Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/VkE2sRlb3VywBubPpgkcREMuS-k.mft
File:                     VkE2sRlb3VywBubPpgkcREMuS-k.mft (raw, json)
Hash identifier:          RDs3BZ2sILXCZRCynm2xuIx2+IFWiKZOyNR/aY6A8lg=
Subject key identifier:   96:4C:A8:63:19:09:BF:C4:36:4C:3A:CC:B9:96:DC:98:B5:F3:F6:EA
Authority key identifier: 56:41:36:B1:19:5B:DD:5C:B0:06:E6:CF:A6:09:1C:44:43:2E:4B:E9
Certificate issuer:       /CN=564136b1195bdd5cb006e6cfa6091c44432e4be9
Certificate serial:       018B3A817506A906C89E4E45C2734D91F999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkE2sRlb3VywBubPpgkcREMuS-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/VkE2sRlb3VywBubPpgkcREMuS-k.mft
Manifest number:          06BE
Signing time:             Mon 16 Oct 2023 22:00:44 +0000
Manifest this update:     Mon 16 Oct 2023 22:00:44 +0000
Manifest next update:     Tue 17 Oct 2023 22:00:44 +0000
Files and hashes:         1: TeBbgunzbeTPLazERpNlUaCuSqw.roa (hash: a2J219jr9KGim5km50ASSNia+Ds/n1Nq/7l2GXSePeE=)
                          2: VkE2sRlb3VywBubPpgkcREMuS-k.crl (hash: cyaHEAZHKcChir/P+2qrTzKkxBCagGYFqwKuWf33Vbg=)
                          3: pP1wDE3IFSucO0sXLo-4gTg15-k.roa (hash: X5AzqX8uGb+uC4YVtTjvx/onaUKVOlH+GT38h2nkGso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3a:81:75:06:a9:06:c8:9e:4e:45:c2:73:4d:91:f9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564136b1195bdd5cb006e6cfa6091c44432e4be9
        Validity
            Not Before: Oct 16 22:00:44 2023 GMT
            Not After : Oct 17 22:00:44 2023 GMT
        Subject: CN=964ca8631909bfc4364c3accb996dc98b5f3f6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:8d:6c:8e:ab:f8:64:ac:c5:67:ae:99:78:
                    38:fe:b1:88:90:6c:31:f5:da:eb:aa:a1:09:ce:c8:
                    4f:79:e4:6c:79:37:72:1f:bf:76:32:c1:11:6f:aa:
                    ac:b1:69:52:89:2f:6a:dd:6d:b2:3c:4e:db:04:88:
                    cd:f1:c1:0b:53:66:6f:11:78:13:28:3b:e0:c4:2f:
                    28:c3:8d:3f:54:0a:83:4b:34:fb:a8:c8:46:ff:ef:
                    f8:fd:4c:36:8a:9d:76:79:f1:ca:de:12:ef:b9:c5:
                    cf:0f:1e:77:a0:a1:eb:9d:70:12:44:37:84:ac:9b:
                    89:24:65:1d:7b:a7:ab:f4:ee:ce:4a:25:ba:2f:4f:
                    7e:d5:46:3c:0a:48:03:d0:2a:a8:4a:12:72:fb:5c:
                    c8:98:2c:22:3d:eb:a5:54:2d:64:e6:2f:9c:7a:2e:
                    27:f0:4c:64:b5:f9:e7:a3:ab:2a:82:2b:9a:37:cd:
                    9e:5c:4b:48:5e:b9:d7:2f:49:3a:3f:46:2a:22:c9:
                    8b:e8:c5:81:23:7d:a8:1c:f3:b9:56:9a:03:e4:2c:
                    40:b1:3c:f8:69:f7:ba:eb:f9:f7:6d:e7:22:db:6a:
                    b7:91:ca:6a:c2:32:2b:89:c1:81:a7:8d:91:94:5f:
                    a3:1b:37:41:5b:0d:b6:6f:fe:86:b3:97:20:72:88:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4C:A8:63:19:09:BF:C4:36:4C:3A:CC:B9:96:DC:98:B5:F3:F6:EA
            X509v3 Authority Key Identifier:
                keyid:56:41:36:B1:19:5B:DD:5C:B0:06:E6:CF:A6:09:1C:44:43:2E:4B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkE2sRlb3VywBubPpgkcREMuS-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/VkE2sRlb3VywBubPpgkcREMuS-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f4327a-3cf6-4548-a684-6c5b7c6066c7/1/VkE2sRlb3VywBubPpgkcREMuS-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:52:b8:cf:82:0a:ff:1b:f2:0e:25:3c:4e:9b:12:e4:e7:
         95:5d:4b:66:a5:36:34:82:88:55:1d:e0:a9:25:11:f8:56:02:
         9b:a1:32:26:79:de:ff:bd:1a:ef:09:0d:5c:03:38:90:d0:76:
         cc:7c:53:70:7b:38:46:53:ac:cf:44:63:75:2b:6a:f3:f9:6c:
         a7:00:0f:4b:58:89:72:3e:89:a3:e0:21:01:4c:09:3a:3b:25:
         dc:c6:29:54:0f:de:c4:37:57:20:9c:41:80:fd:fd:53:17:e9:
         c0:d6:03:9f:ec:ea:12:5d:89:d6:2c:b2:c5:57:d6:a4:98:b6:
         62:a6:ed:0c:c1:38:3a:c5:8b:f5:d1:2a:3a:6e:9e:88:48:fa:
         39:77:e4:d0:dd:64:98:35:a0:5d:1f:6a:13:a1:9a:6e:f3:ae:
         19:b5:2b:30:77:cf:b2:4f:08:72:51:9e:ba:6a:a2:7d:ed:2a:
         f9:e8:8d:16:de:8c:bd:b3:16:c3:59:d8:a7:12:e4:ed:a3:4c:
         4e:36:91:ea:fb:e4:9d:15:72:0f:04:d7:64:d2:35:c0:b7:46:
         87:ef:f6:67:ab:6c:e6:dc:98:25:8f:1e:25:75:ea:d5:67:53:
         f3:d2:6e:d5:fb:d9:19:31:db:59:2f:d1:a4:b2:68:e8:d1:cc:
         77:69:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----