Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d55ee2-2df1-4a79-90c4-e3419e0887c1/1/4zwKea8kUCrKptwvFnfwQA8cRGE.mft
File:                     4zwKea8kUCrKptwvFnfwQA8cRGE.mft (raw, json)
Hash identifier:          AkXTlIp0zT6Uy0Ccx+Rklxqw83aq6mO9mkuN/udLNiI=
Subject key identifier:   1E:82:DD:84:59:08:74:F1:30:18:C4:9A:D6:0B:A6:96:8A:D8:19:4D
Authority key identifier: E3:3C:0A:79:AF:24:50:2A:CA:A6:DC:2F:16:77:F0:40:0F:1C:44:61
Certificate issuer:       /CN=e33c0a79af24502acaa6dc2f1677f0400f1c4461
Certificate serial:       018C484107100982FE3F52E39E3883CF15AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zwKea8kUCrKptwvFnfwQA8cRGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d55ee2-2df1-4a79-90c4-e3419e0887c1/1/4zwKea8kUCrKptwvFnfwQA8cRGE.mft
Manifest number:          084D
Signing time:             Fri 08 Dec 2023 07:07:50 +0000
Manifest this update:     Fri 08 Dec 2023 07:07:50 +0000
Manifest next update:     Sat 09 Dec 2023 07:07:50 +0000
Files and hashes:         1: 4zwKea8kUCrKptwvFnfwQA8cRGE.crl (hash: TG2/SD2yuNanpcZka0hZ2fhvJKMPyUjnpdWL4mCp6uA=)
                          2: Agwydl-qLIIybYU1-wjd7JFI0Wo.roa (hash: Zk8JqdT0Z+Bs4Akz8Sh2YURjraP/LQsdQLgymcPnW2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:48:41:07:10:09:82:fe:3f:52:e3:9e:38:83:cf:15:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33c0a79af24502acaa6dc2f1677f0400f1c4461
        Validity
            Not Before: Dec  8 07:07:50 2023 GMT
            Not After : Dec  9 07:07:50 2023 GMT
        Subject: CN=1e82dd84590874f13018c49ad60ba6968ad8194d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:4e:36:09:99:af:a7:79:a3:02:af:3b:db:
                    1b:70:e2:39:8e:88:d6:8c:cb:da:da:53:56:a9:93:
                    6b:cd:05:38:6b:80:6f:12:2d:49:b7:d6:53:da:c1:
                    4d:25:f6:2d:11:85:7f:dd:26:93:c2:c5:93:ac:46:
                    4b:5d:b1:4e:ed:50:44:b4:33:42:d1:0a:66:a3:cc:
                    bd:8e:0f:d3:64:16:f4:dd:c8:53:70:d5:fe:cb:67:
                    f5:2e:24:b4:37:65:bd:20:75:9a:58:ce:bb:ca:88:
                    ff:f7:f8:09:3c:86:2b:36:e0:58:64:da:2b:07:ae:
                    1f:9c:ff:49:6a:83:b8:cc:3b:f2:bd:dd:0b:1d:9b:
                    5a:b3:90:3d:9f:9e:ce:bd:2f:fe:a7:d6:b8:f5:dc:
                    e9:bb:5f:7d:58:49:43:a2:8b:09:2c:a5:10:0d:fe:
                    2d:29:c4:c5:81:3b:1e:92:cf:6c:bc:01:0a:dd:64:
                    c4:48:2f:cb:a6:c1:af:df:77:26:dd:52:34:05:d8:
                    f0:47:de:65:42:bb:52:a9:6f:d3:84:49:61:7b:85:
                    65:52:97:02:47:4b:14:7a:c0:28:08:22:44:1a:29:
                    61:23:a5:25:ea:18:e0:03:20:b6:8f:ed:d5:a6:7e:
                    d0:2c:8f:a5:95:d8:86:a0:de:8f:51:46:15:16:48:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:82:DD:84:59:08:74:F1:30:18:C4:9A:D6:0B:A6:96:8A:D8:19:4D
            X509v3 Authority Key Identifier:
                keyid:E3:3C:0A:79:AF:24:50:2A:CA:A6:DC:2F:16:77:F0:40:0F:1C:44:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zwKea8kUCrKptwvFnfwQA8cRGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d55ee2-2df1-4a79-90c4-e3419e0887c1/1/4zwKea8kUCrKptwvFnfwQA8cRGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d55ee2-2df1-4a79-90c4-e3419e0887c1/1/4zwKea8kUCrKptwvFnfwQA8cRGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:c8:6b:13:e7:2b:46:50:0a:fd:4e:a4:c8:df:f0:e5:e7:e6:
         1a:28:80:1a:cf:60:51:d3:dd:bd:8e:77:ef:51:72:c6:3e:55:
         ac:8e:16:77:65:93:8c:7a:0a:7d:a6:6d:66:41:5e:86:f1:4b:
         12:25:aa:8d:a0:39:21:be:a0:22:56:43:80:f0:5e:15:e2:13:
         1b:65:7a:63:0a:50:df:b5:f1:d8:2e:ec:36:9f:9a:50:f9:05:
         46:8a:f6:ea:d9:85:58:36:dd:48:6b:0c:4b:d3:50:08:82:eb:
         f2:06:79:02:80:57:e1:16:00:7e:97:92:20:5d:28:54:94:58:
         53:76:6b:db:64:c4:6b:68:f0:cd:75:f0:2c:39:41:a8:ce:1f:
         74:88:66:32:5b:ed:eb:43:c5:62:ea:1f:af:6a:89:04:a8:76:
         3b:c8:fb:32:66:c3:b0:87:f7:13:7b:35:d6:8a:98:e1:93:52:
         1f:0d:b2:a4:2a:a3:e9:78:cc:94:5b:de:4d:e5:45:9f:5a:c5:
         5a:a1:5b:2a:ee:ae:df:ef:cc:dd:21:c4:dc:7c:51:0c:35:45:
         e3:42:ae:8c:0b:88:24:db:05:75:a9:07:36:79:df:07:7e:0a:
         fd:9d:62:81:c2:c7:35:b1:1f:d9:f1:27:6e:91:0e:6a:ed:9e:
         f1:dc:fc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----