Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/6AoZuzUi33P-4f4iqJVUKZMcl1Y.mft
File:                     6AoZuzUi33P-4f4iqJVUKZMcl1Y.mft (raw, json)
Hash identifier:          FtzS/5yAXL+RHSbtFNrd5ROf7K5jnkSy1LnizR6+uok=
Subject key identifier:   F4:0E:ED:0A:56:BA:94:03:AE:C2:D0:6B:6D:8B:7B:8B:57:EB:09:49
Authority key identifier: E8:0A:19:BB:35:22:DF:73:FE:E1:FE:22:A8:95:54:29:93:1C:97:56
Certificate issuer:       /CN=e80a19bb3522df73fee1fe22a8955429931c9756
Certificate serial:       018ACA7F422611ED50B4C2FA4610433156FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AoZuzUi33P-4f4iqJVUKZMcl1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/6AoZuzUi33P-4f4iqJVUKZMcl1Y.mft
Manifest number:          0878
Signing time:             Mon 25 Sep 2023 04:00:52 +0000
Manifest this update:     Mon 25 Sep 2023 04:00:52 +0000
Manifest next update:     Tue 26 Sep 2023 04:00:52 +0000
Files and hashes:         1: 6AoZuzUi33P-4f4iqJVUKZMcl1Y.crl (hash: rlrEB3DaNitq6dJf+nPauG5SlXQcjxGq0bJodY6uekk=)
                          2: xW7bR-EnNSZcw5zo8riyLhs_9O0.roa (hash: zRYQFNHxFasR25F9nGPiYbpHloI5urkUI4RvbfgcApc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ca:7f:42:26:11:ed:50:b4:c2:fa:46:10:43:31:56:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80a19bb3522df73fee1fe22a8955429931c9756
        Validity
            Not Before: Sep 25 04:00:52 2023 GMT
            Not After : Sep 26 04:00:52 2023 GMT
        Subject: CN=f40eed0a56ba9403aec2d06b6d8b7b8b57eb0949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:f6:dc:65:59:64:07:97:18:4b:3f:1c:e9:
                    2b:c6:6e:ce:1f:33:29:df:54:f0:cf:04:ee:c9:a9:
                    cc:91:85:d3:02:0f:86:c3:53:9a:a3:02:11:02:9e:
                    ba:b2:3f:10:db:da:ff:d1:da:c0:87:da:89:1d:e7:
                    cb:2e:91:db:70:17:f7:b4:94:31:61:74:87:ae:4e:
                    ab:15:0c:da:c8:cb:92:5c:62:a5:46:14:70:8b:2e:
                    ab:b0:db:23:68:06:b6:6c:10:95:be:7b:3e:d5:41:
                    bf:fd:95:38:8f:d2:cc:6e:09:1d:4c:7d:e0:11:58:
                    5e:5f:0c:88:48:7d:77:b0:e1:3e:c1:30:0a:4b:73:
                    35:a1:94:15:b8:e1:93:07:c2:19:af:4f:68:02:31:
                    ac:43:de:fe:c3:a7:d0:cb:00:b9:27:43:10:59:17:
                    e3:cb:7d:f7:de:c2:ad:2e:8e:5a:6b:57:99:83:38:
                    77:2a:fc:00:29:83:23:e2:7b:2f:4b:2d:81:c7:f6:
                    d0:ca:97:4e:56:66:26:30:e6:4b:f1:75:99:8e:08:
                    3c:50:13:d5:e4:52:a1:b1:aa:96:39:53:b6:92:41:
                    74:f7:3e:da:0b:01:29:4a:f7:fb:7b:46:c6:52:18:
                    34:04:59:10:c3:ee:c5:f1:6b:91:fc:6e:9d:13:d4:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:ED:0A:56:BA:94:03:AE:C2:D0:6B:6D:8B:7B:8B:57:EB:09:49
            X509v3 Authority Key Identifier:
                keyid:E8:0A:19:BB:35:22:DF:73:FE:E1:FE:22:A8:95:54:29:93:1C:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AoZuzUi33P-4f4iqJVUKZMcl1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/6AoZuzUi33P-4f4iqJVUKZMcl1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/6AoZuzUi33P-4f4iqJVUKZMcl1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ac:ce:81:5c:99:b7:ab:e0:e2:fc:17:92:ef:7c:67:0d:b8:
         0f:25:85:fa:19:9f:fc:df:19:c0:97:f0:f5:71:92:89:07:e3:
         a3:10:17:3e:cf:a7:e1:9e:3b:54:78:d8:c1:49:9f:f3:7d:c7:
         89:39:db:3e:53:b4:2f:80:36:26:e6:ab:cb:d8:cf:c8:de:f4:
         ca:1b:a0:35:27:f5:0d:6c:85:a8:93:dc:38:b8:4d:56:cf:e4:
         40:35:49:79:55:22:aa:43:7b:3f:d8:ce:f9:0b:23:d3:8e:fa:
         f0:90:6c:6f:06:c2:b1:08:dd:ac:66:71:8a:2c:9c:c2:c8:70:
         99:e9:b8:9f:a8:7a:f3:4c:28:07:46:20:63:dd:06:0e:1c:9f:
         45:48:90:11:ef:6d:b0:13:76:0c:ff:40:88:7c:47:ec:c0:47:
         14:b2:33:f2:5d:d5:fd:fd:8b:29:88:90:11:5f:2d:6b:2d:1c:
         04:a2:b6:e9:cc:76:54:9d:3a:1c:bd:27:14:f8:06:bf:0c:2e:
         cb:f6:bc:70:c8:f0:2b:89:a6:ce:e2:75:1a:bd:f2:aa:8f:49:
         9b:22:24:fc:50:00:c5:f5:e1:1a:30:e1:74:a8:97:9c:ea:3d:
         26:53:d5:96:74:26:32:28:32:95:13:5d:28:20:26:9f:30:1c:
         6b:ed:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----