Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a31768-d44a-474a-8514-0c5d7031ffad/1/zgspjh4rMARpBw0cEMyupvH4CuI.mft
File:                     zgspjh4rMARpBw0cEMyupvH4CuI.mft (raw, json)
Hash identifier:          1bo+gHi+NV+T3CYMJXXmDSJ7vfz8ntZOJ7QiLrq8HUU=
Subject key identifier:   43:55:47:D3:BD:26:C3:A4:E6:DF:AD:FA:5E:EF:2F:1A:0B:79:7F:19
Authority key identifier: CE:0B:29:8E:1E:2B:30:04:69:07:0D:1C:10:CC:AE:A6:F1:F8:0A:E2
Certificate issuer:       /CN=ce0b298e1e2b300469070d1c10ccaea6f1f80ae2
Certificate serial:       018ABA9ECFD22E8BF488E8BF019444543C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgspjh4rMARpBw0cEMyupvH4CuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a31768-d44a-474a-8514-0c5d7031ffad/1/zgspjh4rMARpBw0cEMyupvH4CuI.mft
Manifest number:          0836
Signing time:             Fri 22 Sep 2023 02:01:24 +0000
Manifest this update:     Fri 22 Sep 2023 02:01:24 +0000
Manifest next update:     Sat 23 Sep 2023 02:01:24 +0000
Files and hashes:         1: L1K6Lo5mKXs3RqJJuzhQjcKjuOY.roa (hash: KEGl62FVzP7RPgJyTZybit0N3Wlcw+WVVBenLTzcnAo=)
                          2: Xxn6-TJ1b8MMaD3xrhlgO8AbMvg.roa (hash: B1t/1kYBKCsSngjpooR8XEiIMCbv5FVL0BJjuDMmjXk=)
                          3: s5BiaHOJULt-vCCL64UcWn9GrEg.roa (hash: f+8xvA3X/9F+Kkel5Zwra+XqN2MMqST8AFHOLqPY51s=)
                          4: zgspjh4rMARpBw0cEMyupvH4CuI.crl (hash: hFGMGv8iYDJgfYgx4Up+WE74sTYQJMBGoTC8HcX+Rso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ba:9e:cf:d2:2e:8b:f4:88:e8:bf:01:94:44:54:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0b298e1e2b300469070d1c10ccaea6f1f80ae2
        Validity
            Not Before: Sep 22 02:01:24 2023 GMT
            Not After : Sep 23 02:01:24 2023 GMT
        Subject: CN=435547d3bd26c3a4e6dfadfa5eef2f1a0b797f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:09:92:fc:8d:69:f4:7e:1d:26:26:91:b6:
                    e2:62:46:6d:35:d1:99:41:94:f2:2b:73:87:de:65:
                    62:46:4a:19:a0:99:70:7c:85:70:c7:51:00:f0:f0:
                    53:4a:3b:f7:62:8c:47:29:27:a4:c7:1d:b3:37:90:
                    83:56:68:1c:61:75:ce:f1:c3:c0:f2:3f:1e:c3:51:
                    ae:18:75:05:70:64:c5:6e:24:4a:ee:89:f7:f5:7a:
                    ef:8f:33:25:ed:38:17:6e:87:3f:2c:c4:2e:a5:5e:
                    f0:56:1d:51:3b:43:3c:15:00:49:09:15:4a:bb:54:
                    11:1a:6c:bf:44:36:77:47:69:ca:ff:68:fe:99:83:
                    09:ae:d3:28:87:d6:18:d6:6c:61:50:f8:6b:85:09:
                    97:81:f1:15:d2:6e:74:ad:62:c4:3d:4f:96:38:1e:
                    bf:90:b0:a7:8d:6a:28:30:f6:a8:fc:55:8a:d1:39:
                    7b:e1:fd:ef:8b:7d:92:c9:77:0c:ba:f9:4f:98:ac:
                    3a:bc:e8:c7:73:b8:79:e8:cd:a6:3f:b9:51:65:0f:
                    8c:26:6b:1d:91:dc:e1:63:64:5a:33:28:41:ca:38:
                    3d:b3:54:ad:66:af:ea:ea:15:0e:84:16:63:01:7b:
                    d8:e7:25:e6:21:2d:14:74:3f:25:5d:13:a1:8a:ec:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:55:47:D3:BD:26:C3:A4:E6:DF:AD:FA:5E:EF:2F:1A:0B:79:7F:19
            X509v3 Authority Key Identifier:
                keyid:CE:0B:29:8E:1E:2B:30:04:69:07:0D:1C:10:CC:AE:A6:F1:F8:0A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgspjh4rMARpBw0cEMyupvH4CuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a31768-d44a-474a-8514-0c5d7031ffad/1/zgspjh4rMARpBw0cEMyupvH4CuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a31768-d44a-474a-8514-0c5d7031ffad/1/zgspjh4rMARpBw0cEMyupvH4CuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0d:2b:44:57:df:0a:b8:16:35:34:eb:4b:48:10:9b:8a:85:
         ed:94:67:78:3f:b7:41:29:92:6b:79:6c:90:4c:71:93:a3:49:
         da:22:cb:20:62:1c:37:a5:b1:b3:33:aa:45:f6:d5:a0:47:10:
         4c:8e:90:cb:6e:19:89:4a:09:bf:d4:46:06:4d:c3:4f:ac:93:
         71:03:8b:89:57:58:47:4e:8e:3b:ef:0d:ed:f8:1a:5c:3b:ce:
         e3:bb:9b:17:ae:ee:33:e7:30:c6:6f:91:cc:3d:e8:84:70:f3:
         e1:ce:d7:2d:a4:74:84:fe:98:a2:16:f3:0a:02:27:f3:ca:ff:
         95:22:a2:01:24:7a:0f:9c:a8:29:03:cc:dc:15:e8:af:a2:91:
         cf:4b:a0:95:85:07:95:fd:12:ec:b6:46:86:6f:a6:de:d3:c5:
         95:01:91:1f:42:13:a1:9a:22:c5:d3:a4:8f:c7:a7:b3:a6:e8:
         d0:9e:3d:c0:3b:39:c1:5e:3f:27:6b:0d:23:be:30:58:c8:6b:
         51:0f:05:df:bd:fa:a0:33:b5:93:96:8d:86:50:02:fa:b7:cf:
         bc:5f:70:7a:5f:ca:3e:a9:59:70:94:d0:67:a4:d8:e6:88:38:
         b8:d2:a2:07:74:77:d1:d7:ec:cd:42:ed:64:91:50:c4:00:96:
         f2:47:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----