Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft
File:                     xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft (raw, json)
Hash identifier:          LDCwuHXpmahHqQmifQuy79jeEWZEsbnjXrFsZDPaIJo=
Subject key identifier:   6D:E9:B6:39:4C:28:7F:05:F8:99:6E:FC:66:FD:B6:4A:7D:72:D7:D5
Authority key identifier: C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C
Certificate issuer:       /CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
Certificate serial:       018B6CB73C1A8027800E70E6A0A48E40E8ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft
Manifest number:          0866
Signing time:             Thu 26 Oct 2023 16:00:29 +0000
Manifest this update:     Thu 26 Oct 2023 16:00:29 +0000
Manifest next update:     Fri 27 Oct 2023 16:00:29 +0000
Files and hashes:         1: oTfXHSsIOWC9MxPLXaEGJUMvISE.roa (hash: ekfEyZcUv83nlna/OgZ0tjWLwL4zwzktE2oBpLb6y/w=)
                          2: xvKrLdUVqj7CSomz3Vcz9ixCLRw.crl (hash: 4tQO9ART4WWUxUMPy/iRdsuk6wDsNwKUbsjQOgxvAxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6c:b7:3c:1a:80:27:80:0e:70:e6:a0:a4:8e:40:e8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
        Validity
            Not Before: Oct 26 16:00:29 2023 GMT
            Not After : Oct 27 16:00:29 2023 GMT
        Subject: CN=6de9b6394c287f05f8996efc66fdb64a7d72d7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:4d:9b:7e:87:64:6b:30:54:07:af:43:f3:
                    16:b0:a2:77:49:1d:08:20:46:52:cf:be:72:60:06:
                    a3:b5:c3:ad:96:2f:21:be:cb:67:be:b9:47:3e:82:
                    4b:39:87:c8:eb:94:01:9d:56:63:a3:3c:b9:2e:3a:
                    9e:fa:44:21:3d:e6:73:f4:4b:84:f9:7d:9f:07:cb:
                    d4:e3:f2:4d:19:0c:bd:1b:1a:91:0a:0c:a9:2d:46:
                    9b:08:f1:fc:c3:8c:07:37:5c:ae:e3:25:43:d5:b0:
                    4b:3b:3f:d2:af:5b:76:d9:27:21:2f:c1:a9:2c:c5:
                    13:1a:12:a9:52:b9:aa:ba:6d:9e:97:b0:37:6a:d8:
                    09:05:57:63:03:ff:6d:9b:4a:c8:bb:51:17:77:17:
                    71:f1:ba:c5:b7:c4:f0:4b:73:68:2a:31:54:35:57:
                    8f:20:00:4c:0a:50:79:7e:41:2d:70:a4:e0:e7:72:
                    3e:9d:9e:3d:36:f4:48:b4:78:db:ed:54:29:8e:2e:
                    3e:a3:fd:eb:bb:03:5d:d6:79:de:43:24:cf:34:98:
                    d5:e9:fd:5e:b3:c6:03:99:ae:ca:51:0e:6e:b6:ff:
                    14:19:97:eb:e2:e3:22:62:d8:c9:30:2a:8c:8e:3c:
                    a5:5d:f6:d3:d6:f1:ad:7e:d2:5d:96:55:dc:bd:cb:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E9:B6:39:4C:28:7F:05:F8:99:6E:FC:66:FD:B6:4A:7D:72:D7:D5
            X509v3 Authority Key Identifier:
                keyid:C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:15:70:6a:1c:19:c3:92:e7:e7:56:a6:cd:c2:12:84:3b:e4:
         b7:c0:11:9d:2c:4e:c9:ac:a0:da:d6:de:2b:c1:09:96:dd:b2:
         b4:b2:d6:16:2e:c4:75:2a:0d:36:c8:42:42:ef:f3:27:62:31:
         91:7b:99:22:8d:e7:78:0b:14:b8:22:03:a6:39:ab:9b:c3:11:
         40:95:10:12:fc:54:91:50:49:be:8b:1a:77:91:11:7f:04:6a:
         88:f1:27:f2:ee:64:7a:a6:a0:6d:fe:76:46:00:4c:19:b4:ea:
         8b:de:a2:91:1d:4c:6f:2f:cd:f8:b1:4e:77:bc:48:a9:1c:42:
         dd:bc:e4:fc:89:35:24:db:41:c0:a8:96:81:c4:28:61:07:ee:
         a5:cb:10:0b:dd:57:bc:d0:a2:67:29:72:0a:98:45:35:88:99:
         ae:74:21:ae:ee:d0:ba:33:c7:6c:ee:ec:8d:94:f2:7d:fe:c5:
         ea:b3:49:51:f1:42:e6:ee:02:8b:22:4d:3f:33:78:6e:14:7b:
         7c:ca:a3:ab:e7:30:34:50:6b:9f:2e:14:95:c3:28:e8:88:ee:
         e9:3f:62:78:15:5d:47:bf:cd:19:23:30:d3:14:6f:cb:75:21:
         78:6b:c4:85:e0:1b:08:49:17:00:b2:df:78:12:a6:96:d5:28:
         3c:11:94:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----