Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59ed36-ca8c-4dfb-aa42-0d055d36a2e0/1/KPtZHsME-u2cItoULVJELN1kLiY.mft
File:                     KPtZHsME-u2cItoULVJELN1kLiY.mft (raw, json)
Hash identifier:          Tp0boQ/TN3/vAV0TRFE7sBsJrlMTlaY7KSUAsymo6OU=
Subject key identifier:   38:28:79:F2:BE:C7:DD:BF:F0:47:B3:F0:F3:87:BC:72:CA:71:5B:9E
Authority key identifier: 28:FB:59:1E:C3:04:FA:ED:9C:22:DA:14:2D:52:44:2C:DD:64:2E:26
Certificate issuer:       /CN=28fb591ec304faed9c22da142d52442cdd642e26
Certificate serial:       0188B760CEE111710D0CBBC3AFE20630185A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPtZHsME-u2cItoULVJELN1kLiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/59ed36-ca8c-4dfb-aa42-0d055d36a2e0/1/KPtZHsME-u2cItoULVJELN1kLiY.mft
Manifest number:          04C1
Signing time:             Wed 14 Jun 2023 00:49:14 +0000
Manifest this update:     Wed 14 Jun 2023 00:49:14 +0000
Manifest next update:     Thu 15 Jun 2023 00:49:14 +0000
Files and hashes:         1: F-72g5ABfa7gSHDCR_mXqGGOIu8.roa (hash: +3FsA17sRuvFZnkAIVQaw/cnbci3J5zdqmli8la6q9k=)
                          2: KPtZHsME-u2cItoULVJELN1kLiY.crl (hash: fZDYhQOAcsqpcVRvWRGkStd+OmIe5hqruY58qV/lyqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b7:60:ce:e1:11:71:0d:0c:bb:c3:af:e2:06:30:18:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28fb591ec304faed9c22da142d52442cdd642e26
        Validity
            Not Before: Jun 14 00:49:14 2023 GMT
            Not After : Jun 15 00:49:14 2023 GMT
        Subject: CN=382879f2bec7ddbff047b3f0f387bc72ca715b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:70:60:21:9e:7b:12:3f:9f:82:b6:04:c8:
                    6d:1a:3f:60:87:73:72:73:92:6c:82:37:87:83:d1:
                    28:ac:7b:11:fc:5b:60:56:80:cd:20:e5:4f:a5:36:
                    9f:a4:23:16:71:97:2b:51:79:24:78:03:fd:d2:ff:
                    e3:2a:ba:92:e6:0b:97:2c:b3:38:72:cd:67:2f:ec:
                    fd:b7:69:9a:6e:0a:11:26:b2:b0:e7:e3:63:84:4b:
                    3c:7c:c5:5b:62:70:c1:9e:69:ec:a6:75:37:fb:50:
                    56:52:77:47:c2:90:4f:dc:52:c4:32:b1:01:5d:57:
                    1e:2b:97:3f:de:14:f1:41:12:01:51:98:27:be:a2:
                    a8:4f:a2:71:96:07:fc:0b:81:1d:a6:01:82:f2:97:
                    96:f7:5b:ec:1f:99:2a:ca:03:23:a9:6b:7f:0b:ed:
                    5c:6d:66:03:af:89:dd:03:01:9f:44:d0:0a:6c:cc:
                    0f:77:7d:6e:e5:51:2c:2c:3a:5e:e1:ba:45:20:25:
                    48:32:2d:c2:ea:4e:84:4c:0f:a2:06:04:73:45:d9:
                    fc:58:a2:d2:ad:ab:3c:b2:e3:ee:52:ca:96:53:83:
                    38:65:42:e7:69:b3:df:3a:cf:85:a0:43:29:95:58:
                    6f:0e:91:5e:e7:41:42:6a:43:2d:c4:e1:2e:a3:02:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:79:F2:BE:C7:DD:BF:F0:47:B3:F0:F3:87:BC:72:CA:71:5B:9E
            X509v3 Authority Key Identifier:
                keyid:28:FB:59:1E:C3:04:FA:ED:9C:22:DA:14:2D:52:44:2C:DD:64:2E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPtZHsME-u2cItoULVJELN1kLiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59ed36-ca8c-4dfb-aa42-0d055d36a2e0/1/KPtZHsME-u2cItoULVJELN1kLiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59ed36-ca8c-4dfb-aa42-0d055d36a2e0/1/KPtZHsME-u2cItoULVJELN1kLiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:19:82:86:4f:c3:86:b9:43:11:76:6b:ad:a2:e1:ea:d4:5e:
         83:ad:46:b9:c9:b4:83:5b:c2:cc:e0:d7:20:6e:7f:ad:3a:a0:
         3c:07:ee:fe:fa:ea:14:a6:00:3a:e4:39:82:90:97:88:da:2f:
         fb:c4:e6:4e:1a:50:18:f7:2c:e2:ee:3e:7f:aa:67:0b:c9:b4:
         88:a4:f4:7e:89:52:8f:76:9c:5f:f3:01:28:84:cd:64:16:7e:
         f5:ca:1e:78:45:5b:91:3e:68:f0:6f:45:b1:3e:f8:03:31:c6:
         28:71:7e:07:8d:04:ed:86:75:da:35:26:26:4a:92:42:aa:4d:
         de:28:bb:e2:4a:b0:14:3a:ca:56:a1:95:89:76:68:21:5a:72:
         e6:df:14:a9:7b:24:99:d3:14:54:cb:bc:f5:a5:64:53:ce:25:
         15:e4:1d:ba:bc:3d:0c:54:e6:83:fc:28:c5:6e:4e:a3:39:b0:
         e3:4a:40:4f:44:e1:72:b3:ce:64:07:1b:f2:d9:cd:93:d9:09:
         aa:76:53:1f:ae:ad:50:f8:1b:45:55:6a:46:7f:54:23:09:e4:
         11:b0:20:32:f5:68:79:f9:50:0f:74:b8:4e:18:80:5c:b0:df:
         1e:3c:b7:37:05:cc:35:4f:ca:a5:36:03:a0:bc:e7:24:f7:52:
         21:f5:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----