Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.mft
File:                     1ZLLOdT2ROTNCt_SmSguVMOZUZU.mft (raw, json)
Hash identifier:          EVDkf8HMVxJqQc8zURHmvnnnPguJdfdY8UbS0mX8H0A=
Subject key identifier:   7B:F9:FD:D3:EA:0A:60:BF:BF:D3:8C:55:52:F2:F1:0E:48:E5:9C:CD
Authority key identifier: D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
Certificate issuer:       /CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Certificate serial:       0188B87C8AB71757B0D68BA378B9D6AD34A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.mft
Manifest number:          0DE8
Signing time:             Wed 14 Jun 2023 05:59:09 +0000
Manifest this update:     Wed 14 Jun 2023 05:59:09 +0000
Manifest next update:     Thu 15 Jun 2023 05:59:09 +0000
Files and hashes:         1: 1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl (hash: hgiWY+C9pkyzLP7GJeUFzeH2o4pXABkwH2QB4HkKgTs=)
                          2: ULOUH35H2YeB53n8RgUKfPQuprc.roa (hash: xg0JavN4Ysa7Nrp+HEvsSXmj8u2s3+IN2SHC5idyQRo=)
                          3: p0z4KnKOB1rOKHOYrqEwNECAxYI.roa (hash: K6+CUwQTDcg+J3JmrhMl7g+OrLn1CZaaS7pjcxKxF5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b8:7c:8a:b7:17:57:b0:d6:8b:a3:78:b9:d6:ad:34:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d592cb39d4f644e4cd0adfd299282e54c3995195
        Validity
            Not Before: Jun 14 05:59:09 2023 GMT
            Not After : Jun 15 05:59:09 2023 GMT
        Subject: CN=7bf9fdd3ea0a60bfbfd38c5552f2f10e48e59ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:5b:bd:78:0a:b7:3c:52:20:4e:06:3f:e6:
                    77:b5:2c:45:3d:94:c8:d0:b6:54:9b:6f:7a:81:68:
                    d3:cd:8a:d9:55:bc:f9:6b:ab:56:61:37:a1:b6:5b:
                    43:f6:2b:74:65:13:11:aa:8c:b8:e1:5e:51:89:e0:
                    97:e6:4f:6d:be:d3:54:7f:75:f1:af:b4:47:66:2f:
                    ba:79:6c:dd:3a:4d:8d:0d:69:c2:ae:e3:e0:37:88:
                    c5:53:0b:29:63:41:7b:c8:ad:f7:24:f8:09:8a:d0:
                    aa:10:5c:aa:a9:01:aa:7e:8b:aa:82:a0:15:08:88:
                    c1:ae:23:9c:fd:1e:06:d8:37:93:02:f2:4a:13:63:
                    c7:dc:2f:a4:da:e0:dd:c5:9d:d9:ce:5b:5a:45:05:
                    25:73:35:60:f5:5e:53:6e:d2:6b:34:7e:68:50:04:
                    16:9c:ff:d1:ea:48:4c:77:22:cc:e6:4c:69:68:5f:
                    f5:8c:2f:dd:00:10:8d:87:40:dd:a0:ea:23:7a:4d:
                    a3:0c:0d:f1:61:70:02:d8:bd:72:93:ed:27:d2:97:
                    a6:81:76:5c:a9:ab:54:73:3c:d8:8f:b9:27:74:ce:
                    a5:c5:22:59:69:6e:81:7b:0d:7f:8d:07:b1:98:0b:
                    a8:b9:91:e8:8d:2a:85:ca:80:d5:17:89:8c:2f:4d:
                    b4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:FD:D3:EA:0A:60:BF:BF:D3:8C:55:52:F2:F1:0E:48:E5:9C:CD
            X509v3 Authority Key Identifier:
                keyid:D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e3:0c:91:a4:1a:f3:56:8b:85:24:88:22:a6:23:d1:ba:f5:
         5d:76:86:c5:9e:a6:3b:3e:63:b2:44:d4:0e:33:a6:3e:a3:8b:
         8e:9c:7c:c5:d4:8a:0b:28:1a:34:de:72:fb:7e:59:57:86:0c:
         67:d7:3a:d8:24:fa:8f:2e:cb:00:09:bd:b0:74:da:d6:74:25:
         bb:4e:67:f3:e9:70:77:2b:80:98:e2:5b:c3:4d:e0:4a:f0:6c:
         d8:4d:0d:08:e6:30:bf:e3:e2:f3:0d:8b:23:5b:a0:3c:64:84:
         d9:72:f4:be:71:a0:45:44:99:5e:c1:2b:ad:bf:16:55:5f:57:
         1f:5f:db:08:4a:24:f3:d5:ae:06:cf:c8:3d:88:54:2a:4a:b8:
         76:be:97:23:9c:cf:74:cc:25:1f:6a:8b:9c:04:f0:11:af:52:
         70:e0:87:25:29:22:67:8d:b1:86:c4:46:55:e6:72:ae:0d:3a:
         b5:9d:29:7d:90:0d:ee:5b:5d:0f:28:ff:15:25:f6:31:cd:e0:
         36:c7:83:f6:cc:f9:da:14:d7:dc:51:07:3d:eb:e7:9c:6c:15:
         8d:0a:39:52:6b:a6:e9:d0:a2:f7:7c:71:b8:9d:72:da:ba:f8:
         6c:ce:ad:75:d8:42:5a:f2:58:48:48:0b:42:a0:09:40:8c:13:
         4d:12:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----