Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ee8dea-2d8c-4561-86bc-6fc2a5191165/1/SgbtnRer9A5cpTImxc6_CQduJ00.mft
File:                     SgbtnRer9A5cpTImxc6_CQduJ00.mft (raw, json)
Hash identifier:          ymAuDyyNneFd6qpETRlMXrOwbvLrbSSuVjUtdNLty5U=
Subject key identifier:   E4:30:98:E6:C3:79:26:1D:DE:C8:3B:39:4A:A5:9D:BC:64:10:D5:4C
Authority key identifier: 4A:06:ED:9D:17:AB:F4:0E:5C:A5:32:26:C5:CE:BF:09:07:6E:27:4D
Certificate issuer:       /CN=4a06ed9d17abf40e5ca53226c5cebf09076e274d
Certificate serial:       018A5EFDFA210031C6AD31F15FAF25E38322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SgbtnRer9A5cpTImxc6_CQduJ00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ee8dea-2d8c-4561-86bc-6fc2a5191165/1/SgbtnRer9A5cpTImxc6_CQduJ00.mft
Manifest number:          01FA
Signing time:             Mon 04 Sep 2023 07:00:17 +0000
Manifest this update:     Mon 04 Sep 2023 07:00:17 +0000
Manifest next update:     Tue 05 Sep 2023 07:00:17 +0000
Files and hashes:         1: SgbtnRer9A5cpTImxc6_CQduJ00.crl (hash: aw0xkX9ELEMAY1Pv05dAFTl5/vkcsef02ZcMHsy5P64=)
                          2: ir9sy-JK3d5B5eu9to7kS9wszFo.roa (hash: +MH0E9aq/RZ4HCxoFjDKDSG6hgtdo+FCu6ohyL6q9jg=)
                          3: vLUdM1IpGk-GcXUYmrcOwmPVQu8.roa (hash: PFue8vULfLxpVMmIYranPMWkxFPa56vJL7XexjPb4ms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5e:fd:fa:21:00:31:c6:ad:31:f1:5f:af:25:e3:83:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a06ed9d17abf40e5ca53226c5cebf09076e274d
        Validity
            Not Before: Sep  4 07:00:17 2023 GMT
            Not After : Sep  5 07:00:17 2023 GMT
        Subject: CN=e43098e6c379261ddec83b394aa59dbc6410d54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:01:49:19:2c:da:9d:bc:25:89:b5:01:f0:
                    23:e8:9b:3a:b8:41:e2:6d:5c:0f:f6:5d:56:89:b8:
                    c7:7e:01:ea:7a:0c:ae:a2:16:26:88:7a:bb:b3:86:
                    e2:84:61:b2:2d:4f:73:3d:b0:9f:d3:2b:61:75:6d:
                    2d:05:ad:4f:c0:13:25:e3:89:24:d9:33:1d:56:00:
                    e6:6b:fe:92:37:fb:bc:b8:28:72:e7:c6:76:3d:ed:
                    36:93:22:29:ca:c1:7e:bf:da:e0:06:54:5b:bb:f8:
                    57:69:af:0e:6d:fe:15:85:80:a4:85:b8:77:3c:47:
                    96:0f:9f:c5:7e:74:42:b0:b4:20:27:3a:bb:6f:1b:
                    bf:8c:43:a6:b5:0a:9b:ae:73:b6:eb:a5:b7:ad:66:
                    96:bb:69:e4:5a:7b:d5:9d:00:b6:c9:3a:1c:e7:cf:
                    54:e7:53:c2:98:1a:65:91:4b:56:78:60:e1:51:1b:
                    24:c6:e1:b5:36:98:c6:71:f8:2d:4c:99:e7:60:7e:
                    a6:d9:96:9d:c4:5a:b8:13:99:26:29:50:d0:7b:af:
                    94:0d:5c:97:aa:2b:d9:7c:e4:bc:48:20:01:12:2a:
                    18:c6:b3:8c:ad:29:f3:12:3d:98:cc:70:9d:43:a0:
                    7d:a5:f4:89:0f:a3:74:c3:a3:5d:88:37:e4:53:62:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:30:98:E6:C3:79:26:1D:DE:C8:3B:39:4A:A5:9D:BC:64:10:D5:4C
            X509v3 Authority Key Identifier:
                keyid:4A:06:ED:9D:17:AB:F4:0E:5C:A5:32:26:C5:CE:BF:09:07:6E:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgbtnRer9A5cpTImxc6_CQduJ00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ee8dea-2d8c-4561-86bc-6fc2a5191165/1/SgbtnRer9A5cpTImxc6_CQduJ00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ee8dea-2d8c-4561-86bc-6fc2a5191165/1/SgbtnRer9A5cpTImxc6_CQduJ00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:13:15:f2:bb:57:64:fe:ca:1c:1d:cc:2a:5b:6e:65:df:8c:
         a4:5e:c9:2e:b1:8f:b1:c6:12:3c:fc:70:00:7f:33:86:7c:46:
         ec:09:f7:19:ef:30:df:07:7b:74:b8:0f:2f:3b:af:86:74:bd:
         88:3e:37:20:53:23:8e:72:89:f8:e8:76:55:f3:68:de:66:0b:
         86:75:a1:43:5e:e9:fa:7c:fa:33:03:06:99:e3:f7:fe:3d:90:
         e4:22:78:e1:ae:41:9c:8c:2f:8c:29:83:a5:91:74:ea:49:78:
         ec:97:97:6a:84:1e:ec:3a:21:b2:65:e9:50:92:79:78:07:7c:
         0c:3e:c4:77:8b:a8:6a:83:a8:59:d7:fb:00:d8:7d:0d:cc:f5:
         18:1c:e9:3b:79:35:77:02:13:97:e9:e8:87:5b:bf:91:a8:f6:
         1c:38:56:e9:7b:da:3f:a2:a0:98:02:52:66:77:94:58:71:91:
         68:0c:20:d7:0c:ea:83:2c:9f:8a:35:fe:c6:f6:c1:c1:ee:86:
         4c:4c:dc:2d:01:d3:97:83:23:cf:a9:ab:6e:a4:ce:90:9c:7a:
         e6:48:ce:5e:88:01:86:fe:4c:19:97:ec:bd:bf:05:58:d0:c1:
         57:50:58:65:99:af:44:38:eb:50:90:02:9c:78:85:da:3e:cf:
         72:a0:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----