Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/cuNLwAhD5Dz3042UIBpjNjjijcA.mft
File:                     cuNLwAhD5Dz3042UIBpjNjjijcA.mft (raw, json)
Hash identifier:          rT+843+2ewPexUJjLQfIHxHeox59sCAQZ0q3J5bvpg0=
Subject key identifier:   EE:12:31:AB:4E:A2:2F:3D:9B:1B:34:1E:49:02:6F:63:4A:DE:73:DC
Authority key identifier: 72:E3:4B:C0:08:43:E4:3C:F7:D3:8D:94:20:1A:63:36:38:E2:8D:C0
Certificate issuer:       /CN=72e34bc00843e43cf7d38d94201a633638e28dc0
Certificate serial:       0185A0E8B39E5A4829736AF345080DEB29A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuNLwAhD5Dz3042UIBpjNjjijcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/cuNLwAhD5Dz3042UIBpjNjjijcA.mft
Manifest number:          0417
Signing time:             Wed 11 Jan 2023 12:58:02 +0000
Manifest this update:     Wed 11 Jan 2023 12:58:02 +0000
Manifest next update:     Thu 12 Jan 2023 12:58:02 +0000
Files and hashes:         1: cuNLwAhD5Dz3042UIBpjNjjijcA.crl (hash: 6OYEV3oWvfPr1o19MB3kShIgoRmUx1NVxMYKZjrTWvY=)
                          2: mo_hBAdG3uPhGzdU0WlGydREWAs.roa (hash: K8Z2B3aPaBmkorOvQHqgiAK4vBwS8eddquQrCgo6vO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a0:e8:b3:9e:5a:48:29:73:6a:f3:45:08:0d:eb:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e34bc00843e43cf7d38d94201a633638e28dc0
        Validity
            Not Before: Jan 11 12:58:02 2023 GMT
            Not After : Jan 12 12:58:02 2023 GMT
        Subject: CN=ee1231ab4ea22f3d9b1b341e49026f634ade73dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d9:a2:44:f0:20:b9:1b:04:0c:99:81:81:51:
                    b7:59:26:b8:64:11:12:62:5e:ac:ed:e0:a2:48:5e:
                    1e:f8:12:83:72:51:49:e7:d4:a3:47:4a:40:bd:a5:
                    1f:0a:81:39:59:bc:b2:82:1d:dd:78:e1:f4:86:62:
                    d8:f0:45:d1:9f:70:5a:29:55:af:d9:5a:a0:bd:7a:
                    0e:4f:53:d9:7a:78:48:d0:a4:b4:ef:09:00:53:70:
                    d9:42:61:00:d3:ca:b8:d2:24:ec:7c:70:da:34:21:
                    f2:01:5c:01:7c:b1:33:aa:47:94:2e:56:bc:ee:3d:
                    aa:6f:ec:2b:8d:e0:14:0d:0d:ab:e8:49:6f:29:26:
                    e0:f1:ea:a9:ac:18:aa:2d:f8:09:c3:ac:67:50:0d:
                    d5:55:6a:8b:47:d6:0e:e7:ef:7d:34:09:76:15:b4:
                    41:7e:63:93:5c:13:36:4a:96:92:4f:79:fd:35:27:
                    9e:b5:ca:b6:1c:0d:85:08:f4:e5:0b:39:7a:c7:05:
                    e1:65:8c:83:ed:b1:ea:ab:4b:b6:27:e4:44:5f:b0:
                    ba:b6:16:97:52:a0:15:41:32:cb:ca:33:da:f3:5f:
                    3c:fa:34:cb:ca:1a:1e:d3:38:91:c3:66:f2:56:04:
                    d0:6e:a1:ae:fe:d8:2a:66:60:2d:4f:ea:a8:f4:bb:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:31:AB:4E:A2:2F:3D:9B:1B:34:1E:49:02:6F:63:4A:DE:73:DC
            X509v3 Authority Key Identifier:
                keyid:72:E3:4B:C0:08:43:E4:3C:F7:D3:8D:94:20:1A:63:36:38:E2:8D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuNLwAhD5Dz3042UIBpjNjjijcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/cuNLwAhD5Dz3042UIBpjNjjijcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/cuNLwAhD5Dz3042UIBpjNjjijcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:5f:cf:da:35:e2:15:3e:8b:d5:96:53:27:a1:38:60:47:
         6f:51:4f:3e:56:ba:35:6b:c8:7a:5b:ef:ef:b6:0a:57:18:d0:
         6f:66:03:0e:76:7e:81:d6:15:26:7b:0f:bf:8b:30:fa:cc:0d:
         bc:c3:af:84:d5:37:50:07:67:75:60:da:88:0b:2a:35:e4:20:
         b2:15:42:16:fa:3d:bb:82:ff:68:db:25:29:dc:64:bd:4d:90:
         31:c7:19:7a:ac:40:92:cb:25:6c:f0:82:8a:17:af:5c:95:1e:
         94:51:33:e7:5c:e7:cc:34:3c:e3:0a:0f:7d:83:f7:ef:05:f0:
         a9:5d:68:62:a3:91:9a:d0:39:b0:bd:b6:a1:d0:7f:48:ce:59:
         03:46:6d:bc:f4:f5:a9:3a:5f:96:72:b5:b8:fa:57:8c:00:96:
         88:8a:6e:4e:e3:91:f1:47:7b:c8:90:66:0b:ce:b9:bd:57:56:
         97:ee:61:f9:cd:69:3c:0a:40:5e:9b:c1:a6:34:fe:da:9a:bb:
         81:2f:28:29:d0:7c:11:09:35:b4:3b:fd:1e:95:4b:44:f3:e1:
         33:d3:62:b7:fe:b3:c7:8b:68:23:d4:ac:f7:2e:1f:0f:b3:7e:
         ff:d3:ac:96:c9:36:d6:99:0a:3c:51:25:15:42:2b:f3:1e:b5:
         92:0a:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----