Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.mft
File:                     niu51gx0R47SndDg0Q1oXOt8FXM.mft (raw, json)
Hash identifier:          RfEx+0FFPYCo6uRVhXF4Lt0CuyXuThdTweIZiFR96MI=
Subject key identifier:   27:91:6E:4A:E0:41:E8:A3:F1:E9:34:13:F6:4A:A6:8A:40:5A:52:01
Authority key identifier: 9E:2B:B9:D6:0C:74:47:8E:D2:9D:D0:E0:D1:0D:68:5C:EB:7C:15:73
Certificate issuer:       /CN=9e2bb9d60c74478ed29dd0e0d10d685ceb7c1573
Certificate serial:       0188FA62D7A8E89E2DFDFEFFACD62AE1C6F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/niu51gx0R47SndDg0Q1oXOt8FXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.mft
Manifest number:          0E02
Signing time:             Tue 27 Jun 2023 01:06:01 +0000
Manifest this update:     Tue 27 Jun 2023 01:06:01 +0000
Manifest next update:     Wed 28 Jun 2023 01:06:01 +0000
Files and hashes:         1: eilgaNXmdSdSk5-pmchampZvlus.roa (hash: 5QjV4gTsKfJib0LQbH6f0LRnPezjpoFEuPZCgHEEyZ4=)
                          2: niu51gx0R47SndDg0Q1oXOt8FXM.crl (hash: QhxzZiKoQwcf3WUMNTxLgA4OH9eH+RzHm65imSpvGZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fa:62:d7:a8:e8:9e:2d:fd:fe:ff:ac:d6:2a:e1:c6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2bb9d60c74478ed29dd0e0d10d685ceb7c1573
        Validity
            Not Before: Jun 27 01:06:01 2023 GMT
            Not After : Jun 28 01:06:01 2023 GMT
        Subject: CN=27916e4ae041e8a3f1e93413f64aa68a405a5201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:91:c8:42:42:ce:8b:a4:bb:d1:4e:a2:3c:
                    b0:02:e3:2c:66:26:2c:96:70:0c:31:04:d5:20:c0:
                    92:ea:32:f4:ce:a2:7c:e1:fc:d9:36:c3:78:60:28:
                    d7:33:e2:f6:67:d0:0b:14:fe:1d:19:9a:64:75:38:
                    c7:14:f6:75:f7:77:71:18:06:b4:ba:55:7e:96:0f:
                    b9:b4:40:9f:f9:21:9f:69:7d:b4:ec:80:6f:d1:ec:
                    d2:cd:b8:69:60:cc:b8:f1:a7:7a:9e:70:33:4b:77:
                    7f:f9:33:fe:a9:a0:ae:a6:68:ad:11:73:50:0d:41:
                    2e:c9:fa:f6:4c:25:45:f0:1d:bc:4a:bb:53:40:c4:
                    1e:ff:93:40:74:cf:8b:04:71:f6:7b:a0:a6:8f:0c:
                    ca:10:17:1a:ea:60:dc:5d:f6:6b:86:f5:68:a9:98:
                    e8:f4:f7:95:1d:a1:e4:e0:54:01:44:70:18:70:a8:
                    c6:7c:6d:1a:dc:a2:20:11:36:e9:c6:1f:4c:33:f7:
                    d4:15:85:7c:73:5c:d2:31:3b:0a:02:8e:d4:45:a9:
                    c7:3e:91:1b:b9:41:81:87:3f:3d:72:ad:3e:15:b8:
                    1b:e9:d5:d0:71:d1:f4:55:f6:69:6b:76:be:5e:5c:
                    da:e7:f6:f9:4c:23:08:d2:a2:0f:c6:ee:52:58:7c:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:6E:4A:E0:41:E8:A3:F1:E9:34:13:F6:4A:A6:8A:40:5A:52:01
            X509v3 Authority Key Identifier:
                keyid:9E:2B:B9:D6:0C:74:47:8E:D2:9D:D0:E0:D1:0D:68:5C:EB:7C:15:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niu51gx0R47SndDg0Q1oXOt8FXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8c:01:d2:77:27:bd:8b:08:1f:7e:dd:e3:c3:7b:02:06:f6:
         2c:6e:1f:8f:6c:85:e6:7c:05:38:e2:6f:4a:6c:88:19:7b:19:
         e2:b5:77:ae:e0:6e:a5:d6:ff:c1:dc:68:b8:8d:f8:8b:33:47:
         d4:df:1a:66:30:75:2f:14:c7:71:7c:b9:37:94:77:f0:dd:4e:
         75:75:75:ab:bb:c8:34:b4:34:a9:b5:e7:07:50:47:6a:70:8b:
         da:8b:8d:b2:5d:70:2d:3a:42:22:28:04:22:8a:a9:66:c4:6b:
         b8:b8:cd:f0:a5:b4:6e:40:4f:95:3f:8c:a5:ba:3e:3a:b2:5d:
         11:44:40:a8:96:3b:62:1a:43:02:a4:2f:50:d6:3a:48:bf:6d:
         43:c5:1f:56:f9:93:fd:c9:46:a6:ba:44:bc:44:b9:2a:b2:a9:
         40:98:7e:36:ee:cc:ff:65:02:b8:9e:f7:e4:21:8a:9c:19:0e:
         02:3c:1f:7f:23:20:35:ea:db:eb:0e:36:91:c3:6a:64:0b:ee:
         9f:d9:c8:95:5f:c3:80:1d:57:83:a3:0c:61:dd:97:a3:38:26:
         03:02:6b:48:5f:15:b5:34:89:8a:47:ee:93:5a:f5:1b:fe:71:
         21:27:e3:d3:f0:4a:c0:d5:9d:91:8f:c4:49:5a:ee:56:2d:a2:
         83:dd:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----