Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/M95dyYiHIZJkrE5CHYgOiSkPRWo.mft
File:                     M95dyYiHIZJkrE5CHYgOiSkPRWo.mft (raw, json)
Hash identifier:          IuxHQd3pLywwbIH86A6+Up09narvvyVu1MJrXjZRykk=
Subject key identifier:   D6:A3:1C:0B:E3:75:46:B1:E7:20:3B:C9:97:77:53:73:F1:C8:84:C2
Authority key identifier: 33:DE:5D:C9:88:87:21:92:64:AC:4E:42:1D:88:0E:89:29:0F:45:6A
Certificate issuer:       /CN=33de5dc98887219264ac4e421d880e89290f456a
Certificate serial:       018972DC0284562DAE507FB24435466FE5E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M95dyYiHIZJkrE5CHYgOiSkPRWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/M95dyYiHIZJkrE5CHYgOiSkPRWo.mft
Manifest number:          08F0
Signing time:             Thu 20 Jul 2023 10:32:48 +0000
Manifest this update:     Thu 20 Jul 2023 10:32:48 +0000
Manifest next update:     Fri 21 Jul 2023 10:32:48 +0000
Files and hashes:         1: 1GxZjPEl3xOmeLALJLZuqJXKI-E.roa (hash: WOYtfUqracBEm2q3ufVmGyOir/t6hXZDwhDTkl6zXls=)
                          2: M95dyYiHIZJkrE5CHYgOiSkPRWo.crl (hash: KHrv55ki0loqH8K26YrrEhzKXXq/TGCZwxhNmsN9Ins=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:dc:02:84:56:2d:ae:50:7f:b2:44:35:46:6f:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33de5dc98887219264ac4e421d880e89290f456a
        Validity
            Not Before: Jul 20 10:32:48 2023 GMT
            Not After : Jul 21 10:32:48 2023 GMT
        Subject: CN=d6a31c0be37546b1e7203bc997775373f1c884c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:99:2e:a9:b1:7f:44:70:4b:0f:da:bd:57:
                    95:fd:e9:53:8e:64:39:5a:39:2c:ef:0b:b4:d9:d0:
                    e6:74:86:ac:7c:08:03:2d:85:4f:0f:71:cd:9a:18:
                    a0:f6:0d:04:f9:d2:7c:98:58:cc:7b:7c:43:63:ad:
                    72:7f:c2:0e:99:70:80:5d:2d:9c:7f:06:11:0d:1a:
                    89:13:eb:26:26:c9:a8:36:57:d9:1b:03:8d:05:cb:
                    e9:9b:5a:67:96:81:08:40:ef:9f:8e:c1:32:95:42:
                    4e:c2:f8:fb:55:73:6f:9b:7d:b8:1e:ae:c7:df:27:
                    bd:f9:81:94:c8:08:d6:71:87:f5:7b:34:ff:9c:8e:
                    9a:be:d5:d6:89:3e:d9:98:04:0d:40:50:1e:ab:c0:
                    d9:3e:20:a3:31:a9:20:59:c8:ac:3c:77:7e:c9:04:
                    05:59:1d:61:a5:0a:9f:a7:05:8e:e5:df:b2:b2:58:
                    dd:26:ba:f6:4f:dc:5d:ce:1c:20:83:a4:df:5f:7f:
                    e1:28:7c:7f:fb:a0:b4:16:30:14:5b:75:32:f0:79:
                    6b:4d:58:83:6e:ca:72:8f:bf:9c:e1:d8:b3:b7:88:
                    35:7e:09:59:d0:1c:00:3f:fc:1d:b3:52:e5:bf:2b:
                    13:36:3d:a6:32:f3:b0:b0:4e:fe:08:5f:23:1a:4e:
                    84:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A3:1C:0B:E3:75:46:B1:E7:20:3B:C9:97:77:53:73:F1:C8:84:C2
            X509v3 Authority Key Identifier:
                keyid:33:DE:5D:C9:88:87:21:92:64:AC:4E:42:1D:88:0E:89:29:0F:45:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M95dyYiHIZJkrE5CHYgOiSkPRWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/M95dyYiHIZJkrE5CHYgOiSkPRWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/M95dyYiHIZJkrE5CHYgOiSkPRWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:25:0a:b1:0c:5b:82:69:58:a3:92:0d:50:dd:b5:f1:c4:
         5b:39:70:1c:6b:e2:c8:d6:60:38:6a:1d:7d:3d:c5:8c:e0:0b:
         3b:c1:61:35:0e:f3:b4:fe:74:95:4e:54:db:5e:ad:4d:38:c8:
         78:2a:0a:f0:7a:7a:25:47:d5:0d:74:cb:21:3c:47:e1:d1:c0:
         4e:6a:ba:5b:57:ae:59:77:06:b3:f9:96:3d:85:8c:69:88:7b:
         72:78:1c:23:5d:06:06:fd:a0:1b:0c:88:e6:bc:e9:1a:d7:a0:
         32:71:4c:c3:71:f6:fa:34:ec:35:e8:01:00:a2:a8:f7:e6:7b:
         26:ee:42:d4:81:ed:0c:5e:dd:8a:e2:6b:c7:cd:cd:b0:03:ff:
         f3:5e:44:5d:43:67:12:d5:39:e4:55:b7:0a:40:36:9f:38:a0:
         1e:b8:1b:85:6d:b3:e1:b1:ef:82:cd:89:e8:15:7f:3b:1f:39:
         b3:2b:88:8b:6e:8b:06:1f:c3:1f:70:22:49:ff:e6:ae:98:c8:
         6b:39:8f:6f:07:e4:f4:a2:21:46:03:1a:d4:f5:65:17:0c:67:
         03:f4:c0:f1:ce:28:83:5b:69:6f:9e:24:1d:dc:4a:e8:3a:94:
         e1:53:cb:1f:e5:d3:7b:c0:04:37:37:b3:4e:c3:53:14:72:de:
         fc:39:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----