Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/obf_-gJ47YZV6-ZIKodt_Hyd4bw.mft
File:                     obf_-gJ47YZV6-ZIKodt_Hyd4bw.mft (raw, json)
Hash identifier:          SCRghoDp3LxjwybwFs+4aJDGIgTDiqsJOrMHxP/eZhY=
Subject key identifier:   9B:AD:87:99:0B:9B:B2:A6:98:1C:21:E2:19:8F:C7:E4:2D:39:CE:67
Authority key identifier: A1:B7:FF:FA:02:78:ED:86:55:EB:E6:48:2A:87:6D:FC:7C:9D:E1:BC
Certificate issuer:       /CN=a1b7fffa0278ed8655ebe6482a876dfc7c9de1bc
Certificate serial:       018726BF36CB0F7C0D680C0739B9E8B8DFA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obf_-gJ47YZV6-ZIKodt_Hyd4bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/obf_-gJ47YZV6-ZIKodt_Hyd4bw.mft
Manifest number:          0481
Signing time:             Tue 28 Mar 2023 05:44:38 +0000
Manifest this update:     Tue 28 Mar 2023 05:44:38 +0000
Manifest next update:     Wed 29 Mar 2023 05:44:38 +0000
Files and hashes:         1: WNLarwn5cpLDlNKLeXWCZdgLSuM.roa (hash: HzjS8yPvsvfs1KIVq9usEDik6/r1BxjEv0zGDPpToIA=)
                          2: obf_-gJ47YZV6-ZIKodt_Hyd4bw.crl (hash: MH1hKSSynJlCOHGEBWaGeN4DlwJ/2rn/O7J+warULEQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:26:bf:36:cb:0f:7c:0d:68:0c:07:39:b9:e8:b8:df:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7fffa0278ed8655ebe6482a876dfc7c9de1bc
        Validity
            Not Before: Mar 28 05:44:38 2023 GMT
            Not After : Mar 29 05:44:38 2023 GMT
        Subject: CN=9bad87990b9bb2a6981c21e2198fc7e42d39ce67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:1f:67:44:33:a9:66:46:7e:40:60:69:62:
                    13:db:62:63:b0:c6:c8:03:ca:44:e6:de:92:d6:ca:
                    ec:33:42:d7:a6:c9:9e:ca:5b:b5:5d:4f:4e:cf:97:
                    8e:a7:df:49:02:9b:34:9e:fa:31:d6:c2:16:21:b8:
                    9e:6d:30:3b:cb:36:6e:5b:1c:48:2f:2d:55:e8:9d:
                    0f:ec:d8:61:b4:b0:cc:a3:52:49:b6:67:2f:24:c8:
                    cc:b9:56:47:0c:c9:14:45:22:2e:6d:4b:b0:1a:24:
                    b5:67:0c:50:bc:d4:2e:bc:63:4d:62:b9:39:ba:9f:
                    83:bf:08:09:a0:d0:8b:39:4e:dd:73:ee:b0:d6:fc:
                    46:e7:f5:da:ec:b5:61:46:c0:ca:24:a0:eb:b1:69:
                    8c:0c:13:bb:f3:61:62:8b:90:01:9b:47:e6:bc:a7:
                    dc:59:0a:87:bd:44:69:bc:ed:8b:01:52:c9:3b:0a:
                    2b:9f:a3:72:6f:fb:a6:60:06:fd:0a:8a:6d:ce:4f:
                    49:5e:0b:01:c8:30:12:63:d9:58:ed:87:6e:1f:a4:
                    93:a7:14:fa:0e:92:3d:bc:46:fa:31:c2:e0:e7:0e:
                    0d:08:93:d6:e4:0b:33:09:7a:07:ed:0f:bf:a5:f0:
                    12:cf:bd:32:20:c4:2a:62:45:bd:de:5f:71:07:88:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AD:87:99:0B:9B:B2:A6:98:1C:21:E2:19:8F:C7:E4:2D:39:CE:67
            X509v3 Authority Key Identifier:
                keyid:A1:B7:FF:FA:02:78:ED:86:55:EB:E6:48:2A:87:6D:FC:7C:9D:E1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obf_-gJ47YZV6-ZIKodt_Hyd4bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/obf_-gJ47YZV6-ZIKodt_Hyd4bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/obf_-gJ47YZV6-ZIKodt_Hyd4bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c9:2c:88:f0:dc:0c:a0:73:b7:22:01:8d:cc:34:05:13:40:
         eb:5a:90:23:9c:35:0b:63:be:60:58:dd:8e:c0:3a:17:a2:64:
         d5:c6:76:42:9d:97:3b:2d:ae:fc:57:44:2c:92:24:a8:d1:56:
         22:68:26:ca:25:8f:48:7b:59:8b:ac:da:a0:f0:43:5b:86:eb:
         5a:b8:3a:36:8f:3a:4e:13:6d:70:3e:7f:b1:f9:6c:0d:5e:b9:
         b6:ca:3f:d2:28:32:fb:97:2d:90:e0:16:22:3b:5b:e8:12:3e:
         1c:a3:51:b3:9c:82:ad:e4:11:04:a1:46:c3:a4:8d:6e:7f:72:
         6b:80:d6:a7:d5:fd:bd:58:77:0d:76:55:f9:44:7b:5e:17:0a:
         ef:c2:df:cc:54:6c:f0:ee:00:76:57:87:a6:19:22:39:3c:f2:
         b6:41:23:69:53:7b:56:4d:b1:39:ba:a5:52:6b:22:e3:c3:1a:
         c9:64:33:b6:b6:d9:1f:f7:11:32:8a:e0:d8:f1:8f:69:d8:e6:
         2b:a9:1d:b3:e8:6d:ca:bb:ca:60:18:4c:92:e7:3d:89:d9:94:
         21:1e:3d:a9:3c:e1:3d:45:96:46:90:d9:18:d1:b9:16:42:ab:
         1e:ee:fd:0f:36:49:c0:d8:86:3d:9b:c7:d1:67:b8:e5:e7:a5:
         34:b9:15:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----