Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/WjO5rrts9v9wlju-cXYMe0-VceI.mft
File:                     WjO5rrts9v9wlju-cXYMe0-VceI.mft (raw, json)
Hash identifier:          f+XZFaRUf3E2eelD/DIHj7ktOI17JqAcz4rWp4UJ4lk=
Subject key identifier:   0D:22:81:67:86:61:C0:59:75:DA:6C:4B:8E:88:62:64:91:05:D0:96
Authority key identifier: 5A:33:B9:AE:BB:6C:F6:FF:70:96:3B:BE:71:76:0C:7B:4F:95:71:E2
Certificate issuer:       /CN=5a33b9aebb6cf6ff70963bbe71760c7b4f9571e2
Certificate serial:       0187DAFF77A5BE89663CFE97465082FB94DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WjO5rrts9v9wlju-cXYMe0-VceI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/WjO5rrts9v9wlju-cXYMe0-VceI.mft
Manifest number:          06A8
Signing time:             Tue 02 May 2023 05:46:27 +0000
Manifest this update:     Tue 02 May 2023 05:46:27 +0000
Manifest next update:     Wed 03 May 2023 05:46:27 +0000
Files and hashes:         1: VDHqAjD01G6x7pJCIgIceyLR6Ok.roa (hash: laeencMBz5KnYBq/P944HerH2I3X8TW6BxuZfQu7GCE=)
                          2: WjO5rrts9v9wlju-cXYMe0-VceI.crl (hash: YSR7Q8NyktedfK9RbI5ZJvGDtmxjfgdj3kisQE2DTfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:da:ff:77:a5:be:89:66:3c:fe:97:46:50:82:fb:94:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a33b9aebb6cf6ff70963bbe71760c7b4f9571e2
        Validity
            Not Before: May  2 05:46:27 2023 GMT
            Not After : May  3 05:46:27 2023 GMT
        Subject: CN=0d2281678661c05975da6c4b8e8862649105d096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:c2:eb:a2:98:1c:47:ab:b3:ec:17:aa:ca:
                    04:ac:91:49:ad:a5:74:44:10:f9:9f:ac:2e:bd:7d:
                    29:95:60:b1:92:16:5b:98:0e:3e:fe:d4:07:0b:b4:
                    ec:12:6d:db:18:9d:f8:8d:56:4b:bd:bf:99:cc:46:
                    ec:78:f6:3e:73:43:2c:38:20:f5:40:e7:4b:6e:4b:
                    7f:89:b6:54:94:ab:cb:00:b3:f3:7e:fa:9f:47:06:
                    70:14:35:2b:6c:aa:c6:f7:fc:7b:b8:d8:bf:5c:3e:
                    d2:2f:df:ac:e4:20:07:0e:a9:1b:f0:39:a3:a5:3c:
                    5a:b9:47:10:d5:f7:bc:3d:15:74:98:1c:d7:69:aa:
                    85:09:fc:86:aa:7e:30:a1:18:63:63:14:f5:1e:5c:
                    c0:ac:c4:c3:0e:c0:d1:8b:5a:75:90:00:76:ab:7a:
                    ff:12:9b:a9:50:b1:2c:a0:78:25:bf:6d:68:f2:8f:
                    96:e7:bb:fb:d3:a6:f3:b9:c7:c7:02:43:b9:c2:58:
                    ef:ad:cf:9f:dd:01:82:de:b2:57:e3:ce:5d:30:57:
                    eb:a0:59:b0:d2:83:3c:d4:6a:1d:c5:cf:83:d2:79:
                    a7:cf:92:cc:93:25:5d:eb:1a:f7:09:1e:0e:77:8b:
                    21:73:e6:b4:2d:fc:ac:e3:dd:6c:d7:32:54:84:c1:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:22:81:67:86:61:C0:59:75:DA:6C:4B:8E:88:62:64:91:05:D0:96
            X509v3 Authority Key Identifier:
                keyid:5A:33:B9:AE:BB:6C:F6:FF:70:96:3B:BE:71:76:0C:7B:4F:95:71:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjO5rrts9v9wlju-cXYMe0-VceI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/WjO5rrts9v9wlju-cXYMe0-VceI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/WjO5rrts9v9wlju-cXYMe0-VceI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:63:af:23:5d:76:c9:c8:53:d7:8e:9a:17:3f:61:30:92:b2:
         c0:79:c6:1d:75:a3:3e:2a:d3:c3:75:12:9e:df:d2:2e:49:c0:
         18:09:b2:ef:4d:42:e9:d2:97:96:a3:23:c4:44:88:a4:75:aa:
         5d:c7:cf:26:1b:73:7c:93:13:a7:19:ff:bd:5c:45:61:83:b1:
         83:53:76:88:d2:5e:e5:64:86:38:90:5d:89:d3:97:16:52:2e:
         da:be:a1:e2:f2:f6:0f:d4:b9:2c:98:68:e5:f3:1d:be:64:f9:
         a9:95:08:ec:fa:54:71:40:9e:6b:69:5b:89:6c:23:9e:b2:4c:
         41:2e:78:cf:89:7a:6f:f0:46:a2:e0:da:13:76:90:ab:db:2e:
         db:f1:58:45:bf:d9:9d:74:bb:07:d3:ec:47:df:d7:a6:be:f7:
         b5:4d:0a:ef:99:e9:4c:96:35:0c:2e:8e:1f:55:af:71:a1:39:
         77:15:b8:72:14:22:ae:d5:67:e7:da:3f:31:c9:dd:d8:0e:7e:
         78:7c:48:ba:ac:28:76:c8:f8:8f:e5:cc:f1:a2:ca:6c:20:9f:
         aa:42:3b:9c:a7:09:c8:db:7c:f2:53:3e:b8:e3:f3:94:55:66:
         0d:de:04:56:ae:30:f1:5a:73:d5:db:6f:3e:df:b0:91:81:79:
         f3:f7:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----