Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.mft
File:                     khwusBZMGDkAMMXnBcSjR5FQ354.mft (raw, json)
Hash identifier:          wlmIpsKYiG1C1zuCbW/Nczf//oQsEPvn7J+5WzwQDsE=
Subject key identifier:   1A:EF:C8:3F:C7:51:FD:A4:95:11:4B:F3:96:0A:8D:2B:D3:8E:C2:A6
Authority key identifier: 92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
Certificate issuer:       /CN=921c2eb0164c18390030c5e705c4a3479150df9e
Certificate serial:       0188B9461479F88DF56CB379BAB5278DB51B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.mft
Manifest number:          026A
Signing time:             Wed 14 Jun 2023 09:39:17 +0000
Manifest this update:     Wed 14 Jun 2023 09:39:17 +0000
Manifest next update:     Thu 15 Jun 2023 09:39:17 +0000
Files and hashes:         1: ErYXL0tPveelIbYByTXYN6rtU04.roa (hash: CZPXfUmKwFdyX98/EkrVFRucoU/wQuReYYJzISDaWpQ=)
                          2: khwusBZMGDkAMMXnBcSjR5FQ354.crl (hash: fDFT/E/MgK2MpqTSgkVpqIzF7hWwFVQnbRMhSN8Lt3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:46:14:79:f8:8d:f5:6c:b3:79:ba:b5:27:8d:b5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921c2eb0164c18390030c5e705c4a3479150df9e
        Validity
            Not Before: Jun 14 09:39:17 2023 GMT
            Not After : Jun 15 09:39:17 2023 GMT
        Subject: CN=1aefc83fc751fda495114bf3960a8d2bd38ec2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b4:97:b5:5e:f5:c2:db:a9:52:4c:66:e2:23:
                    7d:1c:3d:1b:54:8d:37:92:d4:87:ef:fb:82:f2:4c:
                    d7:f3:c3:2a:f2:b1:f9:b2:1d:2e:86:b7:4f:99:d3:
                    74:73:e6:d7:62:15:66:49:58:63:9b:04:02:20:b2:
                    ff:7d:b5:20:e0:3a:33:17:ba:2a:75:2c:66:18:db:
                    60:80:4a:47:a3:dd:8c:8b:53:a7:01:c4:39:51:f2:
                    91:ff:60:fe:b1:9a:de:e0:bc:d3:39:93:62:7b:52:
                    b3:67:d5:d1:c6:0f:8c:14:69:96:4e:f1:53:ed:3a:
                    40:21:f9:88:0e:28:d3:83:32:68:f8:49:8c:90:b6:
                    b0:17:3d:3b:a4:ec:5e:40:a2:5d:15:e4:45:d8:87:
                    0a:39:bf:14:c5:bf:2b:f4:90:1f:30:13:88:9a:3f:
                    42:d4:23:db:73:f6:81:ed:be:b5:64:40:cf:ed:56:
                    a5:19:0c:83:24:41:db:64:e4:59:46:13:6c:3d:5a:
                    ab:de:1c:7f:fd:57:04:33:3b:34:e2:54:e1:a0:97:
                    43:10:ef:99:b4:eb:c3:f8:99:26:84:c1:91:7b:8e:
                    6c:97:2d:e3:d0:36:b8:09:9d:21:3e:b1:61:4e:87:
                    98:93:cf:4b:cf:1f:d4:81:3c:8a:73:7c:5a:79:86:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:C8:3F:C7:51:FD:A4:95:11:4B:F3:96:0A:8D:2B:D3:8E:C2:A6
            X509v3 Authority Key Identifier:
                keyid:92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:07:93:5d:8f:4c:30:ab:99:33:c8:2b:79:18:68:b8:ef:d5:
         c3:66:43:2d:a4:a8:63:ca:cd:8e:25:84:d3:73:d9:fd:ea:19:
         8e:0b:f8:21:a3:eb:10:c0:6d:ca:78:1b:ae:b6:12:f2:7d:1e:
         0a:09:0a:52:d3:40:5b:70:15:14:b4:0f:73:be:7e:6f:0a:e7:
         38:2e:ad:60:7c:2d:11:4a:18:bd:c0:c1:71:26:85:6e:9f:a6:
         3a:20:0e:fd:9b:1f:2c:68:8d:3c:d6:8a:0c:d6:fd:ea:5c:49:
         5f:df:c1:6c:e3:01:db:1a:11:f0:b5:bb:38:34:47:56:3e:02:
         a2:f0:05:14:1e:d7:fc:80:83:e9:18:72:8c:8d:b5:fb:24:28:
         a9:d9:26:97:d1:76:d5:dc:42:2a:73:8d:39:11:aa:7a:84:68:
         f3:a7:fe:e6:27:9a:65:a1:ab:80:28:ab:b9:62:3d:1f:e8:2d:
         5e:18:81:06:46:9b:7f:64:9c:81:3d:e6:01:45:5d:31:c7:65:
         66:c4:e4:27:b3:a5:a9:a5:f8:c7:94:56:cd:d8:80:91:51:e6:
         26:b0:1c:5d:c8:76:fb:97:71:46:b3:09:e2:1a:c3:6a:f6:72:
         ef:ae:08:8d:68:ec:16:8f:14:8d:38:6c:72:23:05:d5:71:38:
         ca:c6:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----