Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/1-BmI_Il_3VGpOCPcry4VtDIK9rY.mft
File:                     1-BmI_Il_3VGpOCPcry4VtDIK9rY.mft (raw, json)
Hash identifier:          Oimik27xeiCZj1hYBDFXQHreIa5yiwsKIizdonm/fhY=
Subject key identifier:   C5:F2:B5:DE:5B:2A:8D:75:C1:0B:A2:6C:9D:9E:2A:B3:DE:ED:0A:E3
Authority key identifier: F8:19:88:FC:89:7F:DD:51:A9:38:23:DC:AF:2E:15:B4:32:0A:F6:B6
Certificate issuer:       /CN=f81988fc897fdd51a93823dcaf2e15b4320af6b6
Certificate serial:       01895007ED51E3C51D075DD515088E4B4CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BmI_Il_3VGpOCPcry4VtDIK9rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/1-BmI_Il_3VGpOCPcry4VtDIK9rY.mft
Manifest number:          0E33
Signing time:             Thu 13 Jul 2023 16:14:03 +0000
Manifest this update:     Thu 13 Jul 2023 16:14:03 +0000
Manifest next update:     Fri 14 Jul 2023 16:14:03 +0000
Files and hashes:         1: 1-BmI_Il_3VGpOCPcry4VtDIK9rY.crl (hash: 8bxxSDXc9gTo7uKETj2W2GZj/NXybtkD1jjg2l0nOTM=)
                          2: mis23XvvenAYXc1BinQmQxxJbMc.roa (hash: 3Yd3Gzk+i8t79V6+yYKTBPXQ6xNQsGMqHcT65i2CreE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:50:07:ed:51:e3:c5:1d:07:5d:d5:15:08:8e:4b:4c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81988fc897fdd51a93823dcaf2e15b4320af6b6
        Validity
            Not Before: Jul 13 16:14:03 2023 GMT
            Not After : Jul 14 16:14:03 2023 GMT
        Subject: CN=c5f2b5de5b2a8d75c10ba26c9d9e2ab3deed0ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:26:11:69:bd:42:42:1f:b1:32:bb:ba:c8:
                    ba:ae:03:24:09:8a:00:46:c9:43:21:35:2c:2c:9a:
                    2a:fd:1d:23:2d:b9:8c:d7:d1:d9:45:bc:f2:fd:aa:
                    97:cf:f3:9d:5a:99:1d:69:93:82:03:c6:c8:48:a6:
                    d1:fd:78:8f:88:47:16:a9:fe:82:5c:ed:18:9a:5b:
                    f0:6e:a8:32:fc:ad:69:bf:6a:81:e0:f8:78:f4:ca:
                    25:e5:6d:50:cd:02:f9:b3:96:51:a4:6d:04:7d:ff:
                    af:12:cd:40:7b:5c:bf:ba:de:1c:e8:00:70:42:f4:
                    15:e6:f4:6c:a6:74:e7:f9:10:57:9e:ad:ea:77:9c:
                    9e:d6:51:46:98:67:1a:b3:ba:37:cf:dd:fd:79:76:
                    44:82:d5:75:e9:00:b9:80:6e:6e:4f:98:6a:65:91:
                    6d:f0:4d:07:0e:74:52:f9:40:8e:55:23:c6:89:a7:
                    1b:e5:4a:9a:67:7c:d2:f5:16:cf:48:22:92:d4:3f:
                    34:27:9a:7f:33:49:26:65:42:e7:82:03:18:3f:70:
                    97:c2:a0:2a:84:94:0d:b8:d3:84:01:49:0f:ff:2e:
                    95:d6:ac:98:c2:4f:7d:6d:8a:bd:d9:b9:55:2c:da:
                    c9:17:37:bd:15:49:51:d5:f6:2c:6c:d8:51:a8:17:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F2:B5:DE:5B:2A:8D:75:C1:0B:A2:6C:9D:9E:2A:B3:DE:ED:0A:E3
            X509v3 Authority Key Identifier:
                keyid:F8:19:88:FC:89:7F:DD:51:A9:38:23:DC:AF:2E:15:B4:32:0A:F6:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BmI_Il_3VGpOCPcry4VtDIK9rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/1-BmI_Il_3VGpOCPcry4VtDIK9rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/1-BmI_Il_3VGpOCPcry4VtDIK9rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d7:1e:54:e6:d0:05:06:ba:7c:0c:a0:e8:c9:3c:a3:37:02:
         83:4b:0a:cc:62:d8:d9:cf:4f:49:37:a3:63:07:60:09:1f:7c:
         ec:e8:d8:d6:62:ec:a6:1a:ef:ca:3d:0a:f4:01:66:33:9a:6e:
         c5:30:dd:a1:be:bd:a6:58:c4:f6:ea:39:ff:24:0b:67:30:da:
         bc:39:e6:26:3e:0d:58:0b:b6:5f:ad:5f:f9:69:58:04:01:53:
         7d:7c:07:1d:e1:90:45:1c:4d:69:d4:5c:53:ea:51:98:23:d8:
         97:07:f0:5e:c2:a6:83:f6:63:a0:98:d1:e5:5f:aa:3f:94:40:
         50:2b:f7:b1:4c:a1:99:a3:1d:1b:61:f1:bb:a3:d6:a3:27:72:
         54:cd:50:e3:9a:f4:72:19:b7:3b:bf:30:82:67:1a:be:e6:7f:
         c6:11:54:5b:d6:09:f0:7c:f4:6e:83:ce:6a:e7:9e:97:8e:72:
         a0:b5:91:d9:2c:ec:f6:bc:8c:95:b7:8b:44:67:30:df:16:37:
         55:36:d3:c0:c0:6a:0a:8e:81:73:48:17:ce:10:9c:bb:e2:50:
         f5:fe:71:6c:2e:f7:fa:de:c8:39:0e:85:09:2d:d0:67:b0:ed:
         85:f5:82:6b:32:e3:50:8a:75:bc:7f:fa:3b:89:5f:83:5c:0c:
         3e:ac:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----