Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.mft
File:                     VCGCxhFDmVSmi6eQ8B8DWLTTDc4.mft (raw, json)
Hash identifier:          2hISfUVHhl8AbvKgz0mPebsOei3SQwuaqPNxym9vEFQ=
Subject key identifier:   12:CD:74:B7:2D:0D:06:2A:B6:DB:87:8B:4F:95:C7:69:D3:52:6D:88
Authority key identifier: 54:21:82:C6:11:43:99:54:A6:8B:A7:90:F0:1F:03:58:B4:D3:0D:CE
Certificate issuer:       /CN=542182c611439954a68ba790f01f0358b4d30dce
Certificate serial:       018C8A51C615DD5A89E035A1AF87A9068057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.mft
Manifest number:          0A58
Signing time:             Thu 21 Dec 2023 03:01:03 +0000
Manifest this update:     Thu 21 Dec 2023 03:01:03 +0000
Manifest next update:     Fri 22 Dec 2023 03:01:03 +0000
Files and hashes:         1: 1-zBHYCSZI6Ryd-t0djaF5LOD3nc.roa (hash: u8umy412zrt8Sg+Bn0tad3wYUaxI/bm42uVtpmiiSfU=)
                          2: VCGCxhFDmVSmi6eQ8B8DWLTTDc4.crl (hash: jblj+H0N42MxTdVOYYDNSfUQ8RVGoS6v+uAV2F3xdb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:51:c6:15:dd:5a:89:e0:35:a1:af:87:a9:06:80:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542182c611439954a68ba790f01f0358b4d30dce
        Validity
            Not Before: Dec 21 03:01:03 2023 GMT
            Not After : Dec 22 03:01:03 2023 GMT
        Subject: CN=12cd74b72d0d062ab6db878b4f95c769d3526d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:8e:34:45:be:b6:e5:25:4e:87:f2:b3:b5:
                    24:e1:bc:73:df:4c:5d:96:ad:4e:11:68:c6:4f:51:
                    a3:3e:60:0c:f7:3e:27:2b:5d:aa:2a:02:b9:39:61:
                    74:f2:de:06:77:f1:df:d1:eb:9e:fa:fd:fb:3f:2d:
                    0c:aa:5d:11:10:3a:b8:5c:85:53:2c:25:e2:1c:c5:
                    90:91:46:2c:b2:1e:e4:66:05:f7:e3:9e:78:13:26:
                    32:84:d8:7f:cf:52:42:7c:93:11:14:ee:3d:ca:50:
                    05:7e:33:52:9c:de:e8:29:57:eb:0f:12:ed:38:4f:
                    bc:b8:1f:e4:83:7c:5f:44:0d:c3:d3:65:73:52:67:
                    6f:ac:69:be:5d:1b:72:c8:19:2e:b1:2a:f7:2f:2f:
                    51:85:ff:08:31:4f:23:1a:26:0c:b6:26:a6:d4:b1:
                    59:c2:fe:af:c0:2c:d9:5d:77:9e:f8:91:da:5c:e7:
                    8a:c7:8c:8c:cb:a1:ba:f8:10:4c:d5:1b:09:77:d0:
                    ef:d8:a8:4d:4a:1d:bb:1a:77:2e:10:45:2f:61:76:
                    72:d4:a0:0b:0c:8a:1f:c4:aa:77:c6:94:5c:e2:f6:
                    f6:51:4f:52:68:fe:27:7b:a5:ec:71:75:ab:59:80:
                    f8:ae:ab:a8:6a:4b:64:5f:50:56:23:d9:77:52:ae:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CD:74:B7:2D:0D:06:2A:B6:DB:87:8B:4F:95:C7:69:D3:52:6D:88
            X509v3 Authority Key Identifier:
                keyid:54:21:82:C6:11:43:99:54:A6:8B:A7:90:F0:1F:03:58:B4:D3:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:1c:bc:14:00:35:7d:4d:ab:f7:97:dd:bb:53:76:a1:17:
         1e:84:ca:49:0b:aa:2b:a7:1f:f6:46:ed:11:90:9a:c4:61:99:
         d7:c1:fc:21:4a:53:3d:0d:a3:04:96:08:1d:66:35:16:87:48:
         4b:bd:53:e9:50:b6:d5:f6:2c:9b:9f:49:d5:5c:fa:d6:7d:ab:
         f4:5e:b8:6e:7e:2d:8c:7e:36:83:ab:20:35:fe:bd:ab:3e:79:
         13:48:8e:d5:9f:f8:b6:d7:6c:d1:0c:b6:c7:2c:54:12:ae:99:
         b4:96:6d:a4:e2:95:56:13:ec:b1:7e:fb:af:4e:07:f1:5d:fd:
         b7:8d:0e:75:8e:3a:fb:f4:03:3a:41:80:3d:29:d2:1b:fe:a1:
         29:5e:34:40:90:e2:32:43:b8:9f:10:db:31:f9:2e:02:74:7a:
         70:54:0b:5c:54:97:64:bc:8b:7c:17:19:35:84:d5:81:c1:ec:
         5a:e3:77:57:8b:7b:4f:e2:d7:c9:c5:3d:7e:ef:32:fd:dc:27:
         5f:2e:35:62:32:45:31:df:3f:b8:c6:4b:ce:99:d4:4c:0c:34:
         21:01:52:ed:3f:83:92:f5:e0:18:d5:a1:03:6c:ab:1a:04:0d:
         86:d8:b3:f4:b9:7d:96:d5:92:59:4b:3d:26:75:88:91:c0:93:
         c7:e6:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----