Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9df8fe-e68e-49c9-8371-e456cb60fbe6/1/8OIGzm1T8EkIo2Rj2J6bIacMQ44.mft
File:                     8OIGzm1T8EkIo2Rj2J6bIacMQ44.mft (raw, json)
Hash identifier:          4WKmToUfDBkdn4xJUoyJQxZFIg1WylKPnRCblEcTS+I=
Subject key identifier:   D8:CC:AF:A5:14:33:65:8B:C6:AD:A9:48:60:57:DC:95:36:A0:CB:4A
Authority key identifier: F0:E2:06:CE:6D:53:F0:49:08:A3:64:63:D8:9E:9B:21:A7:0C:43:8E
Certificate issuer:       /CN=f0e206ce6d53f04908a36463d89e9b21a70c438e
Certificate serial:       018BA2257EFC3AFA034E44DB7BCBBC013274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OIGzm1T8EkIo2Rj2J6bIacMQ44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/9df8fe-e68e-49c9-8371-e456cb60fbe6/1/8OIGzm1T8EkIo2Rj2J6bIacMQ44.mft
Manifest number:          0808
Signing time:             Mon 06 Nov 2023 01:00:48 +0000
Manifest this update:     Mon 06 Nov 2023 01:00:48 +0000
Manifest next update:     Tue 07 Nov 2023 01:00:48 +0000
Files and hashes:         1: 8OIGzm1T8EkIo2Rj2J6bIacMQ44.crl (hash: TL5vSxTzB+HF3x4xO5bn4KNkk8PnYl0R3zdU/oWsLr4=)
                          2: UdgbSFiZ8NqwsTmBwdSluAPAzE0.roa (hash: HG5DlJ1u1afpdjp5V3ffmW00K7ifBxQAEI8Vmte5/mI=)
                          3: aYlhUMAejY9mAxAIxGqZXTvoz2s.roa (hash: DcKGOlnMXYxqnULw3YmgpTGqRVzlW0xiSeUVq3JGvBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a2:25:7e:fc:3a:fa:03:4e:44:db:7b:cb:bc:01:32:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e206ce6d53f04908a36463d89e9b21a70c438e
        Validity
            Not Before: Nov  6 01:00:48 2023 GMT
            Not After : Nov  7 01:00:48 2023 GMT
        Subject: CN=d8ccafa51433658bc6ada9486057dc9536a0cb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ab:36:7b:2e:e9:7d:03:b7:45:0e:e7:7d:40:
                    27:1f:f0:02:87:68:6a:09:f8:d6:3a:bc:16:48:b2:
                    fd:ce:c0:ad:ef:93:b0:75:e7:98:cc:23:3d:d3:ef:
                    3f:a6:79:b2:bf:e7:6e:61:e2:c9:de:0e:b3:34:6d:
                    82:a1:b8:fb:b0:0c:d2:27:57:d2:e5:3e:6e:5a:ef:
                    f8:b8:cc:56:db:55:17:24:2f:46:55:4c:1e:c8:87:
                    b2:80:33:41:66:35:99:ab:2c:2d:ef:2b:d6:93:65:
                    f9:f6:ff:b3:0e:36:fc:05:de:db:24:2d:ab:e5:aa:
                    28:76:d5:79:39:5f:3c:f7:dc:31:52:e6:9e:ae:39:
                    fd:93:c9:f4:9e:3c:1a:0f:8e:6f:dd:ad:55:26:f3:
                    ab:d5:d1:5c:3a:3f:b5:e2:0a:2a:26:b0:51:17:01:
                    79:20:66:12:35:37:40:f6:0e:9b:c2:09:a5:9f:12:
                    fe:e1:db:b4:2c:5f:e6:f9:27:08:97:d7:51:2e:d3:
                    98:ba:77:87:24:c2:3c:71:d1:37:ec:db:62:cb:c0:
                    a5:76:f9:59:bd:b3:81:b0:f5:d9:ce:f5:62:d5:22:
                    7b:2f:02:9f:45:63:cc:59:4f:0a:bb:e4:6b:55:92:
                    04:9f:13:2c:c0:ab:a4:8f:78:d1:2c:e0:ac:7d:16:
                    04:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CC:AF:A5:14:33:65:8B:C6:AD:A9:48:60:57:DC:95:36:A0:CB:4A
            X509v3 Authority Key Identifier:
                keyid:F0:E2:06:CE:6D:53:F0:49:08:A3:64:63:D8:9E:9B:21:A7:0C:43:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OIGzm1T8EkIo2Rj2J6bIacMQ44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9df8fe-e68e-49c9-8371-e456cb60fbe6/1/8OIGzm1T8EkIo2Rj2J6bIacMQ44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9df8fe-e68e-49c9-8371-e456cb60fbe6/1/8OIGzm1T8EkIo2Rj2J6bIacMQ44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8c:82:3d:4a:b3:1b:65:e9:d4:f9:2e:8f:84:a1:60:00:59:
         0a:dc:36:6c:ea:27:86:e4:dc:c0:b4:74:38:5f:a4:05:cb:18:
         6c:ff:1b:a2:f4:5e:66:f6:96:b1:84:e5:ce:89:60:3d:15:5d:
         87:41:8c:d5:23:66:13:c0:0c:f2:97:3d:13:4f:0d:6c:2b:0c:
         8e:46:5a:9f:ed:4e:98:5d:b4:e9:4c:44:40:ac:89:f7:da:64:
         5f:6b:4d:b5:a4:0f:5d:0a:16:ab:69:ff:11:c5:ce:62:f2:f3:
         ad:1f:48:27:a7:4f:19:50:a4:09:22:4c:6c:77:4f:d5:50:25:
         c5:84:78:52:0a:c0:b2:da:de:e8:16:e5:1d:bf:bf:92:e4:3c:
         dd:6d:f4:45:ef:1b:a2:2a:87:4a:bd:d2:83:9e:3e:be:26:48:
         9c:82:aa:de:bc:d7:be:4a:0c:36:8a:a9:9c:29:1e:0b:c7:fb:
         ab:5e:c4:e6:dd:e2:8b:d5:13:4b:55:3a:29:ed:f1:7b:9d:79:
         f1:b9:66:c8:b0:6e:a0:c5:8c:fb:a4:a3:a1:cc:6f:ac:bc:c0:
         5c:e0:13:93:c6:6e:4c:bd:63:56:d7:a4:e0:3e:a7:fe:87:81:
         58:af:31:10:f0:5c:51:69:a9:be:9f:11:c9:8e:81:ef:7f:9f:
         20:c5:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----