Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft
File:                     HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft (raw, json)
Hash identifier:          QN1GnGF06FropVwDbBtpvxW7TpXPLFdTWV578k/HCVY=
Subject key identifier:   65:41:82:10:16:9C:0C:78:FE:34:75:3E:BC:EE:5B:DD:78:85:4A:82
Authority key identifier: 1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
Certificate issuer:       /CN=1c14ea32ebe84556fd468f812eac103153789ed0
Certificate serial:       018C66B2AA7CF32F62322465A4820010FE0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft
Manifest number:          08EB
Signing time:             Thu 14 Dec 2023 05:00:34 +0000
Manifest this update:     Thu 14 Dec 2023 05:00:34 +0000
Manifest next update:     Fri 15 Dec 2023 05:00:34 +0000
Files and hashes:         1: HBTqMuvoRVb9Ro-BLqwQMVN4ntA.crl (hash: 6klch+g/PV2bIJXftX2f32ZegJcBCKgT5/kkdOENwCA=)
                          2: U-fhA4cxf7MShV3SlBRouycozrI.roa (hash: Z8IDY7CAVwXomz7l7MTwZSF3Ew+FAuuGd+lOkIs54q8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:66:b2:aa:7c:f3:2f:62:32:24:65:a4:82:00:10:fe:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c14ea32ebe84556fd468f812eac103153789ed0
        Validity
            Not Before: Dec 14 05:00:34 2023 GMT
            Not After : Dec 15 05:00:34 2023 GMT
        Subject: CN=65418210169c0c78fe34753ebcee5bdd78854a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:9f:d7:c0:e9:8d:5c:36:e7:ef:fb:cc:f4:
                    3e:85:bb:81:dd:f5:0b:1f:bd:79:0a:91:04:9d:93:
                    f4:5a:fa:94:6a:e0:77:71:ff:38:d9:e3:7d:ca:f0:
                    4e:d0:66:00:f9:29:82:92:7d:94:5b:01:39:91:e3:
                    0f:ae:8c:8e:b7:d6:a2:8c:ba:f4:70:f0:fd:4f:02:
                    cc:10:07:70:a2:5f:f6:36:14:b7:a2:33:c5:e5:bd:
                    bf:91:ad:22:3c:81:ae:99:e2:bb:ff:aa:c6:04:ed:
                    f6:c3:4d:eb:89:0b:4e:70:91:a7:30:58:b5:cc:ae:
                    75:5c:0c:99:75:bf:78:9e:32:ab:9d:96:a9:36:a3:
                    ef:09:81:5e:cb:f2:6b:49:f9:cc:b4:d2:5e:8c:9d:
                    f2:92:96:6b:06:b2:c0:f5:ef:d2:4e:c3:19:96:f0:
                    be:29:6f:a7:06:a7:41:8f:1a:06:b4:df:3b:a6:04:
                    2e:3e:68:51:5b:91:ec:ca:e3:6b:d4:10:c2:9f:00:
                    ab:92:8c:dc:e8:21:1b:8a:1b:59:9d:d2:28:7a:53:
                    a1:12:2a:91:60:ed:f7:19:17:f3:0d:59:cc:71:4d:
                    b6:21:3c:20:0b:63:83:7f:06:9a:ce:e1:22:dd:7b:
                    16:01:f3:99:b2:ed:13:f4:c7:6a:18:89:87:57:af:
                    eb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:41:82:10:16:9C:0C:78:FE:34:75:3E:BC:EE:5B:DD:78:85:4A:82
            X509v3 Authority Key Identifier:
                keyid:1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e7:a5:bd:d2:ac:ce:a5:b5:5c:3b:e9:39:e0:b4:12:fc:9c:
         56:b2:7a:22:e2:4e:da:c9:10:89:d2:85:86:18:85:fc:90:19:
         02:26:61:1f:61:e1:68:0b:fa:13:3e:f4:dc:15:65:c2:b3:5f:
         d6:8e:f2:11:4d:71:d1:c2:b5:46:40:38:b6:4b:7f:46:34:64:
         04:53:46:b6:00:28:9c:55:ed:54:67:ff:5c:bf:c9:0e:0d:d1:
         99:cf:8c:2a:91:91:6a:bf:be:f5:4b:43:5e:4e:99:3d:3f:c6:
         2b:f4:c9:24:a5:a6:6a:e2:84:36:34:c5:af:24:20:cf:9e:0d:
         2f:3e:f7:0c:29:eb:88:1c:27:57:04:b3:49:5a:ab:b8:15:de:
         89:a1:92:61:69:23:67:e8:8d:0f:6d:41:8b:4f:85:c6:f7:1b:
         34:cc:ef:07:6b:38:55:b7:47:66:29:a4:ed:bd:c9:8c:21:49:
         b9:5e:df:05:f2:f2:15:1c:dc:74:07:54:98:fb:32:aa:2e:10:
         41:4e:d5:61:d3:04:3b:e1:e4:90:ef:ef:2b:a3:94:bd:7a:1d:
         8f:65:51:b5:f2:00:47:d0:01:23:ed:e0:54:e7:81:b9:aa:d1:
         5c:f0:9a:bb:8b:7c:e0:dc:bf:9d:23:1d:46:57:1e:f4:08:79:
         e6:1f:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----