Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/1-6ClZGNPQugs84OImRyefkAFKiA.mft
File:                     1-6ClZGNPQugs84OImRyefkAFKiA.mft (raw, json)
Hash identifier:          WeiaUnNK1FeKWF6oEjzdsaBJJoHm9Bt8LO/+dJTpNwk=
Subject key identifier:   A5:4A:CE:89:3C:DF:E3:57:46:0E:1C:90:3D:58:54:CA:CB:8E:00:87
Authority key identifier: FB:A0:A5:64:63:4F:42:E8:2C:F3:83:88:99:1C:9E:7E:40:05:2A:20
Certificate issuer:       /CN=fba0a564634f42e82cf38388991c9e7e40052a20
Certificate serial:       018B7FD0BDCC8EE203E284F87C82F64708A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6ClZGNPQugs84OImRyefkAFKiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/1-6ClZGNPQugs84OImRyefkAFKiA.mft
Manifest number:          085D
Signing time:             Mon 30 Oct 2023 09:01:08 +0000
Manifest this update:     Mon 30 Oct 2023 09:01:08 +0000
Manifest next update:     Tue 31 Oct 2023 09:01:08 +0000
Files and hashes:         1: 1-6ClZGNPQugs84OImRyefkAFKiA.crl (hash: MOXcBn/7vcD8M84Y6HKJD1+PoeDqA4djvKzCJPIBpOI=)
                          2: y9MxqfG2OKep6xKBjWaRuyAdmxk.roa (hash: fLdNl1IxM76vUw5csMHTXlddG5nkd2aW8DZAcZRuIwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:d0:bd:cc:8e:e2:03:e2:84:f8:7c:82:f6:47:08:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0a564634f42e82cf38388991c9e7e40052a20
        Validity
            Not Before: Oct 30 09:01:08 2023 GMT
            Not After : Oct 31 09:01:08 2023 GMT
        Subject: CN=a54ace893cdfe357460e1c903d5854cacb8e0087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:f0:a3:76:88:61:60:e1:77:29:2f:4f:57:
                    71:70:0a:fc:89:7f:52:28:c3:32:a8:46:47:59:b9:
                    ee:91:ed:59:8f:46:47:51:19:9e:1b:6c:33:97:76:
                    87:8b:87:ae:ca:19:41:a8:c6:d1:61:0f:94:72:c3:
                    fc:59:00:cb:68:17:25:5c:bb:30:b8:ca:64:ac:38:
                    64:a0:99:49:2c:33:20:72:92:7c:2a:5a:2b:84:a3:
                    48:a7:a3:42:fe:0e:ca:30:cf:3a:28:5a:c7:bf:18:
                    76:4f:ff:3c:d6:fa:aa:df:39:c7:94:02:7e:d5:18:
                    fe:8e:82:7f:4d:5d:2f:80:bc:5c:8f:f1:85:b4:08:
                    45:17:07:2d:d1:dc:be:d2:54:85:7a:b0:28:13:5e:
                    b3:7e:f0:2a:ee:c6:17:25:ee:77:d5:4a:02:b3:bf:
                    19:91:0e:b7:8a:b7:85:0b:fc:87:9a:d2:3d:14:f4:
                    ab:83:1e:f7:31:fd:e9:4f:cb:0e:69:ef:cf:7d:bd:
                    67:d4:ea:26:55:19:e1:5b:73:38:23:d2:aa:fb:41:
                    eb:a5:3f:84:12:00:10:f8:6f:6c:0c:2a:7f:eb:f1:
                    72:b9:30:7e:78:9f:c8:30:34:00:1b:d6:7a:5a:d2:
                    0e:25:13:6d:1e:d1:36:92:9c:d3:4c:34:61:a1:ff:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:CE:89:3C:DF:E3:57:46:0E:1C:90:3D:58:54:CA:CB:8E:00:87
            X509v3 Authority Key Identifier:
                keyid:FB:A0:A5:64:63:4F:42:E8:2C:F3:83:88:99:1C:9E:7E:40:05:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6ClZGNPQugs84OImRyefkAFKiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/1-6ClZGNPQugs84OImRyefkAFKiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/1-6ClZGNPQugs84OImRyefkAFKiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ca:e7:e4:b3:2f:3f:19:36:3f:1c:14:30:01:b4:42:c4:30:
         d0:22:b1:67:94:51:af:c2:f2:fe:61:e1:6f:4e:b1:6a:17:0c:
         c2:c3:5d:74:28:2b:ab:14:27:73:62:94:91:63:ac:e7:7c:9c:
         ee:a8:7f:d0:d0:4d:98:17:fc:9c:c3:e5:91:86:97:79:b8:64:
         eb:a0:73:e9:b0:2f:66:02:25:7f:01:09:ee:b0:d4:49:0d:96:
         d6:4f:29:d0:01:64:79:72:11:12:91:85:d8:8c:fc:cf:85:83:
         f8:ba:38:29:44:bb:7c:76:50:96:4a:a6:e3:79:95:20:58:7e:
         da:89:69:0b:bc:7a:45:7e:77:b6:1e:ac:0a:de:f5:2a:95:00:
         61:7c:df:9e:a6:16:f8:12:cf:e9:72:16:53:44:63:21:20:82:
         0b:30:44:9f:9c:6c:73:a4:4d:ab:00:df:db:d5:0c:13:ee:b7:
         cd:9a:46:7e:96:b8:a9:90:df:b5:57:6c:f8:d1:ad:d6:d0:32:
         36:87:04:6e:ab:ea:7e:91:83:fd:f5:80:fb:72:9e:c9:2c:6a:
         41:01:f7:19:7c:b3:59:71:7f:b1:4e:42:71:cd:33:08:d7:6f:
         61:96:05:2d:b5:92:5b:d0:72:5d:13:dc:f7:ae:29:71:cc:e1:
         b8:4f:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----