Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft
File:                     l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft (raw, json)
Hash identifier:          e/FZQGuXeMT+CIa48cC3B2tqfbK1cpFNn2IF/UBdPcw=
Subject key identifier:   BC:7B:41:7A:0C:BF:3D:83:51:D2:DF:04:F4:11:B0:16:FF:A6:40:3B
Authority key identifier: 97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
Certificate issuer:       /CN=97743d346356469b4b6939463c96df2b8a39065c
Certificate serial:       018C8C6B3EAD5ECB118FFBA3F41D2BD6ED32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft
Manifest number:          08A9
Signing time:             Thu 21 Dec 2023 12:48:07 +0000
Manifest this update:     Thu 21 Dec 2023 12:48:07 +0000
Manifest next update:     Fri 22 Dec 2023 12:48:07 +0000
Files and hashes:         1: 4E6QsQtwm3GAQ3n9fuUWdbJpNkM.roa (hash: HPDxF4SnKFtXZhcMKFJK0iSJssJ2eoc5TW3246LlWks=)
                          2: l3Q9NGNWRptLaTlGPJbfK4o5Blw.crl (hash: iNTkW9GVG+o7LolmnqY6pUJBt8xankGug27JHqlYmZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8c:6b:3e:ad:5e:cb:11:8f:fb:a3:f4:1d:2b:d6:ed:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97743d346356469b4b6939463c96df2b8a39065c
        Validity
            Not Before: Dec 21 12:48:07 2023 GMT
            Not After : Dec 22 12:48:07 2023 GMT
        Subject: CN=bc7b417a0cbf3d8351d2df04f411b016ffa6403b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0a:26:8d:0d:cd:5f:7f:74:1c:fc:c3:dd:5a:
                    25:a5:dc:dd:dd:58:e9:5a:e7:ca:d8:69:6e:0a:c3:
                    b9:e3:67:e8:2e:77:07:04:a7:c7:e3:c8:ec:3b:90:
                    9b:2d:02:33:bd:98:19:61:83:20:1b:df:43:00:c8:
                    11:f5:ce:eb:cd:8f:a2:e9:28:1c:95:71:20:21:25:
                    a2:42:d2:1c:a3:77:28:6b:2f:64:53:7f:ca:fd:87:
                    25:c8:49:83:32:37:cb:92:9c:82:79:23:56:59:68:
                    3a:23:53:b1:a9:46:d3:20:06:e2:c5:f1:27:6d:b5:
                    b9:54:ce:7b:4e:09:79:47:5a:e4:61:f9:31:3a:f7:
                    60:03:7a:8a:22:d9:cf:ac:c2:f9:27:92:d0:58:36:
                    25:dc:e5:cc:55:9c:9c:df:2d:bc:25:d5:00:99:ac:
                    82:31:b3:c9:4d:22:5c:24:73:30:85:a1:ea:65:81:
                    a0:e1:a9:bf:da:ab:dc:7c:15:43:4b:27:da:ca:48:
                    4c:9e:35:d1:d1:0b:82:88:73:ed:bc:50:56:b6:be:
                    dc:bf:75:87:64:3b:14:7d:59:e9:c8:1e:20:39:db:
                    3b:26:f6:d0:36:b7:33:21:d0:bd:87:50:07:ae:48:
                    5b:61:b8:c7:5d:50:fc:50:0b:2c:19:ad:80:1c:b3:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7B:41:7A:0C:BF:3D:83:51:D2:DF:04:F4:11:B0:16:FF:A6:40:3B
            X509v3 Authority Key Identifier:
                keyid:97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:31:ad:99:41:b0:69:cf:5f:d3:69:98:1c:c0:63:77:ec:d7:
         43:3e:27:00:9b:11:bd:8a:f4:b1:5c:43:93:95:28:10:3b:75:
         7e:db:0a:d5:e7:16:69:44:5a:f4:f2:62:8b:29:be:6c:f6:d4:
         86:0b:ab:ae:7f:e6:fa:45:31:69:7d:59:ce:b3:ec:e4:ec:2a:
         2e:d2:9a:ef:69:c6:d1:af:e7:dc:3d:46:f2:a7:7a:da:d0:93:
         73:8d:df:78:b4:d8:02:1b:22:26:cd:2f:49:40:39:67:40:2d:
         77:e3:d4:7d:b6:7e:e5:37:f2:20:01:db:bf:b5:e7:6a:65:48:
         c7:d4:02:ee:0d:94:e8:cb:68:01:6f:e5:1f:3c:67:29:73:6c:
         7f:3e:f0:37:95:9b:02:a8:e5:9d:33:5b:f1:25:ac:af:cd:7b:
         1c:b1:fa:40:5c:13:83:de:a7:b0:33:cf:4a:62:58:86:b4:57:
         d6:bb:16:81:06:2f:45:9e:02:f9:f3:84:f7:e6:58:f4:aa:df:
         d6:5c:c0:44:ee:f9:18:01:bd:8f:f7:b6:54:fb:01:22:40:a5:
         b5:87:6c:b8:86:1c:5b:05:33:0c:cc:2f:d3:c5:7d:02:ba:9b:
         e2:1b:f3:8c:d2:22:54:fe:1e:b2:cf:83:7b:64:01:cc:5e:0c:
         e2:ef:3f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----