Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft
File:                     4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft (raw, json)
Hash identifier:          xqJp8zkJtyZXxP/dE6IoSBCL5t+4JiutmgaSCifSwx4=
Subject key identifier:   1E:A2:47:DA:27:7E:A2:B9:F2:9D:B5:E7:FB:5E:EF:F0:11:CF:22:CC
Authority key identifier: E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
Certificate issuer:       /CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
Certificate serial:       0188B90F0D1A80FCAC2D54695DC13DACA891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft
Manifest number:          0DDD
Signing time:             Wed 14 Jun 2023 08:39:11 +0000
Manifest this update:     Wed 14 Jun 2023 08:39:11 +0000
Manifest next update:     Thu 15 Jun 2023 08:39:11 +0000
Files and hashes:         1: 4Uqaxyzosoq2NJ2tB19O7D3LhH0.crl (hash: I8WcYlC0UBXWDQlT2guP9UQCX7nzQtnBnn+6XO35NhU=)
                          2: dVUChmjEOY0ib68ccijGM9A8JcM.roa (hash: nnE0yoogmTw4KcP2Z0nOvyefiIkmKzIon8cnkGvLczg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:0f:0d:1a:80:fc:ac:2d:54:69:5d:c1:3d:ac:a8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
        Validity
            Not Before: Jun 14 08:39:11 2023 GMT
            Not After : Jun 15 08:39:11 2023 GMT
        Subject: CN=1ea247da277ea2b9f29db5e7fb5eeff011cf22cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:ec:5d:1f:dd:ce:f6:f2:50:78:db:6b:18:
                    71:62:7b:75:e4:92:89:36:72:4e:67:86:13:be:db:
                    de:ba:a0:b0:5e:7e:a4:9a:b4:57:72:5b:71:9b:f6:
                    d8:42:ad:e8:dc:06:95:54:da:99:8f:58:8e:ee:47:
                    3e:3c:c6:46:c8:ff:d2:a2:bf:64:8a:12:be:aa:70:
                    85:6d:88:42:68:32:2b:04:39:b0:db:2d:6a:0d:7c:
                    bc:60:60:ef:2a:f5:0a:d1:ce:4a:22:69:39:b6:3c:
                    55:76:34:10:a1:0c:d9:7f:e3:92:6b:3b:73:53:3f:
                    2e:62:ce:b8:91:02:6a:f3:58:f1:11:29:7c:ce:67:
                    14:75:2d:65:db:29:64:84:a2:05:49:2b:25:cc:55:
                    e5:0b:57:f3:d8:aa:2d:eb:8a:46:d8:b7:ca:81:24:
                    50:72:ab:0b:d3:37:80:dd:5e:74:0f:ad:e9:21:44:
                    49:01:46:0d:be:a0:7d:f8:99:de:2d:4c:3b:09:ce:
                    b4:f5:93:e5:59:c6:c1:6e:e5:53:25:58:31:d9:be:
                    c8:96:ca:bc:6e:cf:60:24:a4:e0:87:4b:17:32:4a:
                    a7:22:5b:cf:48:46:4b:9e:ad:e0:1f:90:3d:12:fe:
                    3e:9a:fd:e3:27:90:af:1a:e8:26:51:37:e7:83:9d:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A2:47:DA:27:7E:A2:B9:F2:9D:B5:E7:FB:5E:EF:F0:11:CF:22:CC
            X509v3 Authority Key Identifier:
                keyid:E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:9f:36:4d:8b:26:9e:a7:fa:de:8c:9f:7d:c0:5c:5f:c2:
         43:e4:8f:36:57:ac:60:77:d8:77:95:d1:42:7d:db:7f:8e:91:
         de:ce:fd:d7:4f:3f:a0:d0:cd:0d:3b:7d:63:3f:3e:59:4a:50:
         d1:c1:c0:fa:44:3f:92:4c:00:bb:aa:18:9e:56:ac:78:f3:9b:
         b1:9f:49:f8:f1:d9:cb:52:d5:38:95:29:74:22:80:bc:4a:5e:
         f0:45:fe:bc:05:e9:a0:3b:f5:4d:f4:a4:33:24:9b:78:34:75:
         92:a5:b0:6f:2f:b2:8a:ad:b5:c3:aa:10:19:4d:6a:ef:46:d2:
         c2:d5:56:e6:58:d4:c1:36:01:58:20:97:2e:db:5f:83:bc:07:
         53:c7:ee:51:ff:3d:24:76:8f:67:43:c9:52:da:0c:0d:7c:cc:
         33:90:55:75:9b:db:af:a8:af:f6:fa:f7:35:fc:2a:2f:7e:05:
         40:d4:9c:08:e7:55:bb:7c:3f:0e:21:fa:a8:35:ef:9d:11:ca:
         90:7a:47:69:2b:3d:74:d1:92:e2:18:fb:87:0d:c8:b1:05:a8:
         53:87:44:6a:2d:55:7b:85:51:90:9e:7e:d9:32:57:bc:59:31:
         cc:08:cb:01:42:57:a7:ba:5d:7e:7a:b1:b3:43:20:fe:2a:47:
         5f:b8:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----