:e9:f1:22:86:a4:b6:c2:a2:85:41:c0:82:84:40:
         67:7a:8b:be:dd:1e:2f:2e:78:ea:8d:5e:5a:20:5a:c9:c2:0c:
         b1:29:62:d6:3d:59:fc:88:6b:ed:7f:9e:c5:e3:c3:82:be:a5:
         8a:4e:59:bc:9c:83:7c:b1:87:74:04:fe:78:f4:68:17:f1:4d:
         4b:f1:00:76:75:36:4e:af:d4:31:84:90:41:98:bb:f5:c1:24:
         cc:fa:f5:7e:85:0b:42:b9:37:bc:d5:fe:02:e5:af:5a:86:35:
         ba:b3:d7:6e:1a:53:09:60:08:f6:78:8b:f3:c1:2e:91:61:6d:
         21:4e:f6:fa:15:58:00:24:4e:73:e1:76:47:8e:eb:a7:da:4b:
         c4:2e:4d:f8:19:07:19:c3:dd:4f:31:65:ab:c1:d0:32:fd:67:
         00:1d:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----