Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/19e5d8-8d29-4d81-b52d-4cd6de9fa902/1/AJNhwi0moiqLOyxTq1xXp3Ay824.mft
File:                     AJNhwi0moiqLOyxTq1xXp3Ay824.mft (raw, json)
Hash identifier:          StZvANrzw89VSeumiOHO5JYhZlYXrvA7bPns2iEydJQ=
Subject key identifier:   40:1D:6B:3F:1C:30:D8:6F:44:48:68:D1:08:0A:34:12:B9:3B:E5:69
Authority key identifier: 00:93:61:C2:2D:26:A2:2A:8B:3B:2C:53:AB:5C:57:A7:70:32:F3:6E
Certificate issuer:       /CN=009361c22d26a22a8b3b2c53ab5c57a77032f36e
Certificate serial:       018A4F53DEE62260151A8C8E3FE5D2C2FD29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJNhwi0moiqLOyxTq1xXp3Ay824.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/19e5d8-8d29-4d81-b52d-4cd6de9fa902/1/AJNhwi0moiqLOyxTq1xXp3Ay824.mft
Manifest number:          0DE0
Signing time:             Fri 01 Sep 2023 06:00:11 +0000
Manifest this update:     Fri 01 Sep 2023 06:00:11 +0000
Manifest next update:     Sat 02 Sep 2023 06:00:11 +0000
Files and hashes:         1: AJNhwi0moiqLOyxTq1xXp3Ay824.crl (hash: Nta3nFucxNn2FYwReNDgZoZSTD4BuxB+/L9nuWX/tvU=)
                          2: RSOMUr0acVX8DLk6vsYo7l9X3N0.roa (hash: o769JRXD8ZPxdebUJem+s7YiLQjb9u+E7Vu94rTv1C4=)
                          3: qpDntE3U9kR4Px7_po0n5irupLY.roa (hash: LpV/BXN7IZsk+7EUEwEZ80LM7a48/x1E+huMMq2D3Ao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4f:53:de:e6:22:60:15:1a:8c:8e:3f:e5:d2:c2:fd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009361c22d26a22a8b3b2c53ab5c57a77032f36e
        Validity
            Not Before: Sep  1 06:00:11 2023 GMT
            Not After : Sep  2 06:00:11 2023 GMT
        Subject: CN=401d6b3f1c30d86f444868d1080a3412b93be569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:65:9a:f0:0a:95:8c:12:36:dd:ed:69:2e:
                    8e:ef:93:b9:79:ae:5c:f9:d7:a6:a0:0c:0f:00:5c:
                    80:5e:55:63:2b:2a:60:e0:f2:87:63:49:d5:b0:3a:
                    da:0d:85:2e:a0:6e:f5:46:4b:5b:26:b2:cb:69:82:
                    96:8f:75:43:c5:d6:e3:0a:80:3a:8f:cc:ee:72:d7:
                    22:40:26:8d:d8:34:58:4f:a2:02:ad:9e:c6:83:b0:
                    9c:84:9e:c6:17:c1:69:e0:3a:43:38:af:ee:21:c1:
                    77:ad:da:46:11:be:f7:93:52:73:8e:67:48:f8:f4:
                    b3:e2:f7:95:c4:9d:ae:26:d6:bd:9b:86:e6:5c:d9:
                    15:40:59:2a:2d:e6:50:8a:4f:e7:31:42:4f:98:5a:
                    6a:01:c0:fc:47:86:9e:b5:ad:32:5c:85:1c:26:86:
                    c7:ac:53:72:7d:85:d2:09:ff:e2:20:23:0d:b9:99:
                    59:6a:9f:e6:2b:df:1e:60:51:57:57:2a:79:05:83:
                    51:02:94:59:70:12:10:71:ce:6e:71:d4:ab:30:ed:
                    6c:df:ee:98:26:ae:24:5e:7f:f5:92:13:42:0b:74:
                    eb:68:31:1b:d0:2c:3a:75:e5:36:ec:c8:0e:8d:c1:
                    a2:40:5d:89:d5:2a:2c:21:88:4d:3e:7b:b1:a6:5a:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1D:6B:3F:1C:30:D8:6F:44:48:68:D1:08:0A:34:12:B9:3B:E5:69
            X509v3 Authority Key Identifier:
                keyid:00:93:61:C2:2D:26:A2:2A:8B:3B:2C:53:AB:5C:57:A7:70:32:F3:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJNhwi0moiqLOyxTq1xXp3Ay824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/19e5d8-8d29-4d81-b52d-4cd6de9fa902/1/AJNhwi0moiqLOyxTq1xXp3Ay824.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/19e5d8-8d29-4d81-b52d-4cd6de9fa902/1/AJNhwi0moiqLOyxTq1xXp3Ay824.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:69:55:52:86:dc:d5:87:43:cb:c7:73:87:15:66:75:84:66:
         62:3a:5c:2c:bd:32:7d:59:b6:b1:e3:2c:95:d1:59:c1:f3:84:
         4e:e4:80:fb:80:b7:a2:7c:8d:ec:68:29:a6:fc:c3:c6:73:88:
         97:27:5f:4a:c6:b5:24:bf:c6:a1:78:23:15:ca:93:8c:8d:63:
         20:fc:8c:0c:64:da:a2:09:f4:d0:d7:3d:28:90:c6:5a:f2:a1:
         a4:f1:20:a0:2a:a3:d6:c3:0b:ea:2b:e6:21:ed:86:95:9c:09:
         12:6d:fc:ae:05:13:ea:7c:60:44:db:04:04:94:58:03:69:61:
         d8:7d:42:7a:b9:cb:f5:ff:18:66:a1:e6:a1:2e:71:48:2c:93:
         51:64:78:c6:24:c8:29:10:8f:5b:cb:d5:dc:29:ba:c7:df:24:
         6a:8b:8f:53:41:77:c7:c7:67:a6:b7:31:15:dc:8b:57:fa:ac:
         96:39:04:40:62:08:68:97:5e:23:67:3d:a2:21:79:9a:74:e0:
         55:c9:21:cc:8c:dd:a6:03:67:21:67:4e:51:42:1c:40:43:fb:
         17:43:f9:4c:b0:ab:d1:9b:fe:25:a6:d1:ea:c7:c5:fb:5b:72:
         dd:f8:71:22:46:3f:0b:6f:27:f4:3d:37:d0:44:0f:e6:de:df:
         25:b5:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----