Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/WbqZU4WRbiuPnksCzwI6im7MkNY.mft
File:                     WbqZU4WRbiuPnksCzwI6im7MkNY.mft (raw, json)
Hash identifier:          XVlFu7rgSJPCBcoV/H8eALj6ocrmGXd5K0rskPyHl6s=
Subject key identifier:   7A:84:44:5B:98:B9:27:E6:02:EC:4C:CF:AF:03:71:B0:72:EC:94:86
Authority key identifier: 59:BA:99:53:85:91:6E:2B:8F:9E:4B:02:CF:02:3A:8A:6E:CC:90:D6
Certificate issuer:       /CN=59ba995385916e2b8f9e4b02cf023a8a6ecc90d6
Certificate serial:       0187C28059FC056942D33A2A2491E2171505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbqZU4WRbiuPnksCzwI6im7MkNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/WbqZU4WRbiuPnksCzwI6im7MkNY.mft
Manifest number:          80
Signing time:             Thu 27 Apr 2023 11:36:44 +0000
Manifest this update:     Thu 27 Apr 2023 11:36:44 +0000
Manifest next update:     Fri 28 Apr 2023 11:36:44 +0000
Files and hashes:         1: WbqZU4WRbiuPnksCzwI6im7MkNY.crl (hash: NFl63XaPWMhYHDXdD2UHGa7zWnqVFZWYImhA4ihg+R8=)
                          2: pCXBPNRl5Nz6liVpHSbwJwI8Jqo.roa (hash: bm+6U8L/4Uj7cWZX9aSnwa0Esin299bJV+GGJhCnXxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c2:80:59:fc:05:69:42:d3:3a:2a:24:91:e2:17:15:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ba995385916e2b8f9e4b02cf023a8a6ecc90d6
        Validity
            Not Before: Apr 27 11:36:44 2023 GMT
            Not After : Apr 28 11:36:44 2023 GMT
        Subject: CN=7a84445b98b927e602ec4ccfaf0371b072ec9486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:45:66:54:4d:a9:1e:6a:41:74:04:16:bc:ad:
                    4a:24:c1:69:9b:85:5b:ca:6a:d5:34:7f:3b:a0:d1:
                    87:fe:6f:58:59:d2:3d:d2:08:29:1b:c8:e0:84:bf:
                    2a:13:32:8f:51:50:64:6f:7d:68:f9:8d:c4:e2:da:
                    f8:ce:3c:81:e3:e3:86:33:16:48:b2:49:70:8a:7c:
                    9c:45:29:28:4e:14:05:31:01:75:94:61:ab:15:71:
                    80:56:aa:bd:8d:c0:19:7e:70:1e:ce:9e:a2:ff:b5:
                    ad:8f:ac:95:93:bf:50:2d:97:aa:7b:05:b4:77:fd:
                    e7:db:c9:6c:d3:65:90:20:e1:5f:5c:bd:20:53:84:
                    69:2e:ab:bc:88:2a:b4:a6:80:5e:75:c0:d7:22:b3:
                    46:9c:d5:a2:4c:e4:17:5b:d0:16:7d:c7:21:68:c3:
                    97:04:89:4e:cb:0f:37:fa:e3:0a:f2:6a:27:56:60:
                    85:63:cb:b9:18:07:01:0a:db:90:5e:50:5a:17:69:
                    a7:e6:df:cc:60:e1:36:71:4b:7d:ee:47:cf:ee:09:
                    1a:4e:c6:51:35:dd:f7:00:fd:02:49:b2:be:73:94:
                    03:23:d5:3b:91:04:15:e6:4f:41:c8:a1:b3:ef:b6:
                    65:2b:e9:82:77:64:82:5f:98:f0:f7:35:f8:0c:18:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:84:44:5B:98:B9:27:E6:02:EC:4C:CF:AF:03:71:B0:72:EC:94:86
            X509v3 Authority Key Identifier:
                keyid:59:BA:99:53:85:91:6E:2B:8F:9E:4B:02:CF:02:3A:8A:6E:CC:90:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbqZU4WRbiuPnksCzwI6im7MkNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/WbqZU4WRbiuPnksCzwI6im7MkNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/WbqZU4WRbiuPnksCzwI6im7MkNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fb:4b:a8:14:b3:f4:e5:f1:c4:a4:7a:5c:62:b4:70:a4:7c:
         57:e0:3f:cd:2b:8c:58:c6:49:90:0e:6d:c2:82:2d:19:e8:0c:
         05:5c:f2:3e:bc:4d:52:2c:9c:e2:4f:2c:b5:dc:9b:b9:bf:6e:
         25:4a:a1:e1:b9:8f:3c:6e:65:a0:eb:ff:02:e0:97:d9:87:a1:
         dc:a5:4b:06:c9:d0:39:6e:66:a3:b8:03:15:10:2d:ae:63:56:
         ee:ac:af:c5:9b:28:49:3d:62:c8:36:57:c3:d9:81:1d:5a:5e:
         07:0a:9f:56:79:30:b0:02:d0:0b:80:5a:0e:2a:1b:96:9b:fc:
         22:2c:7c:6a:97:67:bc:f0:a6:57:d7:50:4e:3d:1c:f7:ad:ec:
         88:cd:55:71:8d:88:d8:07:8b:75:96:25:f7:c2:a8:64:8a:d7:
         38:29:a4:9d:73:70:13:bf:3e:7d:56:6c:74:85:fc:4d:17:07:
         44:c4:aa:bb:07:07:3e:2c:99:c5:b7:9a:af:ba:5b:71:e2:0e:
         f8:66:4b:d0:b6:33:30:c6:db:3c:46:13:f3:1e:e9:09:c6:30:
         62:7c:a4:44:6d:03:f9:18:22:36:b0:af:c1:b3:0b:23:cb:e6:
         45:52:fc:1a:63:f6:de:03:9b:04:e8:06:c2:c3:2f:c8:30:a9:
         7d:3f:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----