Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.mft
File:                     CnEjTyVmNJor3xf4kvjUcQu_-BI.mft (raw, json)
Hash identifier:          0We0dj2wumgT0jFBQjyuc9+fi7rnBP1xIakcXqNKWa0=
Subject key identifier:   75:B0:FD:BA:0D:B4:A9:AE:18:6F:4B:91:F9:AE:BD:8D:C2:08:0F:16
Authority key identifier: 0A:71:23:4F:25:66:34:9A:2B:DF:17:F8:92:F8:D4:71:0B:BF:F8:12
Certificate issuer:       /CN=0a71234f2566349a2bdf17f892f8d4710bbff812
Certificate serial:       01891C4C1825858FC59FFB01050C979D1613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CnEjTyVmNJor3xf4kvjUcQu_-BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.mft
Manifest number:          0634
Signing time:             Mon 03 Jul 2023 15:08:16 +0000
Manifest this update:     Mon 03 Jul 2023 15:08:16 +0000
Manifest next update:     Tue 04 Jul 2023 15:08:16 +0000
Files and hashes:         1: 70MwFcNt9cb91U7ZvY_iC0DXTSg.roa (hash: ycKYCkV6Ah1IUE+EA5cpWwwrsMyryztnrYlgAaoEEcI=)
                          2: CnEjTyVmNJor3xf4kvjUcQu_-BI.crl (hash: B8Uqp3NF0FAQ+5h8ZMHQBr2ioDMxxFOnM90fBDSzenI=)
                          3: WrJoTgRd27qdDOXrlq0-kj9cBUs.roa (hash: bPsup+crcphb2JiYa44MkqypgJSAGQk0PVhsZS3P3Ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1c:4c:18:25:85:8f:c5:9f:fb:01:05:0c:97:9d:16:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a71234f2566349a2bdf17f892f8d4710bbff812
        Validity
            Not Before: Jul  3 15:08:16 2023 GMT
            Not After : Jul  4 15:08:16 2023 GMT
        Subject: CN=75b0fdba0db4a9ae186f4b91f9aebd8dc2080f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:39:de:1f:2f:2d:4f:36:92:c5:f3:a9:f5:
                    8b:28:1e:97:47:a2:20:59:65:8e:68:bf:a1:96:e2:
                    e8:11:63:5b:be:3c:e6:95:fa:57:b1:e1:36:e8:19:
                    9d:62:ff:f4:55:c6:9b:12:05:4c:68:2a:a9:30:84:
                    41:23:f3:7d:88:c0:f0:d8:79:42:17:fe:98:45:6a:
                    12:2c:70:5f:8c:4f:13:dd:d0:be:d6:0d:1c:2a:a4:
                    f9:e8:2f:42:73:5f:51:5a:a7:2a:ce:1f:83:2c:90:
                    ef:46:93:ab:09:e0:5e:ec:da:54:34:25:93:91:22:
                    ac:97:a3:b9:ce:01:5b:a1:b4:4f:29:be:d5:54:f9:
                    8a:b9:73:ba:f3:52:6c:e4:81:22:ae:08:b8:0d:38:
                    5b:ef:18:9a:2f:14:05:aa:5c:12:bd:7c:48:3c:d8:
                    4d:49:02:a5:38:0c:a2:da:0c:ba:d3:94:5b:ee:99:
                    4e:75:59:ce:e4:65:99:ae:96:32:ab:15:18:46:54:
                    d8:96:a7:98:a5:01:d6:40:26:74:53:60:21:a7:21:
                    a1:b3:46:7a:4d:47:65:39:f8:00:79:9c:ea:2b:c7:
                    df:0f:7d:d9:90:0b:1f:f2:ae:58:a9:6b:43:b2:e6:
                    4b:de:f2:39:63:1e:de:12:65:8b:7a:47:a2:25:e3:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:FD:BA:0D:B4:A9:AE:18:6F:4B:91:F9:AE:BD:8D:C2:08:0F:16
            X509v3 Authority Key Identifier:
                keyid:0A:71:23:4F:25:66:34:9A:2B:DF:17:F8:92:F8:D4:71:0B:BF:F8:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnEjTyVmNJor3xf4kvjUcQu_-BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:ef:6f:c8:e1:e1:0e:51:af:fa:69:f2:1f:78:63:2d:b0:
         63:91:f0:58:ef:32:06:00:50:bd:88:53:73:b4:3f:aa:22:92:
         f4:22:8f:af:19:39:69:85:57:93:3d:45:e0:f1:dd:03:ec:f5:
         ee:69:ed:68:f0:e0:37:8e:1e:7d:61:5e:40:83:f2:29:2b:30:
         6e:28:d3:bf:b0:e9:01:f7:77:e5:cc:c2:f1:37:1c:0f:b0:63:
         e9:9f:fc:d6:7e:ea:45:5a:1a:11:99:36:fe:a1:8e:7d:d7:a1:
         66:bc:f4:21:25:19:a9:88:71:0e:41:dd:07:f4:77:70:e9:af:
         99:d1:85:b2:64:40:ea:8a:ea:04:dd:c1:59:83:e1:61:b9:d7:
         df:02:f2:59:99:c7:04:dc:7e:15:98:e1:22:2f:70:6e:74:f9:
         15:f2:93:b4:2d:14:ad:d3:2c:f5:86:02:98:14:5f:7b:62:99:
         54:53:a8:98:6e:14:db:b4:ec:b2:be:64:df:9e:08:16:5d:a3:
         13:96:35:9e:5f:be:58:6e:f7:f4:fd:74:db:73:da:c3:c3:cb:
         5e:18:90:5d:4b:68:59:5b:5d:38:3e:6e:ff:8a:87:ca:a5:9f:
         48:e8:4e:05:3c:6b:7e:06:56:c1:f9:51:0f:cc:86:85:d0:e0:
         7b:65:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----