Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/PhPrYvx9_wfvAFMxe09n67FMfbo.mft
File:                     PhPrYvx9_wfvAFMxe09n67FMfbo.mft (raw, json)
Hash identifier:          9dqhHbxJPNDSKMlDrmYpaM4vVOU8kl+aybTvWU4muaA=
Subject key identifier:   64:4A:B2:4E:FF:D9:39:E9:B3:57:66:DB:7A:DB:A8:44:31:C3:D4:82
Authority key identifier: 3E:13:EB:62:FC:7D:FF:07:EF:00:53:31:7B:4F:67:EB:B1:4C:7D:BA
Certificate issuer:       /CN=3e13eb62fc7dff07ef0053317b4f67ebb14c7dba
Certificate serial:       018851C265919D4646F9C15708145CDF2A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PhPrYvx9_wfvAFMxe09n67FMfbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/PhPrYvx9_wfvAFMxe09n67FMfbo.mft
Manifest number:          0DA4
Signing time:             Thu 25 May 2023 07:14:34 +0000
Manifest this update:     Thu 25 May 2023 07:14:34 +0000
Manifest next update:     Fri 26 May 2023 07:14:34 +0000
Files and hashes:         1: PhPrYvx9_wfvAFMxe09n67FMfbo.crl (hash: LqlME3A3RZXmxQ6ElH3wG0gT5D2SKWnqv0gDiKtshBM=)
                          2: cUWIx2LuvSZRz9B8a9HTGu-i2Ns.roa (hash: TvgC9nq3jip6N+oAH9s1CVf0nWWxMquxqywka/HJtu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:51:c2:65:91:9d:46:46:f9:c1:57:08:14:5c:df:2a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e13eb62fc7dff07ef0053317b4f67ebb14c7dba
        Validity
            Not Before: May 25 07:14:34 2023 GMT
            Not After : May 26 07:14:34 2023 GMT
        Subject: CN=644ab24effd939e9b35766db7adba84431c3d482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:47:c8:1f:bb:f1:df:8b:44:0c:f9:e3:9b:
                    c9:fb:41:2c:f6:fd:9b:52:7a:33:19:47:ac:f5:1d:
                    76:cd:32:8d:5e:36:03:9a:48:7c:59:5b:09:04:d9:
                    26:cb:cc:34:f3:3d:76:d4:6c:9f:3f:12:a9:3d:38:
                    b4:a1:0b:e8:2a:f6:47:26:e9:99:88:8f:ce:5e:70:
                    c0:5d:60:86:3c:e4:21:d3:d7:7d:f1:83:38:a7:8b:
                    8f:bb:5b:95:a4:98:28:61:ba:58:6c:68:f8:b1:85:
                    09:d6:cf:b4:85:cc:62:da:e5:73:d8:14:a9:5c:bf:
                    24:0f:c3:94:f7:e9:a2:26:e9:39:69:7e:5e:0a:b4:
                    1a:33:a8:37:71:2b:29:21:8f:7d:1a:92:13:e2:6e:
                    36:b4:ab:52:3e:ff:47:5c:d5:f3:9b:62:fc:06:41:
                    ca:87:a6:3e:db:21:41:2c:f0:1f:0b:dd:52:07:bb:
                    0e:23:5f:53:8f:db:bd:85:78:5b:d9:aa:26:39:37:
                    18:63:91:92:66:ce:41:90:fb:f9:1e:f9:59:14:1c:
                    61:be:5d:4b:43:20:8c:46:2f:38:58:1a:34:28:b5:
                    c4:41:d3:26:e4:e4:0a:3b:7c:95:65:8e:11:bc:aa:
                    89:45:ac:5b:00:14:cf:aa:f4:1e:64:2d:e1:29:fc:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:B2:4E:FF:D9:39:E9:B3:57:66:DB:7A:DB:A8:44:31:C3:D4:82
            X509v3 Authority Key Identifier:
                keyid:3E:13:EB:62:FC:7D:FF:07:EF:00:53:31:7B:4F:67:EB:B1:4C:7D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhPrYvx9_wfvAFMxe09n67FMfbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/PhPrYvx9_wfvAFMxe09n67FMfbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/PhPrYvx9_wfvAFMxe09n67FMfbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:fd:61:21:55:2e:a6:49:03:13:bd:c4:76:d3:8d:3a:c2:
         a3:27:fa:e6:cf:cb:61:7a:54:26:23:86:7f:ec:6a:94:bc:36:
         ea:fd:1c:78:c2:86:2a:ea:57:3f:f6:7d:06:12:5e:cf:9a:06:
         97:1e:d5:10:f1:24:a3:21:0b:05:a4:bd:04:d5:fe:af:f6:8f:
         06:f3:be:fb:79:ec:62:ba:5f:67:4e:0c:67:26:e0:40:14:c6:
         e7:30:dc:91:49:08:48:64:8e:88:bb:a2:47:c2:0b:fe:8e:f9:
         3d:38:f9:81:39:e6:76:d3:33:bf:8e:33:53:5e:0d:dd:7f:fc:
         a1:ac:69:0d:6c:a2:41:01:7b:77:99:f5:6c:1b:82:c2:dd:0f:
         20:55:95:5d:53:32:38:45:55:64:47:b0:e7:8e:11:19:98:50:
         bc:8a:3b:ee:17:c9:38:b3:ff:02:05:20:79:a6:4f:64:df:1b:
         4a:a3:93:50:4a:3d:ce:94:f0:bb:c3:24:7d:90:64:ed:7d:a8:
         cc:94:c6:71:0d:d3:12:5b:46:54:df:75:01:03:ce:f5:bd:fc:
         1a:04:59:5c:10:b6:6d:39:2d:d5:4d:30:78:69:8c:7e:a3:a5:
         66:29:df:b7:b8:08:b6:29:86:f4:f7:52:d2:2d:da:96:e5:57:
         2f:db:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----