Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft
File:                     GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft (raw, json)
Hash identifier:          MLqE2E76pAnQCR6ZMrd5cHcUxZJSJVEDvPiyc4lqI4E=
Subject key identifier:   FE:3B:31:EF:F8:45:53:F2:45:72:17:91:6A:CE:5D:EC:6F:4C:AC:F4
Authority key identifier: 19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
Certificate issuer:       /CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
Certificate serial:       0188E3363002A324ED91D0F1E083B04ED124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft
Manifest number:          07C9
Signing time:             Thu 22 Jun 2023 13:05:59 +0000
Manifest this update:     Thu 22 Jun 2023 13:05:59 +0000
Manifest next update:     Fri 23 Jun 2023 13:05:59 +0000
Files and hashes:         1: GWUJqIHln_r6oxz0i_Xidhu4Iu0.crl (hash: BLbdD2OkI5MTF/oMv5tLC16OrOwdNV78WuKgeMMpWSA=)
                          2: xj_5YqCQbPB2R7DcxL-xfqt524s.roa (hash: f0NKv3y7F1PTau8KcZ5AZspR+sPj5nSYAJ8L4zAS0IY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:36:30:02:a3:24:ed:91:d0:f1:e0:83:b0:4e:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
        Validity
            Not Before: Jun 22 13:05:59 2023 GMT
            Not After : Jun 23 13:05:59 2023 GMT
        Subject: CN=fe3b31eff84553f2457217916ace5dec6f4cacf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:00:fd:f1:f7:0a:b1:a7:e5:6c:b5:ab:d5:
                    5a:3f:6b:1c:10:bd:85:e4:2c:25:82:b5:6f:a5:2b:
                    6a:8c:dd:d2:1a:71:8a:a4:9c:9e:e3:02:2f:bd:8c:
                    b2:0f:89:c6:ec:62:51:b1:88:38:92:f0:52:1f:fa:
                    aa:00:e8:9b:12:55:ec:40:93:bd:36:f9:6b:8d:74:
                    6e:e8:6b:4d:c8:98:86:4f:ee:5b:d3:d8:f7:d7:94:
                    44:b6:8b:53:cd:3c:15:23:76:fb:7a:3a:2d:fa:9b:
                    a2:cd:11:c5:93:4a:8e:1a:fb:7e:9b:63:24:d0:ba:
                    29:8b:c3:4d:88:07:90:84:83:31:48:12:1c:bc:e4:
                    77:23:4b:c4:02:1a:e5:7c:50:aa:9c:27:fe:51:16:
                    0a:18:2c:87:38:60:42:1c:b4:cd:68:de:15:c5:3d:
                    b1:3c:f8:52:f9:75:f6:6c:6a:fc:fd:55:99:e3:60:
                    6c:2f:8f:02:fe:a6:b5:68:ca:ac:59:33:85:9e:85:
                    12:9b:13:f5:0a:3f:76:52:93:00:cf:85:f3:43:4d:
                    62:df:57:7e:e8:f3:a8:65:b0:0d:fb:73:77:47:59:
                    c8:1b:25:7d:cf:4c:e5:74:14:3e:ce:a4:b0:ab:de:
                    71:d1:e8:2d:9e:ce:9b:21:98:79:d1:ef:5f:b9:75:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3B:31:EF:F8:45:53:F2:45:72:17:91:6A:CE:5D:EC:6F:4C:AC:F4
            X509v3 Authority Key Identifier:
                keyid:19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b6:89:c9:92:cd:94:6f:19:1c:36:e5:20:9a:a8:6a:25:14:
         a8:98:5b:30:df:12:5f:00:d8:43:7e:f4:d6:02:14:fb:3f:14:
         1a:f8:5a:66:4d:63:10:93:02:59:6c:9c:53:70:36:97:13:3d:
         4e:b9:21:5e:b1:ef:12:f1:81:e2:01:cc:f5:46:2a:16:f5:27:
         26:29:e9:fa:ec:44:4e:3b:0f:ff:b1:47:6c:0c:8b:f4:61:c6:
         92:43:fb:0e:08:bc:88:89:13:75:c8:c1:e2:58:05:3b:b8:d9:
         8b:ec:78:43:e6:43:d1:71:e1:b5:55:30:9a:44:2e:0d:70:3a:
         9b:91:2b:23:ba:d0:1d:2b:bf:4f:8a:7b:13:07:26:d4:7c:a1:
         bc:5e:0f:0e:b4:9d:3f:37:a1:72:4a:96:5c:e5:49:d3:51:eb:
         b9:8f:97:a0:6a:86:e7:77:48:89:b8:c7:8f:52:bb:a0:c4:48:
         8d:81:4b:f3:64:48:30:19:58:3a:00:f9:2e:7a:e3:c5:e7:6b:
         c1:e5:3d:c7:2e:0d:c0:28:87:e0:f9:31:49:61:48:ba:c1:fc:
         8f:51:7d:51:86:6f:d5:ca:b7:5b:e6:73:21:4c:1e:08:e4:16:
         43:80:16:8f:0d:a5:83:a9:41:6e:90:f2:23:82:c5:d6:5e:fe:
         ce:30:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----