Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/TLUtSiPl4oIfoZFewTfThPrh_S4.mft
File:                     TLUtSiPl4oIfoZFewTfThPrh_S4.mft (raw, json)
Hash identifier:          xR30cGqz5PrcVMuLpNviDUK3WQVGr3cCampeCbgzvYE=
Subject key identifier:   57:6F:2D:22:EC:47:16:DF:3A:DC:C9:A5:25:B2:C2:8A:FE:8F:8C:D8
Authority key identifier: 4C:B5:2D:4A:23:E5:E2:82:1F:A1:91:5E:C1:37:D3:84:FA:E1:FD:2E
Certificate issuer:       /CN=4cb52d4a23e5e2821fa1915ec137d384fae1fd2e
Certificate serial:       018BA8CC42DED7057253C9B346B79DF6B7A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLUtSiPl4oIfoZFewTfThPrh_S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/TLUtSiPl4oIfoZFewTfThPrh_S4.mft
Manifest number:          0884
Signing time:             Tue 07 Nov 2023 08:00:40 +0000
Manifest this update:     Tue 07 Nov 2023 08:00:40 +0000
Manifest next update:     Wed 08 Nov 2023 08:00:40 +0000
Files and hashes:         1: TLUtSiPl4oIfoZFewTfThPrh_S4.crl (hash: wwPNYHw9/g9PdJ1T26DBHqWr8cHfIgVATUpwE3giac0=)
                          2: c7oZz-TYop-CTLTfHOtroRmgXMM.roa (hash: IvdWhGSzE2D8+EIm9ZrCT3PuwWn7aLk3uDlti5zRVSI=)
                          3: fjmAsaTyBq3y6qXkJbfkSmo450U.roa (hash: E4FpWP/nKyqQeeQguLJrOaf+DKBKB3pM3a32eIU41g8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a8:cc:42:de:d7:05:72:53:c9:b3:46:b7:9d:f6:b7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb52d4a23e5e2821fa1915ec137d384fae1fd2e
        Validity
            Not Before: Nov  7 08:00:40 2023 GMT
            Not After : Nov  8 08:00:40 2023 GMT
        Subject: CN=576f2d22ec4716df3adcc9a525b2c28afe8f8cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:74:e0:7d:4e:f4:ab:20:f3:a7:b9:da:0e:
                    f2:c9:90:d5:58:56:1e:24:c6:21:97:7f:24:d0:02:
                    16:ea:9f:f1:01:1f:52:fc:5a:d9:00:05:da:2d:67:
                    fc:21:d3:f3:b3:36:6d:88:59:b3:0f:26:e2:2f:ff:
                    db:c8:f9:43:6a:d7:7f:fa:26:bf:ba:13:3a:00:ed:
                    1b:75:3c:63:63:49:0b:77:6f:71:a8:6d:b0:05:15:
                    bb:81:f6:6d:b7:23:ac:a4:77:93:d7:1d:8f:b3:02:
                    d0:c4:d9:b2:a3:91:34:4c:ab:2f:ff:b3:3e:16:e9:
                    52:18:6a:7c:78:d4:a9:95:03:a0:26:1b:2f:68:f4:
                    2a:fe:28:e7:3b:9a:af:2b:a9:83:39:c3:9f:26:a5:
                    77:ff:0e:ce:f4:48:3c:6c:29:f8:6a:89:8a:b8:f6:
                    ee:58:30:5d:1d:dd:ed:62:c6:aa:17:3e:a2:92:3c:
                    79:c2:56:db:cb:3e:51:2f:3c:38:37:67:5d:18:58:
                    f2:65:6d:72:c9:a9:80:12:f4:32:81:8d:06:bd:96:
                    09:66:36:d5:6e:e9:06:52:b5:f6:65:2d:22:db:54:
                    0c:4f:e2:d4:93:fa:84:5b:12:88:45:73:8e:8b:4a:
                    c9:d2:f3:07:6a:4e:88:80:7d:21:f2:be:7c:07:37:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6F:2D:22:EC:47:16:DF:3A:DC:C9:A5:25:B2:C2:8A:FE:8F:8C:D8
            X509v3 Authority Key Identifier:
                keyid:4C:B5:2D:4A:23:E5:E2:82:1F:A1:91:5E:C1:37:D3:84:FA:E1:FD:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLUtSiPl4oIfoZFewTfThPrh_S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/TLUtSiPl4oIfoZFewTfThPrh_S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/TLUtSiPl4oIfoZFewTfThPrh_S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:75:0b:b0:49:e3:d5:d9:ec:5e:46:c1:d7:6d:92:8e:9b:a3:
         34:58:67:ee:b6:90:5a:cb:51:1c:04:e3:36:d0:14:0e:2d:92:
         c4:ce:cb:58:30:74:bb:3b:d0:57:22:1d:73:61:28:6a:fa:4f:
         32:be:e5:37:c3:22:59:b2:10:46:f6:65:cf:09:f5:db:44:5c:
         f0:e7:f8:11:13:b0:88:0c:c6:91:bd:5d:41:3d:53:49:7d:66:
         5b:46:63:bc:76:d0:6a:c5:45:a5:04:12:3e:c2:c9:94:7a:47:
         f1:bf:b5:a2:b8:be:a5:d6:34:88:47:76:e5:e9:e2:59:c6:4d:
         5f:31:5e:4d:62:0b:9f:05:eb:86:07:2b:70:05:b9:72:62:b7:
         18:b1:87:f9:2b:ea:d9:9a:d2:11:6e:cb:4d:e1:f2:aa:da:21:
         1a:fb:d4:91:97:c4:96:0d:b1:6d:1d:81:a3:b8:42:0c:fa:a0:
         12:b5:c4:90:d4:64:1d:8b:ba:af:c0:de:22:d1:2e:74:63:0d:
         38:05:1d:a5:de:b2:dd:cb:1a:3c:7d:cb:f0:d6:ca:43:e6:ac:
         7b:5a:97:74:de:32:e7:9b:68:23:00:3d:22:b3:8d:50:cc:90:
         fc:1a:6c:b0:7e:63:40:b7:fa:20:c9:e2:dd:3c:12:b9:3d:dc:
         f3:64:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----