Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.mft
File:                     4Cq-JhLWekPWgo1bNEGPXzS2qCQ.mft (raw, json)
Hash identifier:          OSKyedKZ7A4mA3rxF1QdiAmYdKlXDkTq9RkBa0y0tg0=
Subject key identifier:   AF:C2:D0:7B:4D:D0:50:2E:DE:62:55:A5:FB:C9:1C:56:75:A1:64:3F
Authority key identifier: E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24
Certificate issuer:       /CN=e02abe2612d67a43d6828d5b34418f5f34b6a824
Certificate serial:       018A8379DDE7165297172D2F684564815267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.mft
Manifest number:          09DD
Signing time:             Mon 11 Sep 2023 09:01:56 +0000
Manifest this update:     Mon 11 Sep 2023 09:01:56 +0000
Manifest next update:     Tue 12 Sep 2023 09:01:56 +0000
Files and hashes:         1: 4Cq-JhLWekPWgo1bNEGPXzS2qCQ.crl (hash: 1mrvSknlbbbBWbwmoFlt5zmNy36Z9IWs6kMmqUI33Sk=)
                          2: 7J5UUTIuQyzP2n7BTRGodDx683I.roa (hash: XVoN/Wxo1SgGuXEY6O9guwtTh6XrsVx0B5cpKSibYKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:79:dd:e7:16:52:97:17:2d:2f:68:45:64:81:52:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02abe2612d67a43d6828d5b34418f5f34b6a824
        Validity
            Not Before: Sep 11 09:01:56 2023 GMT
            Not After : Sep 12 09:01:56 2023 GMT
        Subject: CN=afc2d07b4dd0502ede6255a5fbc91c5675a1643f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:62:86:d6:ae:c7:24:4e:23:bc:a0:0b:c4:
                    18:d8:a2:b5:96:70:1d:6f:a0:cb:c8:f3:24:ce:86:
                    25:de:ea:12:41:3c:13:e6:cc:24:be:14:8d:db:12:
                    15:80:2f:14:e7:49:fb:26:3d:0d:31:41:b5:b3:97:
                    88:26:1d:1d:d3:30:d5:c5:46:6e:bf:94:35:94:26:
                    7b:0b:74:83:e4:1d:3a:ec:bd:0d:2e:a7:b7:da:12:
                    0d:33:e5:7f:24:84:17:80:dd:3c:8c:6e:48:97:04:
                    23:be:70:66:8f:11:3e:8a:4f:d0:d4:14:94:d8:8d:
                    05:86:e4:80:50:18:6b:39:b8:f4:75:57:06:2b:42:
                    54:70:46:67:76:96:63:71:42:ae:cc:db:22:4c:51:
                    39:99:d7:7e:83:1d:48:cc:8a:87:49:b9:19:b8:f4:
                    5e:af:4f:ea:88:1e:8b:23:7a:63:73:9c:11:53:4f:
                    81:c8:ed:60:fc:d0:c8:c9:b9:40:ad:46:7b:46:da:
                    e2:e1:6f:f3:3b:23:fa:82:48:bf:04:68:db:71:df:
                    0b:18:18:13:13:51:93:cf:54:c4:65:16:7b:dd:7a:
                    42:50:a7:da:ad:c5:b4:e7:a4:29:76:77:48:cb:ea:
                    a2:28:0b:6f:ac:e8:12:03:97:ed:fd:45:cc:57:94:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:D0:7B:4D:D0:50:2E:DE:62:55:A5:FB:C9:1C:56:75:A1:64:3F
            X509v3 Authority Key Identifier:
                keyid:E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ff:00:16:3e:78:8a:d2:09:c2:02:8f:36:11:00:b4:0b:32:
         c2:99:c6:56:e7:d1:8d:03:09:3d:47:8f:56:6f:52:11:d5:d6:
         28:51:0b:15:34:b0:f1:96:94:03:16:d0:8d:4c:7f:86:d4:90:
         eb:52:38:32:55:e7:61:c5:fd:ca:dc:06:2e:ca:90:99:11:6a:
         b3:86:81:31:84:20:7d:74:78:92:b6:ce:a2:d4:a6:0a:9f:91:
         af:52:4d:20:a2:a3:ab:f7:e2:cc:dc:54:dc:bd:ac:28:88:16:
         bb:e5:38:e1:92:b2:44:07:18:b6:b1:e8:e8:27:43:d1:e4:96:
         aa:1b:c0:b4:1d:72:e7:ca:3b:e5:44:d6:2d:a8:8d:f7:b8:ab:
         71:d1:fb:6a:2b:ad:e6:2f:60:86:80:03:58:c5:b4:a9:37:b1:
         06:af:63:bd:4f:12:95:45:cc:84:fc:8e:66:88:35:d9:56:12:
         63:29:e6:58:cc:c3:4b:0b:46:a6:b3:d3:59:41:ab:cd:b1:a0:
         9c:2d:10:3e:8e:8f:60:e9:57:51:b8:dd:c7:6b:48:b7:32:c7:
         2e:35:75:3b:ed:4f:89:63:60:9d:59:6c:59:b1:08:e1:3c:ac:
         56:b3:6f:7a:45:bc:6b:0a:1a:bd:87:67:2b:4e:c9:de:bf:9b:
         21:55:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----