Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/0mrk6biw_ZlNLMS-bG85zIua3Yk.mft
File:                     0mrk6biw_ZlNLMS-bG85zIua3Yk.mft (raw, json)
Hash identifier:          UtfrIXodGNCurxAv7U0N5VB2BZHQr1PM1qCVS5aOnB8=
Subject key identifier:   06:24:98:38:AB:B9:59:3E:AD:1A:A7:BC:61:EC:5D:45:D4:8D:5C:85
Authority key identifier: D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89
Certificate issuer:       /CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
Certificate serial:       018B7F99E468286B46A26412E0417783DFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/0mrk6biw_ZlNLMS-bG85zIua3Yk.mft
Manifest number:          0885
Signing time:             Mon 30 Oct 2023 08:01:13 +0000
Manifest this update:     Mon 30 Oct 2023 08:01:13 +0000
Manifest next update:     Tue 31 Oct 2023 08:01:13 +0000
Files and hashes:         1: 0mrk6biw_ZlNLMS-bG85zIua3Yk.crl (hash: gKkZyG/wd+LSjRdqvm9IJyt9T2J8vGMUh8t6Pww1Apk=)
                          2: uTN_DzdiEGHTEw3CeZFMM_lfZU8.roa (hash: EpJfvTtIlZymCx6E+DLRl6I/0ER0Y0DS7VMQmfLwLAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:99:e4:68:28:6b:46:a2:64:12:e0:41:77:83:df:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
        Validity
            Not Before: Oct 30 08:01:13 2023 GMT
            Not After : Oct 31 08:01:13 2023 GMT
        Subject: CN=06249838abb9593ead1aa7bc61ec5d45d48d5c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:f9:c3:e7:e5:90:8e:31:e3:44:70:f6:29:
                    2f:34:02:61:00:83:44:7f:fd:d8:28:08:0c:38:ae:
                    1d:4e:38:bc:46:73:0e:df:58:d7:c3:e3:2a:7a:a7:
                    1c:50:2f:a5:bd:15:59:07:32:bc:54:29:6b:ca:28:
                    bc:34:ed:66:d0:97:c1:3b:fc:83:c7:ed:07:47:9e:
                    ec:9e:26:a2:01:2e:2a:82:57:79:8e:a5:c6:89:d3:
                    68:9c:e6:7a:6f:0b:c4:79:ac:f2:02:76:22:d3:59:
                    35:67:7c:f1:64:88:a2:b6:0d:6c:76:e6:e8:94:86:
                    9b:31:8e:03:ed:6f:5a:c8:83:34:60:40:77:5a:e8:
                    0d:34:15:08:cc:c1:20:41:15:d3:4b:53:48:b7:6d:
                    0d:b4:c2:2e:b1:ff:56:20:2c:85:84:96:18:3a:03:
                    a7:d1:42:2b:f7:a6:0f:8f:60:b5:f0:4c:b1:f0:05:
                    7f:43:2a:cd:53:46:b8:e2:a4:83:04:21:df:e6:bc:
                    8a:d2:73:3c:cb:dd:7b:4d:b6:4e:0e:da:8a:8b:0e:
                    46:85:23:26:b9:eb:5c:cd:a4:8a:c7:46:e0:76:dc:
                    ab:b3:d7:91:3e:52:e1:d7:90:33:97:7f:66:2e:07:
                    7a:72:99:71:fc:7a:70:46:d3:c9:9f:0b:91:bc:67:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:24:98:38:AB:B9:59:3E:AD:1A:A7:BC:61:EC:5D:45:D4:8D:5C:85
            X509v3 Authority Key Identifier:
                keyid:D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/0mrk6biw_ZlNLMS-bG85zIua3Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/0mrk6biw_ZlNLMS-bG85zIua3Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:75:2e:1e:8d:e5:a7:1f:8c:7f:95:9f:0c:b9:a4:e8:11:24:
         fa:1e:f4:6d:6a:77:c1:af:d7:1f:05:f0:9d:a9:c7:02:3b:3b:
         5a:98:0d:05:c2:97:ac:c3:03:e9:e2:9d:cf:1a:98:86:d1:fb:
         4e:61:f2:73:08:45:87:0e:42:46:85:98:72:0b:7f:66:34:50:
         e1:a1:89:0f:0d:ef:51:0d:87:33:e0:30:31:29:19:7f:a3:94:
         c5:4b:fb:17:50:0b:c4:c3:fd:e8:f2:73:42:74:21:25:40:76:
         39:73:b2:f5:16:df:76:6e:bf:ba:2e:64:69:28:b1:2b:13:71:
         c4:70:4e:31:a4:98:5c:df:42:cd:8e:6e:4d:dd:e7:4c:ba:37:
         a4:ed:a4:4f:3d:4c:8e:c9:cc:1a:e7:7c:73:8d:16:fd:69:9e:
         d2:ca:8a:fc:f6:e4:26:4b:97:3e:4a:5d:ba:38:96:df:76:be:
         5f:c3:69:05:3c:63:02:b7:0e:ad:1a:61:59:63:2b:e5:0b:4e:
         71:36:da:01:0e:3b:e1:52:cd:3b:23:9c:04:5e:c7:a3:60:83:
         1b:01:a2:09:4e:27:c1:a5:d6:85:d5:2b:b1:b4:ba:6e:10:58:
         e7:69:f0:62:f1:51:46:9e:47:c0:42:dc:28:07:ae:f8:60:62:
         0b:08:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----