Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.mft
File:                     4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.mft (raw, json)
Hash identifier:          Pd1IQP3FE/d0T7U+r6JIHUQT5Yq63rB8F1D+P+Jasow=
Subject key identifier:   8B:96:92:3F:40:03:D8:44:33:96:5C:DC:26:6D:61:B7:8A:2A:26:E3
Authority key identifier: E2:8F:F3:27:F6:5E:CE:51:CB:4E:03:1F:DE:74:37:A0:A1:73:F6:8C
Certificate issuer:       /CN=e28ff327f65ece51cb4e031fde7437a0a173f68c
Certificate serial:       018C6833105512A576EC99FBC19E5D91220E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.mft
Manifest number:          0ECC
Signing time:             Thu 14 Dec 2023 12:00:26 +0000
Manifest this update:     Thu 14 Dec 2023 12:00:26 +0000
Manifest next update:     Fri 15 Dec 2023 12:00:26 +0000
Files and hashes:         1: 4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.crl (hash: UVOGxt/57tBOEE7iMfHZoZrXpb5FD0gPphFB+AJFKSM=)
                          2: GYB9PIdRDV7vh-6LuJYd-UUUdAk.roa (hash: FYkvE/0vbytWgkDCofI/wDPaK9AojtVv8f6iK8L9y8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:68:33:10:55:12:a5:76:ec:99:fb:c1:9e:5d:91:22:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e28ff327f65ece51cb4e031fde7437a0a173f68c
        Validity
            Not Before: Dec 14 12:00:26 2023 GMT
            Not After : Dec 15 12:00:26 2023 GMT
        Subject: CN=8b96923f4003d84433965cdc266d61b78a2a26e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5c:10:0f:d5:ea:fd:d2:c2:2b:97:d8:e0:fb:
                    31:ea:fd:0b:20:fe:39:ac:3b:ce:b1:e8:68:a3:34:
                    3f:69:14:d7:1b:06:23:cc:9b:d7:e3:2e:8f:74:24:
                    cb:7c:14:51:99:e4:2e:4c:3f:20:d9:c6:81:66:f7:
                    53:31:75:79:f9:b8:a4:49:f4:74:2f:75:ec:b3:7a:
                    9d:a2:fd:81:13:55:33:c2:8a:2b:74:c7:b1:88:05:
                    c8:0d:32:78:43:87:90:52:89:90:40:b6:70:9a:90:
                    47:34:6d:5a:a0:e0:3c:22:7e:e9:6d:25:ef:97:22:
                    14:64:aa:3e:e1:ed:b5:25:0d:f6:23:2d:2b:eb:02:
                    35:2f:b3:78:24:09:91:ba:6b:9c:48:a6:9f:4a:57:
                    6d:70:12:49:c2:c9:73:f7:27:fe:c8:f8:c8:f6:9f:
                    3f:8c:87:41:6f:0f:c1:29:02:8a:71:a2:79:d5:1f:
                    03:93:d8:01:4c:cb:a1:25:bb:92:1e:f5:0f:5e:d2:
                    e0:4c:b0:38:d0:92:d5:12:70:97:a5:b7:db:f2:db:
                    90:64:90:6d:ac:fd:01:bc:7c:af:99:c9:af:7c:0d:
                    b0:e0:6d:76:59:60:d1:28:fb:95:79:64:6e:0e:eb:
                    7c:4b:09:aa:a5:e0:61:cc:ad:c1:25:b3:95:a5:47:
                    32:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:96:92:3F:40:03:D8:44:33:96:5C:DC:26:6D:61:B7:8A:2A:26:E3
            X509v3 Authority Key Identifier:
                keyid:E2:8F:F3:27:F6:5E:CE:51:CB:4E:03:1F:DE:74:37:A0:A1:73:F6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:07:e7:99:78:d7:bd:ff:d5:88:1c:a8:4d:9d:10:85:2c:c9:
         63:f3:20:c0:5b:19:6f:5a:db:14:c9:48:ed:0c:ee:b2:bc:a6:
         16:b5:68:cb:7f:51:43:98:97:3e:a6:9c:d1:76:0b:42:23:c3:
         ea:8e:27:01:5b:49:78:8a:e9:d0:d5:a0:99:8e:a9:75:34:21:
         28:34:09:3c:bf:bd:c8:95:ee:a7:75:ce:75:c7:ed:bd:28:15:
         5e:8e:48:b7:0c:52:fb:7c:cb:2d:fc:a6:1b:08:54:e8:09:22:
         e3:50:f9:e2:ab:3e:57:b5:4a:68:6b:2c:ec:cb:38:df:cc:e6:
         54:77:64:2e:49:fd:cc:10:ed:92:79:79:c7:69:32:7a:83:9f:
         49:8f:dc:af:8c:ad:03:93:35:de:65:2d:ec:a4:1e:af:59:3f:
         8a:67:cd:04:0c:37:38:af:2b:20:94:8e:d4:7f:1f:34:8d:70:
         70:28:f1:d1:c6:88:42:87:08:97:33:8c:76:c5:3b:af:4a:22:
         49:4b:3d:74:e6:8b:44:a7:a4:5b:d9:71:f9:3b:59:13:de:13:
         ca:c5:17:25:eb:90:b3:84:d7:0e:6e:0b:86:83:98:57:3b:b3:
         b8:ac:cc:f1:5b:2e:19:cf:44:50:fd:2d:6e:29:b7:18:da:7d:
         19:67:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----