Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9368b5-53a5-4314-b19f-9f24143249b5/1/uzkhJtxMyrQaKjKu3NeW5m7Tqao.mft
File:                     uzkhJtxMyrQaKjKu3NeW5m7Tqao.mft (raw, json)
Hash identifier:          2IZfG/WmrLbfHBybYG7kXSoE6ICT098sVrd4XxlcmdU=
Subject key identifier:   20:B2:8A:86:FC:23:2F:81:BC:6C:88:5A:8A:DD:69:CC:30:FF:CE:E6
Authority key identifier: BB:39:21:26:DC:4C:CA:B4:1A:2A:32:AE:DC:D7:96:E6:6E:D3:A9:AA
Certificate issuer:       /CN=bb392126dc4ccab41a2a32aedcd796e66ed3a9aa
Certificate serial:       018BB876FBEEE2CD0DAC3835D62D0613D62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzkhJtxMyrQaKjKu3NeW5m7Tqao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9368b5-53a5-4314-b19f-9f24143249b5/1/uzkhJtxMyrQaKjKu3NeW5m7Tqao.mft
Manifest number:          0811
Signing time:             Fri 10 Nov 2023 09:01:27 +0000
Manifest this update:     Fri 10 Nov 2023 09:01:27 +0000
Manifest next update:     Sat 11 Nov 2023 09:01:27 +0000
Files and hashes:         1: muhHLicioQp4fylVPXKlOXfzQjo.roa (hash: TWF59x6CroGht+0eCzOB+XJAFaXuICnbompsnqOefnM=)
                          2: uzkhJtxMyrQaKjKu3NeW5m7Tqao.crl (hash: Yalnx4EeKUGTIw2dAjKBEHxK4iIa9/u+Yh42H3/9cn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:76:fb:ee:e2:cd:0d:ac:38:35:d6:2d:06:13:d6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb392126dc4ccab41a2a32aedcd796e66ed3a9aa
        Validity
            Not Before: Nov 10 09:01:27 2023 GMT
            Not After : Nov 11 09:01:27 2023 GMT
        Subject: CN=20b28a86fc232f81bc6c885a8add69cc30ffcee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7f:28:f0:96:81:72:16:c4:51:3d:cf:ba:82:
                    7f:45:71:d7:58:2d:2f:4f:56:3d:6c:56:d9:f9:28:
                    b3:bc:b4:bc:80:3a:b4:25:79:79:ac:f4:1b:32:f6:
                    3a:1e:80:7b:c2:4e:c2:95:02:42:e3:da:82:ca:f6:
                    39:5f:95:ac:97:5e:f2:bd:68:1e:d5:e6:8c:c8:2b:
                    5e:f8:77:1e:4d:91:26:ed:8c:6d:82:a6:d9:56:6a:
                    4e:38:6a:c3:77:97:13:c3:43:0d:2b:ef:cd:78:52:
                    e9:02:da:57:e3:c7:66:9a:5c:d8:0f:71:34:ad:34:
                    6e:be:af:23:52:dc:3a:e7:39:a6:f7:18:11:df:c1:
                    de:87:a5:d4:f5:56:7d:e8:f7:6e:5c:2c:c1:7c:79:
                    d3:cf:aa:ac:96:ac:e1:46:0c:06:d5:93:8e:05:7a:
                    ef:97:69:17:83:70:0b:ed:6f:04:df:a3:85:77:5b:
                    c0:d0:c6:d8:6c:e8:47:93:d4:9e:8b:4d:b3:55:03:
                    c0:ed:5f:84:6b:8a:15:ea:28:7c:83:97:bd:7a:72:
                    9b:0f:78:5e:04:1b:cc:22:c8:70:ef:60:99:7a:b7:
                    22:73:cc:db:dc:19:de:45:12:a7:d9:54:5a:91:3a:
                    25:e7:30:4d:d2:04:cf:90:be:ab:10:1c:29:ab:f4:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B2:8A:86:FC:23:2F:81:BC:6C:88:5A:8A:DD:69:CC:30:FF:CE:E6
            X509v3 Authority Key Identifier:
                keyid:BB:39:21:26:DC:4C:CA:B4:1A:2A:32:AE:DC:D7:96:E6:6E:D3:A9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzkhJtxMyrQaKjKu3NeW5m7Tqao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9368b5-53a5-4314-b19f-9f24143249b5/1/uzkhJtxMyrQaKjKu3NeW5m7Tqao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9368b5-53a5-4314-b19f-9f24143249b5/1/uzkhJtxMyrQaKjKu3NeW5m7Tqao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e7:3b:1e:60:44:77:af:7a:47:3e:b8:7c:5d:5a:53:e8:10:
         aa:6a:93:c1:cd:ac:d6:19:e4:31:45:b3:e8:cc:dc:14:c6:aa:
         2c:ad:79:23:93:a7:0c:d6:f0:b1:eb:d5:08:3d:02:39:54:27:
         6b:39:31:63:b4:19:98:34:b3:5a:08:12:87:54:69:82:37:13:
         7d:cf:90:b2:db:81:6e:c6:4e:54:74:64:68:c3:db:4d:eb:a8:
         24:f7:eb:28:5a:66:63:c4:b1:2f:1e:08:e8:be:b9:5b:aa:fa:
         89:83:cd:ff:13:84:8a:de:c7:f7:55:06:02:5a:71:e8:1a:24:
         12:74:4a:3e:f9:29:cb:55:75:e6:28:ea:70:1b:6d:5b:c6:35:
         f0:37:73:7c:44:99:3c:ab:0f:49:93:19:ab:0e:93:ad:f1:c8:
         cb:fc:9d:e9:80:b9:a6:b5:76:34:92:16:cb:7c:ae:7d:04:83:
         42:fe:a1:22:66:c2:a3:1a:1c:f1:91:a3:98:27:2c:63:e8:fa:
         5f:b6:64:80:bb:85:5f:94:73:40:3d:5a:13:97:22:da:85:5d:
         4e:b8:79:87:c4:b6:08:d1:6f:a4:a4:a6:f8:1f:14:8f:0a:2f:
         73:2c:b7:ba:93:93:54:5f:6c:1d:75:c2:e3:c8:df:73:e3:40:
         ef:40:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----