Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/qjCPmVaUH6ONvozovSypddEbFi8.mft
File:                     qjCPmVaUH6ONvozovSypddEbFi8.mft (raw, json)
Hash identifier:          5eNAAKSmGUJ8CHYm0vXHcTcvpOd7cfhhizvjb7UVwXU=
Subject key identifier:   37:96:37:1C:76:12:F6:B4:74:CB:67:FE:A5:FC:AB:38:36:6C:CC:F7
Authority key identifier: AA:30:8F:99:56:94:1F:A3:8D:BE:8C:E8:BD:2C:A9:75:D1:1B:16:2F
Certificate issuer:       /CN=aa308f9956941fa38dbe8ce8bd2ca975d11b162f
Certificate serial:       018A8ED85A76168169B61FA833E67EF1C7A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjCPmVaUH6ONvozovSypddEbFi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/qjCPmVaUH6ONvozovSypddEbFi8.mft
Manifest number:          0115
Signing time:             Wed 13 Sep 2023 14:00:58 +0000
Manifest this update:     Wed 13 Sep 2023 14:00:58 +0000
Manifest next update:     Thu 14 Sep 2023 14:00:58 +0000
Files and hashes:         1: 2vmJ8Xm6jy4uA6z5XeZSVZcn_ww.roa (hash: D3HqqkS1iUWDvgtQnwHyhoR6jsq8kwnMgKLkk32EAws=)
                          2: goXCUeOfZ5-cQ04skoEaAhj8RDo.roa (hash: uOzOA2SYlLihIJFarNXqamqX3NhQtTM647Hu4z4Wkb0=)
                          3: qjCPmVaUH6ONvozovSypddEbFi8.crl (hash: /QTobIF4dF71GKNU+8F7CJ0hyu9Ju98CBrYQlDsy9qM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8e:d8:5a:76:16:81:69:b6:1f:a8:33:e6:7e:f1:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa308f9956941fa38dbe8ce8bd2ca975d11b162f
        Validity
            Not Before: Sep 13 14:00:58 2023 GMT
            Not After : Sep 14 14:00:58 2023 GMT
        Subject: CN=3796371c7612f6b474cb67fea5fcab38366cccf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:50:64:ef:13:1d:a7:8c:98:7d:a9:62:bc:
                    d1:b2:58:d3:99:31:33:8c:85:9c:51:32:37:98:74:
                    44:f6:ed:71:76:98:bf:66:46:b5:00:90:03:22:2a:
                    2d:b2:77:f8:c7:44:f4:d5:a5:7e:87:f2:b8:53:33:
                    23:49:47:16:4c:50:75:0b:ab:06:9a:5f:18:92:68:
                    e7:e8:8c:03:9b:95:b9:d2:66:7b:73:c6:1f:b7:7a:
                    66:4f:d4:ec:58:0b:9a:6b:3b:8b:05:34:ab:ee:fd:
                    c4:a9:29:74:22:de:9c:24:49:76:d3:ee:29:6d:64:
                    65:7f:da:26:95:a1:39:4d:63:10:f7:67:54:1c:f8:
                    18:43:e8:61:76:56:a4:2d:75:d5:d7:30:40:25:c5:
                    3d:ef:55:bc:7a:b6:5d:8a:88:95:37:82:4c:2b:b1:
                    9b:a9:be:af:a7:b8:a8:a8:70:96:07:04:a6:a1:fb:
                    92:3a:b1:8a:de:31:59:11:ef:ad:12:8e:64:e9:da:
                    8f:04:b5:e5:c3:97:d1:b1:69:1c:06:3a:01:76:b6:
                    85:7c:3a:6a:07:59:01:b5:0b:40:e0:51:c4:13:be:
                    3e:c6:88:e1:d5:b0:da:e5:64:ea:e8:8c:4f:1f:b0:
                    a5:18:9f:e6:1b:8a:d9:2a:e6:8c:3e:cd:7c:6f:37:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:96:37:1C:76:12:F6:B4:74:CB:67:FE:A5:FC:AB:38:36:6C:CC:F7
            X509v3 Authority Key Identifier:
                keyid:AA:30:8F:99:56:94:1F:A3:8D:BE:8C:E8:BD:2C:A9:75:D1:1B:16:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjCPmVaUH6ONvozovSypddEbFi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/qjCPmVaUH6ONvozovSypddEbFi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/qjCPmVaUH6ONvozovSypddEbFi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:29:fc:35:81:a8:d3:3d:34:b7:50:1e:b0:31:80:3e:4f:54:
         d6:90:20:4d:22:48:f4:b6:69:4e:1b:28:fe:59:c9:d7:0e:6e:
         ac:45:af:b9:85:78:ba:6e:41:23:ce:d5:ca:e1:8d:e2:03:fb:
         33:ba:f7:37:29:70:85:3c:35:a3:eb:80:dc:0b:86:ae:7a:33:
         9e:a7:e4:fe:90:97:23:be:1b:60:56:fe:73:d1:63:e0:49:69:
         99:fc:99:25:56:e7:04:89:c3:a9:b7:a2:f4:41:b7:3e:d7:68:
         c0:fd:45:16:82:87:06:62:4b:2e:a0:e2:90:ac:fa:df:98:95:
         10:e0:30:38:1b:ac:c8:47:cd:10:c6:56:de:61:ac:48:71:34:
         17:5e:3b:a3:67:f4:0c:a1:30:af:64:c7:ad:b5:70:83:45:18:
         ac:cf:9c:4c:ee:fe:5f:31:94:28:55:80:a8:ea:5c:93:72:20:
         7a:fc:09:a1:71:0c:90:5b:50:04:3b:47:31:00:e5:af:ef:23:
         e2:6a:51:77:78:cc:f2:a3:35:e8:02:ce:51:aa:69:41:0e:a3:
         9e:c4:4d:76:22:bb:17:e2:66:2f:c7:37:0d:c4:13:a8:fa:1c:
         21:34:b9:60:7c:a7:4b:07:e5:7c:87:b0:10:07:99:4d:59:77:
         61:a9:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----