Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/4hb4Nbqrmep5fOiapA-hJmvAE_s.mft
File:                     4hb4Nbqrmep5fOiapA-hJmvAE_s.mft (raw, json)
Hash identifier:          Hho0eSTD6s/iLdL/FZ3ta5Bd58jmUFvTAEOFweQr9I0=
Subject key identifier:   55:3C:43:FD:9D:1F:65:B7:9C:83:E4:6D:01:3E:A5:A0:F0:EB:CD:19
Authority key identifier: E2:16:F8:35:BA:AB:99:EA:79:7C:E8:9A:A4:0F:A1:26:6B:C0:13:FB
Certificate issuer:       /CN=e216f835baab99ea797ce89aa40fa1266bc013fb
Certificate serial:       018B841B7B5F926EDD7504881885F35F82AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hb4Nbqrmep5fOiapA-hJmvAE_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/4hb4Nbqrmep5fOiapA-hJmvAE_s.mft
Manifest number:          0877
Signing time:             Tue 31 Oct 2023 05:01:15 +0000
Manifest this update:     Tue 31 Oct 2023 05:01:15 +0000
Manifest next update:     Wed 01 Nov 2023 05:01:15 +0000
Files and hashes:         1: 4hb4Nbqrmep5fOiapA-hJmvAE_s.crl (hash: os59gbhX+0MqH34BLUMMfUt4f5n9JEPC43n5kkMRdOs=)
                          2: Qx0kCr_r3lfP7ULhsqMs7AEU1uo.roa (hash: Ljh7YZ5HV28xxJDBmofUYh477HgGuQYH1JZp+uDhakE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:84:1b:7b:5f:92:6e:dd:75:04:88:18:85:f3:5f:82:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e216f835baab99ea797ce89aa40fa1266bc013fb
        Validity
            Not Before: Oct 31 05:01:15 2023 GMT
            Not After : Nov  1 05:01:15 2023 GMT
        Subject: CN=553c43fd9d1f65b79c83e46d013ea5a0f0ebcd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:69:53:3e:f9:ec:a3:31:00:26:d8:eb:7b:b9:
                    5f:ed:53:aa:ed:68:fe:d6:11:48:e5:11:a4:9c:ed:
                    40:57:b3:bb:2b:35:57:3e:b4:30:05:7c:86:a4:94:
                    8d:4f:79:ef:3f:b5:05:46:35:57:e7:41:ec:67:ac:
                    03:88:76:26:6c:51:2f:7f:cd:fc:06:ea:70:f2:df:
                    d2:98:ba:6a:a0:b3:b0:bb:a9:8c:56:1f:f5:1d:05:
                    85:cf:98:09:7e:66:e3:26:f7:93:a7:ca:21:bb:89:
                    56:61:c3:50:1c:2d:39:0c:74:79:21:3e:01:e1:21:
                    70:1c:dd:f2:c5:ea:cb:c1:a4:ef:b6:76:40:67:78:
                    56:0e:f0:c2:1c:08:50:7e:ae:99:4e:9d:55:4f:9b:
                    71:e0:28:f5:a1:3f:2e:4b:f5:c8:02:7c:62:5e:90:
                    ae:bb:5b:7d:e5:02:07:c6:82:33:99:ff:57:5f:f4:
                    23:20:30:c1:6b:31:b7:d4:1b:6f:b1:74:e3:23:4f:
                    c9:b4:92:4e:33:56:67:bc:6f:e1:ca:04:3f:87:3b:
                    7a:c7:ca:aa:81:ee:00:74:b1:c0:8a:82:0d:12:90:
                    12:61:d1:ff:d7:cd:78:e1:a7:92:23:92:f1:36:b7:
                    f0:ab:1c:8d:20:a2:80:d7:4e:37:d1:4b:01:7f:d4:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3C:43:FD:9D:1F:65:B7:9C:83:E4:6D:01:3E:A5:A0:F0:EB:CD:19
            X509v3 Authority Key Identifier:
                keyid:E2:16:F8:35:BA:AB:99:EA:79:7C:E8:9A:A4:0F:A1:26:6B:C0:13:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hb4Nbqrmep5fOiapA-hJmvAE_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/4hb4Nbqrmep5fOiapA-hJmvAE_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/4hb4Nbqrmep5fOiapA-hJmvAE_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:58:8b:23:2d:95:9e:31:48:7c:69:aa:6b:11:45:f1:dd:
         f3:41:f0:fe:ea:4a:8c:a1:4b:96:b7:70:58:a0:29:e5:26:e5:
         d6:bb:86:d4:9a:1d:4f:a7:51:37:85:e2:e1:e6:19:2a:f5:df:
         1b:1c:f1:09:49:5c:df:e5:16:46:6d:4d:fa:6a:12:90:60:09:
         18:b6:dd:cd:bd:87:a3:ce:f8:27:ea:29:c4:63:61:cc:0a:8f:
         bc:ed:03:51:a0:c8:9e:21:f5:05:f3:9a:29:3c:b0:9d:87:fa:
         fa:bc:b2:45:12:4c:07:b1:e1:46:9c:0f:73:c6:ca:15:21:60:
         83:23:fd:93:6a:1b:79:ee:a4:04:b4:10:e1:d4:d9:8c:67:7f:
         d1:04:a1:9f:35:4d:95:53:7c:99:cc:5b:20:44:cf:cc:56:a1:
         ca:44:86:32:ec:e8:5e:42:59:e1:84:48:47:f6:48:39:b0:a3:
         e4:1e:47:24:07:60:fb:8c:71:fa:00:ce:ee:e4:b0:aa:5d:6c:
         9d:1c:9c:8a:f7:77:08:96:a1:70:c4:f9:12:50:10:86:71:56:
         d5:6f:b4:76:91:5c:0e:1b:b0:dc:7c:b8:3f:43:6d:44:28:11:
         f2:50:4a:86:60:3e:fd:85:58:18:33:8a:6d:00:2a:77:02:6c:
         a7:8b:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----