Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
File:                     HAa2lWCp0xRian_piP3SF0dL-G0.mft (raw, json)
Hash identifier:          JJpbfFTjBbP+eGkZJZz+4h75KqElpQb91gvxRABxM9k=
Subject key identifier:   60:F8:C2:04:00:34:7C:72:6F:66:FF:30:61:B9:88:B1:AB:1F:E0:EE
Authority key identifier: 1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D
Certificate issuer:       /CN=1c06b69560a9d314626a7fe988fdd217474bf86d
Certificate serial:       0188F5982BB948B470BFB7FDBCBBC3C9AF4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
Manifest number:          0815
Signing time:             Mon 26 Jun 2023 02:46:10 +0000
Manifest this update:     Mon 26 Jun 2023 02:46:10 +0000
Manifest next update:     Tue 27 Jun 2023 02:46:10 +0000
Files and hashes:         1: 7dmuqVnKFzri4xpJMH44ANX55UA.roa (hash: /sjVNy8PU3kWmOdSiYmAbkW5KeMApno2rT+jvtT1bzc=)
                          2: HAa2lWCp0xRian_piP3SF0dL-G0.crl (hash: ucZw8bEklNeoBM617z82Ug7S+3Ov1OpEgnFNaaPgZzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f5:98:2b:b9:48:b4:70:bf:b7:fd:bc:bb:c3:c9:af:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06b69560a9d314626a7fe988fdd217474bf86d
        Validity
            Not Before: Jun 26 02:46:10 2023 GMT
            Not After : Jun 27 02:46:10 2023 GMT
        Subject: CN=60f8c20400347c726f66ff3061b988b1ab1fe0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:27:c1:a7:0b:62:92:a9:c7:13:c6:37:a4:
                    61:e4:6f:77:84:ab:b6:6d:53:9f:b9:fd:a3:7c:c5:
                    90:fe:23:17:51:e6:d9:f1:16:20:0b:46:25:22:63:
                    af:1d:32:10:a8:9b:f8:b7:58:0f:50:56:ec:20:5f:
                    a9:02:86:81:f0:38:bf:47:89:78:c9:ac:27:78:d2:
                    da:a3:3b:aa:22:ac:9c:dc:ed:89:e1:5f:0f:3b:67:
                    c7:24:37:e4:52:f6:f2:4f:5e:25:aa:ff:1b:65:d1:
                    92:31:5e:73:1a:2a:99:52:06:38:f8:e2:66:f9:72:
                    28:5c:21:0f:d6:85:50:36:bf:aa:ac:80:0f:08:2e:
                    7e:2c:c6:72:e1:04:54:48:2c:7f:22:be:00:c1:2f:
                    f5:3f:1e:e3:82:54:c8:fc:71:f5:10:d8:c4:91:bf:
                    e7:3c:0a:52:32:56:07:b3:88:67:d1:d5:de:f0:4d:
                    95:57:61:8b:57:f7:f7:1c:e9:03:45:c1:bd:1a:51:
                    57:3f:2f:d3:44:b8:03:3c:f4:4d:7f:88:59:f8:16:
                    a3:92:9d:13:60:e7:fe:d6:9e:af:d4:37:cc:56:4e:
                    41:1f:cc:23:a5:c2:24:62:87:70:34:91:ef:12:be:
                    7e:e1:fc:b4:6e:39:34:5d:04:5c:34:a5:4f:ec:83:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:C2:04:00:34:7C:72:6F:66:FF:30:61:B9:88:B1:AB:1F:E0:EE
            X509v3 Authority Key Identifier:
                keyid:1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f0:f9:e0:e7:3c:47:7d:01:be:ad:0b:bb:cc:d0:03:5f:e4:
         58:3b:e7:65:b6:5d:8e:fd:6b:9b:b4:a8:14:b8:fb:18:10:ce:
         df:b5:de:63:ab:5d:f4:64:dc:6d:8a:a4:c0:78:3c:59:ec:7c:
         68:0e:4f:0b:f8:db:d4:54:a3:57:21:bb:f7:5c:85:cb:64:aa:
         fd:78:10:58:2a:ff:75:c4:c5:26:68:32:46:5d:9e:da:67:de:
         c7:96:6b:d9:8e:54:b8:38:05:8e:d2:01:71:e7:45:59:3e:3e:
         3d:b7:c3:7f:f2:13:38:e0:de:9d:4b:ba:8a:91:30:7c:c1:0d:
         64:dd:e7:b2:9d:46:02:77:ac:45:38:a9:0c:c3:10:14:df:4b:
         78:60:f5:8e:40:0f:4d:cc:46:48:45:54:a9:c8:eb:e1:3a:ef:
         5f:9e:e2:c4:12:06:a2:a8:31:a5:fe:90:40:2e:b1:91:c6:dc:
         4c:53:e4:0f:a7:4a:fe:ca:76:36:c3:a2:e3:0c:77:5f:2a:6d:
         22:aa:40:1b:5a:2e:4b:59:92:f6:fd:fa:af:ee:66:43:7d:1d:
         30:25:04:8d:bb:c6:a0:a0:21:c4:24:e9:d0:25:76:e2:41:a6:
         f5:2d:39:d4:42:c4:3f:8e:ec:79:88:a4:e5:2d:66:69:5e:35:
         6f:28:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----