Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c0f6f1-2ee2-41d6-b6ab-086cb9d1a5cf/1/laOVEwI9s5n8za9-o1fsB7VTBs8.mft
File:                     laOVEwI9s5n8za9-o1fsB7VTBs8.mft (raw, json)
Hash identifier:          oPm7x02VNWBc7Lh+GTjhtpITnZsOcwecAw/BbW0owcE=
Subject key identifier:   16:A7:E5:4B:37:E5:D8:B6:A4:F1:C2:E9:3E:B6:D0:33:B3:D5:F2:98
Authority key identifier: 95:A3:95:13:02:3D:B3:99:FC:CD:AF:7E:A3:57:EC:07:B5:53:06:CF
Certificate issuer:       /CN=95a39513023db399fccdaf7ea357ec07b55306cf
Certificate serial:       0188B86A3A2D038F822D663BDEDDA93E9EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laOVEwI9s5n8za9-o1fsB7VTBs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c0f6f1-2ee2-41d6-b6ab-086cb9d1a5cf/1/laOVEwI9s5n8za9-o1fsB7VTBs8.mft
Manifest number:          041D
Signing time:             Wed 14 Jun 2023 05:39:09 +0000
Manifest this update:     Wed 14 Jun 2023 05:39:09 +0000
Manifest next update:     Thu 15 Jun 2023 05:39:09 +0000
Files and hashes:         1: laOVEwI9s5n8za9-o1fsB7VTBs8.crl (hash: Vph/09f12WH6lwGwykUDmlq1/Z81+nhpwptx7L13iLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b8:6a:3a:2d:03:8f:82:2d:66:3b:de:dd:a9:3e:9e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a39513023db399fccdaf7ea357ec07b55306cf
        Validity
            Not Before: Jun 14 05:39:09 2023 GMT
            Not After : Jun 15 05:39:09 2023 GMT
        Subject: CN=16a7e54b37e5d8b6a4f1c2e93eb6d033b3d5f298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:d0:75:79:c9:9d:b5:ed:a3:93:2f:ab:a4:
                    a1:73:73:15:00:c9:86:88:63:ac:74:c7:44:5f:b5:
                    0e:27:59:f9:f1:ff:43:4e:a9:98:7a:74:d8:60:00:
                    c5:8e:15:a8:e7:df:6a:30:a3:ba:43:a4:49:17:18:
                    4d:a4:23:9c:03:4c:a8:31:20:7d:aa:27:e7:2e:99:
                    bb:05:04:80:34:cb:62:a9:98:0d:07:c5:5d:1b:35:
                    5d:64:66:a0:0e:cb:95:6d:39:d9:fb:44:5e:41:dc:
                    d6:35:97:15:8b:b5:62:97:b5:78:94:bc:69:c9:49:
                    03:b1:68:3f:bb:1b:43:55:db:20:4f:51:60:8b:0c:
                    bc:22:8c:c3:21:2c:f5:34:95:e4:c5:37:38:9d:d4:
                    b7:d0:ac:b2:cc:f8:15:5d:c3:dd:3a:22:8b:77:56:
                    3f:6b:75:2c:b7:09:c7:ca:4b:47:bf:3c:ab:75:1a:
                    02:d0:79:53:ab:fd:ec:be:ee:d7:a3:40:24:16:24:
                    39:a5:41:3c:01:95:bc:3e:8c:2c:6c:50:4b:72:fe:
                    21:31:a4:31:ad:d7:d0:22:d7:75:2a:59:79:c3:51:
                    65:5c:97:1c:84:c3:93:e3:7e:ff:20:2a:bd:8d:83:
                    79:cc:a2:9b:e3:39:ee:0f:e7:29:9d:17:ab:a8:e8:
                    5f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:E5:4B:37:E5:D8:B6:A4:F1:C2:E9:3E:B6:D0:33:B3:D5:F2:98
            X509v3 Authority Key Identifier:
                keyid:95:A3:95:13:02:3D:B3:99:FC:CD:AF:7E:A3:57:EC:07:B5:53:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laOVEwI9s5n8za9-o1fsB7VTBs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c0f6f1-2ee2-41d6-b6ab-086cb9d1a5cf/1/laOVEwI9s5n8za9-o1fsB7VTBs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c0f6f1-2ee2-41d6-b6ab-086cb9d1a5cf/1/laOVEwI9s5n8za9-o1fsB7VTBs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:db:df:f6:1b:9f:98:a8:6d:6a:3e:6d:49:97:09:df:11:37:
         77:bf:cd:42:95:15:c0:c3:20:66:01:28:d9:57:e3:0b:e4:d8:
         fd:6f:2b:e6:31:7e:8c:f8:ce:95:78:b0:4f:ea:c7:dd:e7:aa:
         8d:d4:ec:a3:65:7f:50:5a:3b:a9:84:6f:d7:2a:cf:bf:60:ae:
         2d:a8:97:05:3e:b3:f1:09:cc:54:04:af:29:ea:33:98:18:4c:
         f2:4b:f7:72:f8:4f:45:89:89:ec:0f:b6:09:19:53:be:c5:f0:
         95:27:dd:5f:9c:92:ac:3c:36:ed:24:54:f5:fd:1b:5c:91:c1:
         3e:a4:c4:7f:67:d5:d5:e5:f7:71:de:f2:51:56:48:fc:8c:aa:
         32:82:ca:cd:38:23:3f:19:c7:22:41:b2:b5:4c:28:d6:66:86:
         34:9f:73:b5:1c:58:fa:75:bf:f8:63:7a:d2:fa:24:65:d8:6b:
         c0:87:c2:cc:1c:dc:21:8a:b5:7f:15:fe:e9:28:a4:5d:fa:43:
         e8:45:af:89:c6:ec:d5:77:b7:6c:b1:49:a3:97:1d:3a:4f:62:
         c6:0e:d6:ba:f1:2e:70:45:e5:2b:cc:ad:99:5b:ea:ba:26:f3:
         12:17:92:37:96:68:22:f9:a0:f3:37:6e:a0:a5:02:f5:63:fe:
         7f:b4:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----