Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft
File:                     0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft (raw, json)
Hash identifier:          WTEo0+WfCk2D3dVnmAm02PmqUIXG4rXQqQ74nOUC+W4=
Subject key identifier:   3F:19:86:7B:6E:A3:C2:AA:B5:C2:33:90:72:47:94:6E:D7:2A:53:11
Authority key identifier: D2:04:8E:49:89:7E:60:0F:1D:1B:D7:C4:DC:DF:FA:99:FD:2F:13:4C
Certificate issuer:       /CN=d2048e49897e600f1d1bd7c4dcdffa99fd2f134c
Certificate serial:       018C8C0981E8BAEAA8E7671216D6AFFC6E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gSOSYl-YA8dG9fE3N_6mf0vE0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft
Manifest number:          039A
Signing time:             Thu 21 Dec 2023 11:01:22 +0000
Manifest this update:     Thu 21 Dec 2023 11:01:22 +0000
Manifest next update:     Fri 22 Dec 2023 11:01:22 +0000
Files and hashes:         1: 0gSOSYl-YA8dG9fE3N_6mf0vE0w.crl (hash: IKi+PU+H61//2HbQ1sz+wiHF3kSrxaavCcP9qwDANsc=)
                          2: 5qmG1IV26TKkqTX87Dv1kXK9vQ0.roa (hash: TUSz2kcSM2bS0pVSRJ6f+kkYDvAPwVUNiIog53Bsv+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8c:09:81:e8:ba:ea:a8:e7:67:12:16:d6:af:fc:6e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2048e49897e600f1d1bd7c4dcdffa99fd2f134c
        Validity
            Not Before: Dec 21 11:01:22 2023 GMT
            Not After : Dec 22 11:01:22 2023 GMT
        Subject: CN=3f19867b6ea3c2aab5c233907247946ed72a5311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:ca:1c:96:35:d1:fb:6d:33:d6:ae:c9:41:
                    6f:c9:8a:4f:5a:e0:5d:ec:f7:0c:82:b9:c2:23:d1:
                    18:73:4d:94:a2:98:2a:f6:bf:43:15:1c:8a:53:7d:
                    fe:2c:56:c1:d4:7c:2c:99:85:28:e3:fd:68:5a:5e:
                    29:c6:95:6b:3a:52:0b:bc:77:39:da:5c:12:b1:48:
                    58:82:6d:0d:a5:76:07:cd:8e:d4:4f:6c:b8:4e:fb:
                    74:6a:78:9e:7a:7f:37:3e:fa:75:da:d3:af:51:79:
                    7d:af:f1:5a:de:63:2c:a0:44:d4:11:bb:9d:a7:f3:
                    fa:13:bf:92:4c:73:4a:56:da:f2:bb:68:21:73:dd:
                    4c:8b:64:5e:67:f5:de:44:c7:a8:0b:d1:1b:fb:e2:
                    2e:be:69:e9:76:8f:35:32:0f:79:9a:e9:f0:75:5b:
                    bb:82:d4:3f:b2:50:b2:8d:40:ec:05:84:f7:a9:a3:
                    c1:1e:b7:9e:37:0e:48:bf:b3:10:7f:ff:71:e0:fb:
                    f7:eb:e1:8a:88:ab:27:55:75:2d:b5:f7:a2:f2:4b:
                    ef:b4:d3:59:39:23:08:66:a6:de:0d:d8:5a:70:21:
                    d4:ad:33:45:37:e6:59:e5:9b:19:cf:a3:47:c4:09:
                    96:86:40:3f:e7:f8:a6:81:97:a9:d7:c2:7f:5b:22:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:19:86:7B:6E:A3:C2:AA:B5:C2:33:90:72:47:94:6E:D7:2A:53:11
            X509v3 Authority Key Identifier:
                keyid:D2:04:8E:49:89:7E:60:0F:1D:1B:D7:C4:DC:DF:FA:99:FD:2F:13:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gSOSYl-YA8dG9fE3N_6mf0vE0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:87:c3:4d:5d:b6:97:1f:fd:53:f4:52:16:2d:7f:5f:80:44:
         c3:a1:3d:e7:28:f3:e1:0d:ae:d6:02:6f:15:3f:5d:b3:00:09:
         2e:63:5a:d8:bd:18:8e:6a:b6:2f:84:fe:15:c0:3a:b3:39:8c:
         ed:c6:aa:1d:bc:18:5a:a3:7f:1b:a9:15:31:05:c6:e1:47:0c:
         e0:88:48:0a:1d:39:32:aa:63:df:e6:d6:f4:bd:ee:2d:3b:8d:
         71:6f:ca:f3:0b:ca:58:a9:1f:35:9b:09:e8:2b:93:b4:c3:e9:
         aa:c1:67:97:7b:08:ce:00:24:ba:87:3a:ef:b7:f8:06:be:0b:
         ee:19:ab:98:4e:2f:60:68:17:57:ef:e9:18:65:dc:a6:5d:94:
         42:09:d5:8d:c3:fa:46:ef:00:49:f0:a8:33:49:74:27:c1:83:
         c2:ec:5f:3d:df:9c:ad:a1:be:22:b6:ea:a3:f2:ae:5a:89:65:
         01:e0:01:32:f4:e0:98:32:14:55:5c:a3:81:d0:a0:81:df:ff:
         4c:46:bf:76:35:65:61:e2:84:45:6d:fa:9d:f1:5f:cd:bc:ba:
         9b:6c:3a:3b:5a:63:40:9c:af:be:00:6e:a2:5b:fa:08:d0:50:
         a4:fd:7e:ef:52:f9:8b:49:3a:b9:46:23:ab:da:30:d8:33:99:
         0f:a8:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----