Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.mft
File:                     bJo0xSHqYHPgnCBJNPfODqCGuhs.mft (raw, json)
Hash identifier:          ZZjCTG/LPy/fxg2/LrwoorBDAmSoNTFKFoM7tTf+VpI=
Subject key identifier:   63:D5:AF:39:A7:22:AE:D0:A3:E7:22:5F:6D:26:78:82:BA:2F:A7:90
Authority key identifier: 6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
Certificate issuer:       /CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
Certificate serial:       018BDCBA21522C758EBCD01ED6CFC468FF8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.mft
Manifest number:          086A
Signing time:             Fri 17 Nov 2023 10:01:07 +0000
Manifest this update:     Fri 17 Nov 2023 10:01:07 +0000
Manifest next update:     Sat 18 Nov 2023 10:01:07 +0000
Files and hashes:         1: QUv0TTJetpkNeA9mFBI0864f0ZY.roa (hash: jPz3GYJOI9IBQrx5ER4zczjjfIZScueV77soH3/L1dQ=)
                          2: bJo0xSHqYHPgnCBJNPfODqCGuhs.crl (hash: nRc2RuuVhAD5xeTN+QHbXtNu5gvzpzFfSoXdiz5Jzi0=)
                          3: p-BH3PEuZPIWyqJeM0tYr_8Tn14.roa (hash: 7RrZVfQt/4V04fKkYl+YARzhUY1McXI3RR6+UKlOjGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:ba:21:52:2c:75:8e:bc:d0:1e:d6:cf:c4:68:ff:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
        Validity
            Not Before: Nov 17 10:01:07 2023 GMT
            Not After : Nov 18 10:01:07 2023 GMT
        Subject: CN=63d5af39a722aed0a3e7225f6d267882ba2fa790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:54:2f:0d:bb:cb:06:a5:51:5e:68:e0:59:
                    d1:a6:fd:9d:79:88:c3:9b:02:2c:17:40:ef:2a:1c:
                    ed:7e:7a:bc:ec:22:b1:57:64:f2:85:5d:f2:10:52:
                    f3:ac:61:4b:bc:ea:76:da:dd:b7:2a:47:de:ac:cf:
                    21:ae:32:07:c0:eb:c3:97:6f:0f:e6:fd:10:93:48:
                    ac:15:8c:a4:81:b1:fe:78:9c:e1:b1:3a:86:91:7f:
                    77:1d:68:41:69:c6:1b:ee:9a:67:b3:21:a1:26:69:
                    7d:20:f7:93:e5:80:a0:95:db:1c:7f:09:b2:af:1a:
                    f7:2b:6e:18:09:85:34:21:0c:54:49:d3:6b:49:7c:
                    53:68:8c:9d:5e:43:fc:85:d7:f1:f6:56:9c:64:a8:
                    25:14:e7:cf:43:47:45:eb:a4:49:50:5b:c3:53:a9:
                    20:0e:bd:ec:88:39:e4:bf:c2:67:a4:08:17:6a:a5:
                    e6:d6:b7:41:e7:4a:20:98:8f:41:6e:7d:d5:f4:10:
                    3a:83:84:e8:2d:e8:11:33:fd:82:f4:04:6e:16:a6:
                    9d:83:cc:2d:75:a5:b4:0f:c4:0d:20:2b:6b:63:b6:
                    48:02:bd:65:00:92:c2:44:1b:c5:68:12:a5:d2:fd:
                    8d:fa:96:4c:cf:ca:8e:f3:a4:db:62:f8:72:6f:24:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D5:AF:39:A7:22:AE:D0:A3:E7:22:5F:6D:26:78:82:BA:2F:A7:90
            X509v3 Authority Key Identifier:
                keyid:6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f1:cb:61:1a:1e:35:d1:38:02:7f:56:1e:4d:00:7b:12:86:
         ac:74:7c:82:20:79:fa:d5:50:4c:0a:01:11:0a:02:5c:bb:91:
         22:22:08:a2:24:71:a2:d9:27:f8:54:76:a3:a2:d7:71:6c:44:
         2b:dc:25:8f:44:d9:00:1c:84:e2:92:32:ff:ff:0b:30:70:5f:
         30:5c:9e:4e:4c:cb:46:16:e4:59:03:65:a5:ec:f9:2f:4a:03:
         3e:64:8d:56:af:45:67:45:07:60:7a:ab:11:ce:b2:26:d0:4b:
         e2:18:f8:e8:f3:f6:3b:2f:07:49:c1:51:98:f6:0b:7f:1b:c6:
         7a:f2:e1:0a:c1:98:70:4a:ea:df:f0:ed:4a:9e:a6:61:6e:df:
         a6:89:34:eb:ea:0b:11:94:9e:0e:f7:4f:35:58:c1:c5:f6:2d:
         75:02:14:b2:81:33:a4:b4:ee:24:74:a7:02:28:b5:41:8a:b6:
         8d:13:c8:a2:f4:bf:1a:70:d3:33:63:7f:9c:8a:0d:e9:e1:17:
         87:b8:ef:eb:89:2c:69:7b:86:aa:28:44:57:1b:42:9d:3f:15:
         a4:25:6e:8e:e4:99:36:da:83:97:4c:30:c4:95:06:3a:cb:04:
         b3:33:73:6c:b5:36:ed:b3:5c:a4:45:51:ed:1c:c2:47:8d:74:
         8f:92:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----