Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.mft
File:                     alaUz0M1bOQXInM-gN_DiIf0ZVQ.mft (raw, json)
Hash identifier:          RQ8tSewBTSpUFK/LJOpgKS47XN7ki/B3kMAcyMZ+Nb8=
Subject key identifier:   C5:3B:4D:FA:28:B8:46:B3:1D:9F:54:EF:3B:74:D7:C1:5D:09:FC:68
Authority key identifier: 6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
Certificate issuer:       /CN=6a5694cf43356ce41722733e80dfc38887f46554
Certificate serial:       01880FB4650961C6E71AD7AFF2DE501E683E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.mft
Manifest number:          0473
Signing time:             Fri 12 May 2023 11:24:20 +0000
Manifest this update:     Fri 12 May 2023 11:24:20 +0000
Manifest next update:     Sat 13 May 2023 11:24:20 +0000
Files and hashes:         1: alaUz0M1bOQXInM-gN_DiIf0ZVQ.crl (hash: HBAUf0/PwNVTvCN24wVmo6fnOlC1gyxi8DNG1PsSb9o=)
                          2: leC2yIOI3-kS4ogrfW5h99ht95w.roa (hash: eX52NqKRmWxtIkXKYWZ0d1I2a4Qh4kulhNzV5FtGwqA=)
                          3: qTiUd4Lv-eH9nVY7wp92mBjkVLQ.roa (hash: NLvdtwSBgKKzelIFhzlKjFfNbYhfwCUI09f+VcHD3vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0f:b4:65:09:61:c6:e7:1a:d7:af:f2:de:50:1e:68:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5694cf43356ce41722733e80dfc38887f46554
        Validity
            Not Before: May 12 11:24:20 2023 GMT
            Not After : May 13 11:24:20 2023 GMT
        Subject: CN=c53b4dfa28b846b31d9f54ef3b74d7c15d09fc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:f4:d8:4d:17:e3:fc:6a:31:d7:ac:e5:5b:
                    51:7a:aa:1b:3e:2f:5e:72:62:e7:b7:8d:4d:78:dc:
                    5b:80:9f:6d:ba:75:79:77:fd:21:c3:01:f2:14:c2:
                    b1:f4:41:0c:53:d0:df:6b:ca:b9:1d:9b:db:ea:c6:
                    94:33:0c:ac:5d:c8:1e:a9:27:02:62:3e:c0:f1:6f:
                    bd:4f:80:7c:43:87:99:69:91:98:5d:41:1d:9a:1e:
                    b1:0c:be:dc:ca:8f:3f:ad:64:1c:26:f1:1b:6b:3e:
                    d1:f4:7a:4e:f7:cd:a1:e5:35:d8:bb:55:e1:c8:44:
                    a6:83:5d:3a:54:da:bc:e7:80:0e:34:03:c4:e7:e2:
                    f0:9c:bb:2f:a6:99:7f:18:23:67:0b:8c:fe:b1:a5:
                    b7:91:fc:3c:95:b8:dd:d6:8d:e6:fa:a4:28:d2:ec:
                    8a:7e:06:79:70:05:3e:9c:1e:d7:0a:a4:16:33:1d:
                    17:e4:52:73:6e:07:c6:a6:3c:af:87:20:07:f0:85:
                    8e:a2:64:79:3c:90:04:e5:2b:42:a2:56:a7:3b:fc:
                    11:c6:df:b9:0d:09:8b:85:53:9e:f4:13:ca:ea:38:
                    b0:f8:5d:e8:d7:36:88:ee:1c:27:de:9f:c6:e8:79:
                    65:16:63:25:1c:3f:bb:25:34:ac:dd:4b:1c:46:ca:
                    f3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3B:4D:FA:28:B8:46:B3:1D:9F:54:EF:3B:74:D7:C1:5D:09:FC:68
            X509v3 Authority Key Identifier:
                keyid:6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:99:71:e7:5b:9f:72:16:cd:24:11:6a:5a:75:ba:30:19:
         e2:38:56:f9:62:ef:f0:4f:04:87:ef:62:8f:45:f8:ff:1c:3e:
         a0:a5:27:bc:2d:d0:7c:0e:ce:7e:d8:9b:cd:62:ad:99:11:5f:
         5e:ee:bf:16:92:4c:99:48:5f:d1:56:10:57:f5:8c:44:3e:32:
         d4:fd:f1:e5:05:5c:50:dd:83:c7:bd:ba:46:84:33:bf:00:d7:
         0e:6f:a0:95:de:75:e3:56:42:6c:8d:f1:20:85:17:d4:82:a2:
         55:8e:a8:9d:53:68:73:d9:02:e4:56:52:4a:1e:f2:b2:b3:06:
         38:92:0e:3f:d8:bf:68:27:96:2b:62:29:7d:80:6c:b1:5b:17:
         c1:3a:b5:9d:4b:97:9c:80:4d:44:b1:fe:65:44:51:dd:57:eb:
         05:a7:00:d2:86:30:f3:c0:13:13:22:04:4f:82:f2:0d:87:dc:
         3b:67:34:9c:bc:5f:ef:e5:6f:f6:da:c9:0e:50:ae:6b:68:d5:
         4d:3b:e7:44:ce:3b:73:9a:c3:12:b8:43:8f:c2:d3:ef:8d:c6:
         e5:aa:38:40:ec:cf:5c:b5:58:90:12:60:a5:60:44:14:5c:fd:
         11:23:4a:c6:0f:8a:25:b4:4e:e3:01:1d:29:e2:2b:c7:07:33:
         2b:fe:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----