Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af36e2-8318-45dd-a1b8-9a89f0afc9d9/1/HobvUHzh12ZQKXoVzkfout7Ua7Y.mft
File:                     HobvUHzh12ZQKXoVzkfout7Ua7Y.mft (raw, json)
Hash identifier:          tkr3HEMYHbPdtRAeFgSrj8ZiESDjf1BKSxcGzuZbeOo=
Subject key identifier:   14:0F:2E:A4:78:D3:58:8C:30:9C:66:D1:ED:10:21:2F:01:CF:99:C9
Authority key identifier: 1E:86:EF:50:7C:E1:D7:66:50:29:7A:15:CE:47:E8:BA:DE:D4:6B:B6
Certificate issuer:       /CN=1e86ef507ce1d76650297a15ce47e8baded46bb6
Certificate serial:       018C340F1AE3686F2CFE18C8659BE5DD6411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HobvUHzh12ZQKXoVzkfout7Ua7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/af36e2-8318-45dd-a1b8-9a89f0afc9d9/1/HobvUHzh12ZQKXoVzkfout7Ua7Y.mft
Manifest number:          0D21
Signing time:             Mon 04 Dec 2023 09:00:54 +0000
Manifest this update:     Mon 04 Dec 2023 09:00:54 +0000
Manifest next update:     Tue 05 Dec 2023 09:00:54 +0000
Files and hashes:         1: HobvUHzh12ZQKXoVzkfout7Ua7Y.crl (hash: DZpFse5uMHXYS3aVTJbMn8Ssoq2vVctuObqqTV++IQY=)
                          2: TJmR_QEw51IABI67NkPyqOKJbrs.roa (hash: xGX4jlXCGcrlRChaSWZDmO6YDxPyqPs/niLBIj6IDJM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:34:0f:1a:e3:68:6f:2c:fe:18:c8:65:9b:e5:dd:64:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e86ef507ce1d76650297a15ce47e8baded46bb6
        Validity
            Not Before: Dec  4 09:00:54 2023 GMT
            Not After : Dec  5 09:00:54 2023 GMT
        Subject: CN=140f2ea478d3588c309c66d1ed10212f01cf99c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:e2:00:b7:5b:75:7f:5f:75:fe:10:91:18:
                    40:ae:2c:e6:2c:8f:e4:e3:24:d4:20:21:0b:ed:37:
                    6c:0b:27:5d:9c:3d:05:a0:2e:63:e9:c8:87:61:60:
                    dd:f8:69:c1:93:50:78:98:13:d0:08:82:a0:2b:4f:
                    50:91:9a:61:a1:3e:27:b8:6e:f7:7c:a9:28:5f:e4:
                    20:f4:ae:5c:4f:ba:bf:a1:45:43:5d:05:74:a6:db:
                    ee:fa:b1:9a:f7:da:65:84:9e:e0:37:49:04:73:06:
                    c2:22:1a:26:54:2b:0b:f0:de:df:e3:30:b6:18:35:
                    55:d8:a7:19:e2:28:ff:28:0b:cd:2c:b3:ea:77:d2:
                    94:5d:63:a9:fc:a7:8c:16:67:61:02:12:67:9e:8e:
                    47:ac:96:d1:a0:3b:6e:44:b3:cd:d3:63:83:f7:dc:
                    15:97:11:cf:3a:0f:9e:1c:be:91:88:59:28:e4:00:
                    c8:4c:b3:fa:12:14:e8:d7:ca:28:86:91:c9:48:1b:
                    04:15:46:09:7b:2f:39:04:56:0a:e4:74:a7:a1:bf:
                    da:59:8c:97:c0:fe:b9:d0:e7:6f:e4:15:86:03:ff:
                    d8:1c:27:99:9a:42:dd:90:15:41:82:34:03:7f:71:
                    d3:a8:57:d4:0c:51:b1:ae:fb:10:47:e0:bd:e4:6e:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0F:2E:A4:78:D3:58:8C:30:9C:66:D1:ED:10:21:2F:01:CF:99:C9
            X509v3 Authority Key Identifier:
                keyid:1E:86:EF:50:7C:E1:D7:66:50:29:7A:15:CE:47:E8:BA:DE:D4:6B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HobvUHzh12ZQKXoVzkfout7Ua7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af36e2-8318-45dd-a1b8-9a89f0afc9d9/1/HobvUHzh12ZQKXoVzkfout7Ua7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af36e2-8318-45dd-a1b8-9a89f0afc9d9/1/HobvUHzh12ZQKXoVzkfout7Ua7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:c1:b7:31:60:6a:a7:a4:46:46:04:66:43:37:8a:75:04:eb:
         a3:b2:d2:1b:af:99:ef:92:d7:6f:f8:d3:ec:82:b4:2d:7e:62:
         ee:de:9c:18:46:87:b2:37:68:dc:19:d2:02:af:7e:7f:f2:09:
         d6:71:f6:08:db:39:16:03:4f:07:c7:a1:c2:f8:ff:34:da:f8:
         cd:57:e6:0f:ab:72:de:85:6f:38:9a:3d:35:c0:b9:c3:e0:18:
         a4:95:5c:dc:76:d3:d3:0c:f2:a8:97:a7:0a:bd:df:7a:03:30:
         30:e1:da:33:97:6f:1f:21:a1:a2:a2:f8:68:ba:56:4f:7a:ed:
         a6:93:ac:1f:3f:e0:df:7e:59:30:f5:ec:63:bf:3f:fd:32:42:
         9e:07:5b:93:f3:f9:9a:d1:c7:8a:69:91:99:5f:d4:16:3e:83:
         73:57:ca:30:32:e1:57:ef:e9:d7:ab:66:29:b6:bd:24:84:91:
         9b:bb:e7:77:db:c5:fb:d7:55:c9:15:86:fc:b8:94:3b:a7:75:
         76:e7:b0:51:ea:d5:7c:32:a0:a1:ce:ee:c8:a7:e9:61:8b:2d:
         a7:34:b3:77:bd:8f:b5:51:22:c8:45:37:4e:c5:70:c8:a9:fa:
         38:8c:75:31:51:37:b8:e3:1c:8c:97:c4:03:69:4d:bc:a5:1a:
         5f:d3:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----