Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7b7472-b6fe-41fe-8c4a-bbad4c4f44e7/1/53FLYM7VkMoA1SPEHT_nieRpXlE.mft
File:                     53FLYM7VkMoA1SPEHT_nieRpXlE.mft (raw, json)
Hash identifier:          UtGq7GIfDwPo1nB/JpyKiYGVqs2xQFrEVMEybsSyY/g=
Subject key identifier:   F2:C8:46:5A:75:33:C4:A6:8E:97:9D:C7:DD:23:F8:DE:5D:27:5F:F8
Authority key identifier: E7:71:4B:60:CE:D5:90:CA:00:D5:23:C4:1D:3F:E7:89:E4:69:5E:51
Certificate issuer:       /CN=e7714b60ced590ca00d523c41d3fe789e4695e51
Certificate serial:       018BEC2D2B3773FBA8FCD2609871DCD8ABF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53FLYM7VkMoA1SPEHT_nieRpXlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7b7472-b6fe-41fe-8c4a-bbad4c4f44e7/1/53FLYM7VkMoA1SPEHT_nieRpXlE.mft
Manifest number:          0859
Signing time:             Mon 20 Nov 2023 10:01:04 +0000
Manifest this update:     Mon 20 Nov 2023 10:01:04 +0000
Manifest next update:     Tue 21 Nov 2023 10:01:04 +0000
Files and hashes:         1: 53FLYM7VkMoA1SPEHT_nieRpXlE.crl (hash: 8xw8pVNUk+G7OgmvKVFwfSk4R0uXiHtlszGLCWx11qU=)
                          2: gAQWhwedTySnfztBM5R86RRKJRs.roa (hash: 3I33uiblDlq4xN5ZNmD31Zyh2lO2QQzp+2464dK97Ro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ec:2d:2b:37:73:fb:a8:fc:d2:60:98:71:dc:d8:ab:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7714b60ced590ca00d523c41d3fe789e4695e51
        Validity
            Not Before: Nov 20 10:01:04 2023 GMT
            Not After : Nov 21 10:01:04 2023 GMT
        Subject: CN=f2c8465a7533c4a68e979dc7dd23f8de5d275ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:f6:7e:90:c8:0e:58:c1:f2:ea:c6:69:07:
                    f6:05:42:2d:f2:7c:d3:88:97:0b:59:42:a0:20:7f:
                    2f:51:27:14:ed:ec:26:bc:a4:5a:6f:f3:59:fb:8c:
                    32:1d:9e:13:ca:3e:8f:0f:2b:ac:44:a0:92:75:25:
                    8c:f8:19:68:0a:2c:89:85:0d:f6:66:fc:d1:a0:22:
                    4b:fa:37:5a:5e:ff:b4:e3:9c:e3:c8:14:ca:b9:34:
                    76:f8:ed:28:be:d2:31:d4:7a:2b:22:da:dc:3d:bc:
                    a4:e6:6c:3b:ee:53:57:10:d4:14:05:e2:be:12:82:
                    8c:0d:e4:7d:56:37:c8:cb:ab:04:d2:fe:bc:29:85:
                    f2:87:79:42:7a:16:e2:61:74:6d:0c:d3:6d:f4:59:
                    12:eb:02:48:8a:d7:47:37:d4:72:6b:d0:e3:45:b8:
                    75:b5:83:ca:16:c9:63:7f:f5:5c:32:87:fa:43:c1:
                    27:e5:f2:cc:3a:13:9e:46:8b:46:4f:bc:b7:8a:42:
                    8e:68:2d:4c:ac:96:ec:16:0e:6f:60:33:9d:f7:28:
                    8b:8c:41:86:6b:12:5f:16:ea:01:ea:b6:8e:e7:2c:
                    31:1b:cd:f8:86:85:d0:ab:93:95:bb:16:03:da:96:
                    0b:c7:de:98:1d:f7:db:e3:49:c5:9b:03:52:20:16:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C8:46:5A:75:33:C4:A6:8E:97:9D:C7:DD:23:F8:DE:5D:27:5F:F8
            X509v3 Authority Key Identifier:
                keyid:E7:71:4B:60:CE:D5:90:CA:00:D5:23:C4:1D:3F:E7:89:E4:69:5E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53FLYM7VkMoA1SPEHT_nieRpXlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7b7472-b6fe-41fe-8c4a-bbad4c4f44e7/1/53FLYM7VkMoA1SPEHT_nieRpXlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7b7472-b6fe-41fe-8c4a-bbad4c4f44e7/1/53FLYM7VkMoA1SPEHT_nieRpXlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:38:4b:a3:af:ed:7b:d0:02:d2:5f:c8:28:fa:5e:8a:03:
         2f:22:50:71:fa:af:18:48:68:46:52:08:24:fd:bd:17:a5:84:
         61:0e:27:c2:90:69:88:9a:33:5a:7e:58:04:ec:7a:58:2b:c3:
         6c:ad:2b:a1:35:db:b5:c8:03:00:2c:22:f7:45:6b:53:db:66:
         5c:a0:4c:f8:21:e4:60:98:96:ba:ee:d8:67:47:d9:11:38:64:
         b4:4a:b3:ed:81:d1:ff:ea:ac:ce:ee:fc:83:d4:1a:2d:a4:70:
         13:9f:18:d1:82:e6:94:7f:03:6e:6e:f2:24:d7:2a:c8:87:1d:
         2b:c4:98:3c:ca:60:fa:a8:46:6b:a5:89:47:01:72:0f:a4:6a:
         9c:42:50:0d:ae:ae:92:3b:51:6f:e0:f9:b0:4d:2f:88:2c:f8:
         cb:bd:81:30:d0:3d:98:1c:84:68:96:e7:08:df:ff:0f:0c:aa:
         ed:a0:64:32:d6:40:70:e7:79:5e:37:c4:27:b0:bc:d3:92:a3:
         a0:17:de:07:1b:8f:b5:66:79:12:a5:86:f6:83:33:e6:42:8f:
         02:81:9e:d3:ef:c0:79:90:4f:92:87:96:2a:9f:7a:85:c7:93:
         a4:ae:c2:64:43:97:2f:e7:ca:06:95:ea:ac:5c:e5:8e:8d:d2:
         ca:22:bd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----