Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft
File:                     1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft (raw, json)
Hash identifier:          AzJ0+rPg6IX9HBXMFQ+/jhsv2gWqAal5PGQwVSvhSGA=
Subject key identifier:   E9:B6:2B:84:46:FB:FE:9B:5D:4E:B9:08:2E:9F:EF:D9:E7:58:E3:B0
Authority key identifier: D6:79:4C:FF:35:DC:BD:42:7F:BE:7B:A2:A9:43:33:AA:8D:F0:A4:67
Certificate issuer:       /CN=d6794cff35dcbd427fbe7ba2a94333aa8df0a467
Certificate serial:       0188B8BCAAFB73E3CC8C75ABF207AE7A3AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft
Manifest number:          06F0
Signing time:             Wed 14 Jun 2023 07:09:12 +0000
Manifest this update:     Wed 14 Jun 2023 07:09:12 +0000
Manifest next update:     Thu 15 Jun 2023 07:09:12 +0000
Files and hashes:         1: 1nlM_zXcvUJ_vnuiqUMzqo3wpGc.crl (hash: 0y2iV9Cp45Lz8wDqJili+DQkCtMaW3wDTtZcL+fTYoY=)
                          2: XYuqUYxfRI4O5M7c6y4sc9LKXWQ.roa (hash: Ga7FMlepC8rlPoH5CCaV9BI1S3IxnzEh9aNP8+1fGs0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b8:bc:aa:fb:73:e3:cc:8c:75:ab:f2:07:ae:7a:3a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6794cff35dcbd427fbe7ba2a94333aa8df0a467
        Validity
            Not Before: Jun 14 07:09:12 2023 GMT
            Not After : Jun 15 07:09:12 2023 GMT
        Subject: CN=e9b62b8446fbfe9b5d4eb9082e9fefd9e758e3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:a1:16:1f:86:a2:ed:85:3e:da:f8:13:85:
                    2b:d0:57:99:d4:86:9e:e8:6e:34:f2:a7:4a:80:ea:
                    69:48:3d:5b:a7:35:7a:c6:db:d2:6c:4b:e5:06:9f:
                    89:a2:a1:89:1b:38:8a:79:d9:f8:5d:7a:24:a6:8f:
                    40:38:6b:f2:b9:bd:db:29:2e:0e:2a:2c:e5:4a:54:
                    01:8f:0d:59:a9:ef:e6:74:8c:7d:67:b0:3c:bc:10:
                    e9:9e:36:4c:5b:2d:34:65:26:45:68:f8:3b:38:a2:
                    65:bc:04:1a:dd:51:74:67:6f:45:89:25:be:f3:79:
                    8a:b3:ed:cb:11:b5:1e:63:a9:97:b6:38:cc:08:4d:
                    c3:eb:6d:82:58:37:33:c1:92:a8:33:f6:e7:2c:a6:
                    61:7a:9c:69:36:65:5c:9c:f8:b4:3f:5a:44:3e:81:
                    6f:42:9a:5a:b2:84:b6:76:12:85:de:bb:a6:a9:46:
                    d9:89:03:81:ac:e9:f4:68:bc:15:54:95:d9:2c:a5:
                    80:ee:a0:55:04:39:1e:8e:b4:92:0b:9a:4f:92:bc:
                    51:31:0a:37:c6:87:85:2c:d4:88:e8:3f:1b:a1:36:
                    e5:72:4c:48:71:29:5b:cd:83:05:f8:fc:5a:c7:5d:
                    c8:1c:17:b3:b6:49:4c:73:b2:1c:73:cc:d0:36:be:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B6:2B:84:46:FB:FE:9B:5D:4E:B9:08:2E:9F:EF:D9:E7:58:E3:B0
            X509v3 Authority Key Identifier:
                keyid:D6:79:4C:FF:35:DC:BD:42:7F:BE:7B:A2:A9:43:33:AA:8D:F0:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:43:d7:0b:9e:e9:ed:32:51:f3:ef:56:29:48:1e:8e:4f:
         eb:33:eb:f5:2a:3d:0f:85:0e:cd:dc:75:ab:cb:da:68:ff:25:
         c2:98:b1:67:39:26:65:db:7c:1d:ac:5f:5e:16:8e:50:98:e2:
         9e:42:03:df:6d:94:3e:40:06:cb:c9:70:a7:d6:4f:8d:d9:ab:
         af:bd:04:51:e8:cb:0f:ca:20:69:61:b7:f5:f5:57:f2:23:ef:
         fd:3a:e4:bc:54:8f:a2:43:67:bd:6f:34:9b:de:a1:dd:7e:98:
         10:91:5c:8f:89:d9:c2:bf:5d:a6:68:3e:8a:d9:0f:a2:7b:7b:
         41:5f:13:95:8c:9c:e2:60:64:f9:74:75:67:13:0f:a1:76:fd:
         b2:8d:9f:02:07:16:a3:cc:e3:ec:95:b0:56:ea:5e:b4:88:c1:
         10:79:9c:cd:30:93:18:33:cc:05:be:f0:f8:82:d2:40:e2:9b:
         19:41:c8:c3:b4:5f:d9:b3:cb:92:6f:a9:c3:95:08:12:fe:51:
         f6:25:9d:ea:6f:46:ed:d2:98:a0:1c:9f:30:05:f2:80:44:b8:
         1b:3f:c5:f2:97:5d:1a:7d:1b:6f:8c:96:51:3b:52:ad:41:3a:
         41:63:1c:e0:c9:88:7f:f3:ff:0b:9a:ec:d1:91:83:93:41:03:
         4a:b0:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----