Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/pznbYPn8cbGkRKlFPIZbRkImOnI.mft
File:                     pznbYPn8cbGkRKlFPIZbRkImOnI.mft (raw, json)
Hash identifier:          olosymLsxHCmKcKTqJk09sVnTPwoLxb+C4tPQjgJSLQ=
Subject key identifier:   3C:D8:DE:58:1C:12:44:75:FB:F5:C0:F7:8D:91:4B:77:93:5C:15:3F
Authority key identifier: A7:39:DB:60:F9:FC:71:B1:A4:44:A9:45:3C:86:5B:46:42:26:3A:72
Certificate issuer:       /CN=a739db60f9fc71b1a444a9453c865b4642263a72
Certificate serial:       018BFFEAAA4303B22E5E4AF7557A79720E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pznbYPn8cbGkRKlFPIZbRkImOnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/pznbYPn8cbGkRKlFPIZbRkImOnI.mft
Manifest number:          0891
Signing time:             Fri 24 Nov 2023 06:00:50 +0000
Manifest this update:     Fri 24 Nov 2023 06:00:50 +0000
Manifest next update:     Sat 25 Nov 2023 06:00:50 +0000
Files and hashes:         1: PTV0pAcBudFhKbOnXPmkwhxH2Bc.roa (hash: SGuGaFkB+OQAjBx6IVnybRzlBF0VjySJh9La42FDoK0=)
                          2: pznbYPn8cbGkRKlFPIZbRkImOnI.crl (hash: dZxfvA6sicpAGLRFVEp2maLUEozesViqhRcn8JioMxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ff:ea:aa:43:03:b2:2e:5e:4a:f7:55:7a:79:72:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a739db60f9fc71b1a444a9453c865b4642263a72
        Validity
            Not Before: Nov 24 06:00:50 2023 GMT
            Not After : Nov 25 06:00:50 2023 GMT
        Subject: CN=3cd8de581c124475fbf5c0f78d914b77935c153f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c2:a1:12:9e:37:a8:47:e7:b7:59:5d:d0:77:
                    36:a6:6b:35:0c:e2:4e:69:cc:6c:ba:72:40:70:af:
                    de:b6:73:0d:a6:ea:ef:94:02:2c:3f:c4:a0:8e:62:
                    44:92:ce:98:8e:cf:8a:bd:6e:fc:af:17:a9:e7:e8:
                    e5:9e:76:0f:26:d2:cf:ea:e8:7c:3a:27:23:04:1b:
                    99:66:d7:db:d9:6a:54:f1:c2:30:d3:bb:97:05:57:
                    0f:a2:5a:7f:52:95:a9:5b:8e:a0:ac:99:23:f7:1d:
                    fd:a8:f1:b6:72:12:21:7a:3a:6a:ff:df:39:86:85:
                    43:94:89:be:22:8e:44:d1:04:30:b6:6e:3f:9d:5a:
                    e2:91:39:ce:37:0f:9e:99:5f:4b:37:87:39:19:df:
                    ec:1a:70:fb:68:1a:03:e5:be:db:ba:7b:22:f0:8d:
                    cc:8e:63:96:56:e4:0e:25:ed:f9:eb:6b:65:37:a8:
                    59:f0:74:81:ba:29:cd:f3:f3:96:b5:12:ec:0c:07:
                    18:fe:7f:7a:1b:c7:80:90:0d:e3:e3:9b:85:4b:c2:
                    7b:cd:f4:de:a8:01:b3:db:b5:cf:ca:23:2b:bc:74:
                    20:a6:47:a7:f7:b0:bb:62:80:fc:3a:a7:98:cd:95:
                    10:b5:86:c3:cf:7f:72:e9:0d:f2:40:07:fe:c7:57:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D8:DE:58:1C:12:44:75:FB:F5:C0:F7:8D:91:4B:77:93:5C:15:3F
            X509v3 Authority Key Identifier:
                keyid:A7:39:DB:60:F9:FC:71:B1:A4:44:A9:45:3C:86:5B:46:42:26:3A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pznbYPn8cbGkRKlFPIZbRkImOnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/pznbYPn8cbGkRKlFPIZbRkImOnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/pznbYPn8cbGkRKlFPIZbRkImOnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:33:68:05:1e:53:12:e8:49:d7:c9:96:18:e7:6f:bf:e8:33:
         30:dc:88:6d:ae:0d:30:77:0e:65:02:5a:3a:9b:f2:8f:da:04:
         b7:fd:d2:3c:8a:9a:ed:31:50:8d:93:1e:7b:10:49:01:4b:59:
         e8:b7:e4:65:ba:e6:52:bb:75:6b:d4:ed:e8:42:f8:f3:67:ca:
         e9:60:36:61:a8:41:5b:e6:6f:e8:e0:e2:1a:6d:6c:71:8d:03:
         0c:2b:ff:fb:57:d2:18:e3:d1:15:7b:f0:16:39:81:92:84:c9:
         23:b5:36:49:8a:46:81:9a:ef:d9:a3:87:cd:ae:b7:b7:63:8e:
         3b:0f:9e:f9:51:3a:54:b1:99:fa:94:91:70:3d:6e:9c:93:12:
         a3:a8:65:b5:96:b8:40:0e:84:d2:7d:44:7a:f1:3c:0b:f0:73:
         3a:b9:9d:4f:22:65:40:b6:db:71:4d:c1:0b:16:d9:ee:db:c3:
         6e:84:91:8e:71:47:ba:4b:ff:77:cd:2b:73:91:6d:cb:0b:95:
         a2:24:f8:46:34:ec:95:25:a7:4b:72:00:ea:cf:5e:77:19:9f:
         b3:b7:55:0b:33:8e:49:ae:5a:79:2b:6e:40:dd:3c:30:cc:90:
         56:46:3e:0b:52:9a:3d:20:e5:e9:b3:a4:82:14:f0:ce:b4:b6:
         da:59:7e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----