Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft
File:                     xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft (raw, json)
Hash identifier:          qjQI8XFuLIMsrpLIWv5+eRoDgAjW/gr+WAczuWos5so=
Subject key identifier:   13:73:0F:AA:1F:4E:DF:96:0D:7C:14:29:64:24:2A:1A:DA:7B:7B:11
Authority key identifier: C4:45:7A:30:96:43:B9:A1:64:DA:9F:73:6F:32:41:C0:C1:6A:50:E9
Certificate issuer:       /CN=c4457a309643b9a164da9f736f3241c0c16a50e9
Certificate serial:       0188B797A2DC97502307BEB07C4FEA5B75EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEV6MJZDuaFk2p9zbzJBwMFqUOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft
Manifest number:          0DD8
Signing time:             Wed 14 Jun 2023 01:49:08 +0000
Manifest this update:     Wed 14 Jun 2023 01:49:08 +0000
Manifest next update:     Thu 15 Jun 2023 01:49:08 +0000
Files and hashes:         1: kcDY5iWbwLMuQ-6WEPw12DjN0FU.roa (hash: VpCrbbbheG8Q+qpGvirqR6jLmMhEdxtmv36rbWiM4kU=)
                          2: xEV6MJZDuaFk2p9zbzJBwMFqUOk.crl (hash: 1yYgjGcnATdm5ZGw2jfVd7rG5O/w6PW3bXjml0vd6sM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b7:97:a2:dc:97:50:23:07:be:b0:7c:4f:ea:5b:75:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4457a309643b9a164da9f736f3241c0c16a50e9
        Validity
            Not Before: Jun 14 01:49:08 2023 GMT
            Not After : Jun 15 01:49:08 2023 GMT
        Subject: CN=13730faa1f4edf960d7c142964242a1ada7b7b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:e4:a6:b2:0c:3e:29:fa:90:c1:13:63:44:
                    5b:91:87:a5:7c:ba:f9:b6:4c:ef:88:ce:dc:20:4c:
                    3a:7d:9d:e7:ca:e0:55:ad:c4:70:41:c6:de:82:83:
                    45:1a:c7:1f:3f:bc:de:fd:f1:fd:1d:a1:d6:af:9a:
                    7b:8e:0c:dd:9f:d4:fa:02:0a:39:2f:5e:b2:07:04:
                    5b:4f:44:d1:2b:dc:a2:84:7d:74:7d:90:85:5f:d3:
                    6c:d4:43:8b:68:82:06:24:5a:e2:41:9b:f8:f3:50:
                    12:5e:35:08:4f:88:60:07:c2:ba:68:06:fd:d3:ed:
                    9a:19:30:1b:2b:22:bc:af:e2:f2:93:99:91:5b:52:
                    a8:0f:90:3f:8f:e5:ca:47:de:d8:4a:93:8a:96:a2:
                    7e:0b:91:48:da:58:5f:d9:03:08:57:92:0a:2d:3b:
                    9b:2d:78:96:8c:83:22:b4:0a:19:26:e8:cb:88:28:
                    d7:4d:fa:c6:c5:fe:f9:32:7b:c1:ea:3c:ac:b3:23:
                    ab:f5:31:56:9b:6a:9d:9c:a3:f5:2a:09:90:4f:3a:
                    66:23:c8:57:4b:d0:ea:ed:f2:b1:6f:19:47:1b:6e:
                    a5:ea:aa:eb:ee:63:1c:c8:61:23:21:9c:00:c1:59:
                    39:6e:f3:38:79:e6:db:07:9d:8c:aa:1a:63:71:f8:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:0F:AA:1F:4E:DF:96:0D:7C:14:29:64:24:2A:1A:DA:7B:7B:11
            X509v3 Authority Key Identifier:
                keyid:C4:45:7A:30:96:43:B9:A1:64:DA:9F:73:6F:32:41:C0:C1:6A:50:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEV6MJZDuaFk2p9zbzJBwMFqUOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d7:df:63:07:f1:83:a8:4b:d4:b5:e8:e5:b4:35:09:56:cd:
         2f:5e:21:95:c6:be:06:45:85:4b:4f:eb:17:10:87:b4:bc:8d:
         6f:f1:de:b5:b0:e4:b9:9b:ce:02:03:38:e1:99:3f:a6:3d:06:
         f2:10:46:7b:41:c3:94:b2:fe:69:73:0e:10:ab:ce:f5:1e:56:
         b5:53:bb:66:9a:04:ec:0f:76:ed:97:bf:39:80:5a:42:00:35:
         99:60:7e:8b:14:73:ba:0a:a4:36:70:15:43:20:8e:26:09:5e:
         07:be:31:4e:7b:41:bd:a9:84:7c:27:1c:fc:a9:c3:67:10:d1:
         ae:f1:a7:cb:60:83:01:8b:b4:89:62:11:3d:e4:cd:37:17:b4:
         33:dd:f1:b1:51:83:96:2b:4d:ac:8d:d3:7b:85:84:8c:3b:06:
         b1:c5:ec:be:be:c3:2c:a6:19:7c:ac:ae:42:6a:cd:db:97:d0:
         63:67:f4:1f:fe:72:9d:20:ca:79:57:3b:3b:5b:8f:15:76:dc:
         c7:8a:7c:ec:26:e7:b1:81:ef:b9:84:fd:b2:ac:26:85:17:0b:
         b5:3c:cd:c2:32:30:a5:11:d5:35:2a:f7:fa:2a:cb:28:8e:2e:
         f9:26:33:0b:f6:0b:c1:f2:e5:72:bf:4a:64:60:7f:85:21:b0:
         e0:7e:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----