Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/a5d3a4-b1b8-4ed7-b27f-7349d293ac1a/1/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.mft
File:                     _3SPG5tL0MtgBJ6DxlUmZ3Vst3U.mft (raw, json)
Hash identifier:          gv/l0GKZRMmeBjWsIlYQso7IhFZh6Rrn0LvWeT0EKx4=
Subject key identifier:   44:16:32:C4:EB:F1:D0:25:DA:29:0B:82:E5:0E:AA:8A:20:02:B9:5D
Authority key identifier: FF:74:8F:1B:9B:4B:D0:CB:60:04:9E:83:C6:55:26:67:75:6C:B7:75
Certificate issuer:       /CN=ff748f1b9b4bd0cb60049e83c6552667756cb775
Certificate serial:       018AF30DF3A79631C19EA29AD85BC3C26612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/a5d3a4-b1b8-4ed7-b27f-7349d293ac1a/1/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.mft
Manifest number:          051C
Signing time:             Tue 03 Oct 2023 01:01:32 +0000
Manifest this update:     Tue 03 Oct 2023 01:01:32 +0000
Manifest next update:     Wed 04 Oct 2023 01:01:32 +0000
Files and hashes:         1: _3SPG5tL0MtgBJ6DxlUmZ3Vst3U.crl (hash: vKbK1VflcZnAcXL7o/Iy3v9AYp95SMdAqFR1BLaNOnY=)
                          2: x2iZIuRvun5Foj2vwW6Uquy38VA.roa (hash: MnG+epUG9SmFBDZVNHnlneNlnA8MOYsHDiBP6BZnNBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f3:0d:f3:a7:96:31:c1:9e:a2:9a:d8:5b:c3:c2:66:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff748f1b9b4bd0cb60049e83c6552667756cb775
        Validity
            Not Before: Oct  3 01:01:32 2023 GMT
            Not After : Oct  4 01:01:32 2023 GMT
        Subject: CN=441632c4ebf1d025da290b82e50eaa8a2002b95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:e3:03:0c:1d:07:dd:4e:a8:bb:7e:77:12:
                    39:3e:4e:26:13:00:0f:fb:1c:11:a1:e3:02:6b:03:
                    bd:d1:92:c9:5b:91:c1:ab:47:33:9a:05:36:0a:f2:
                    ea:7b:96:e4:6f:af:6d:44:16:ce:8c:48:cd:2d:3b:
                    c7:37:3f:5d:59:46:b1:76:8a:ef:34:de:7b:8e:81:
                    46:d9:14:65:f4:9e:1e:09:9a:ed:68:54:03:c4:8b:
                    91:c4:33:11:47:64:d3:db:70:b2:ec:61:4d:79:bd:
                    d6:41:75:46:2e:3a:3d:24:dd:7f:11:3f:87:da:e8:
                    0a:86:23:95:68:be:bc:5a:90:a6:4b:ab:31:21:94:
                    b8:46:fc:ec:14:91:4e:59:64:56:09:56:cb:15:24:
                    a4:d7:7d:22:7c:ab:5c:26:79:75:8f:ff:d9:ca:b6:
                    4a:53:a5:5a:25:ec:93:a0:cb:e9:65:90:3b:16:e2:
                    4d:e1:2e:22:ea:12:31:80:9d:28:01:c9:c0:ff:8f:
                    55:c3:8b:b0:80:34:16:97:72:8b:0d:ab:ac:5e:39:
                    3c:fe:88:79:9b:84:0b:76:58:dc:95:8e:bd:e5:5b:
                    9f:2b:31:ac:79:18:92:97:d7:54:16:38:33:0a:02:
                    88:48:76:91:70:86:cf:41:03:aa:12:ba:c0:7e:2c:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:16:32:C4:EB:F1:D0:25:DA:29:0B:82:E5:0E:AA:8A:20:02:B9:5D
            X509v3 Authority Key Identifier:
                keyid:FF:74:8F:1B:9B:4B:D0:CB:60:04:9E:83:C6:55:26:67:75:6C:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a5d3a4-b1b8-4ed7-b27f-7349d293ac1a/1/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a5d3a4-b1b8-4ed7-b27f-7349d293ac1a/1/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:6f:5a:1e:89:c9:f9:b3:81:e3:0e:04:f5:bc:79:ab:d7:
         1e:d4:5b:f5:6c:73:c2:8d:4a:bd:5e:3d:5d:5c:c9:9e:38:6a:
         ab:58:37:82:ab:92:0f:9f:54:9f:19:69:ee:8f:45:47:75:69:
         fe:7b:91:01:05:c4:0d:91:19:80:61:35:6c:26:3a:6c:73:cf:
         07:0b:29:f9:eb:f6:15:03:64:80:67:9a:70:cf:9f:7c:71:06:
         99:57:a4:da:6e:a1:b1:d9:88:de:95:09:49:dc:a4:eb:bb:94:
         be:34:62:a5:75:0a:97:16:11:bd:ee:00:97:47:96:0f:5a:72:
         ad:b8:3b:f7:c1:1e:cf:96:d8:99:4d:f1:df:29:46:f0:8f:0b:
         6d:e3:f4:17:b3:19:ee:bc:77:3e:6e:5a:cd:fe:44:a0:78:45:
         60:ce:f8:72:0c:e1:67:3d:28:cf:c2:a8:fc:af:9b:e5:64:e7:
         a3:b5:29:e6:73:a3:65:12:a2:00:e3:18:59:48:a1:13:95:98:
         3f:b7:26:40:96:da:e1:f1:24:71:de:b7:fd:fa:84:80:1e:8e:
         1e:25:13:e7:28:59:09:5f:20:d3:eb:e3:73:e4:1a:fe:2c:f9:
         31:3c:09:98:d2:5b:fd:1c:93:2a:5f:d2:77:a2:ea:07:cb:28:
         02:f8:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----