Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.mft
File:                     Bkq6AV0rZSy0idpL2ZLRS-B2c8c.mft (raw, json)
Hash identifier:          kqN2QL7J3FvATJRp1w+hZRcRJUBT56XYggKF7fcj5ZY=
Subject key identifier:   0B:B1:BF:06:EE:91:FC:9F:EE:B9:E7:E5:78:5D:8A:3D:39:E8:6D:7F
Authority key identifier: 06:4A:BA:01:5D:2B:65:2C:B4:89:DA:4B:D9:92:D1:4B:E0:76:73:C7
Certificate issuer:       /CN=064aba015d2b652cb489da4bd992d14be07673c7
Certificate serial:       018B3C6FB38A1A4CE7BBC8183627B92133B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.mft
Manifest number:          0860
Signing time:             Tue 17 Oct 2023 07:00:35 +0000
Manifest this update:     Tue 17 Oct 2023 07:00:35 +0000
Manifest next update:     Wed 18 Oct 2023 07:00:35 +0000
Files and hashes:         1: Bkq6AV0rZSy0idpL2ZLRS-B2c8c.crl (hash: o30V6U5WBZNUSItbw95Knsypn8D4qq8SVifxXb/vilg=)
                          2: z4i7vNcM5nMOlfJY-a4tnfdWPl8.roa (hash: qrFsUk+F6BZL/cGcD1WzgGfPterf4Wr20EkcQaUwaWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:6f:b3:8a:1a:4c:e7:bb:c8:18:36:27:b9:21:33:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064aba015d2b652cb489da4bd992d14be07673c7
        Validity
            Not Before: Oct 17 07:00:35 2023 GMT
            Not After : Oct 18 07:00:35 2023 GMT
        Subject: CN=0bb1bf06ee91fc9feeb9e7e5785d8a3d39e86d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:37:8b:c9:29:18:10:e0:9e:ff:69:11:bc:
                    27:b5:c4:e1:ec:b3:5a:7c:ab:17:ea:54:45:c0:f8:
                    1b:fd:ad:e8:b6:dd:6e:89:12:24:da:93:58:6f:43:
                    44:a0:94:79:0f:a4:a1:02:a6:4f:54:78:af:17:2e:
                    e7:ea:55:ec:33:35:df:eb:93:7f:d6:ba:81:6c:74:
                    3e:fc:a6:d3:46:96:41:65:4f:b2:73:93:ea:98:17:
                    54:f2:f6:c2:db:44:3d:59:2a:01:2d:bc:d4:2c:5d:
                    f0:e4:03:ff:25:3e:e9:45:15:65:01:64:1a:92:1f:
                    a5:3f:1b:56:99:cf:c4:b3:b5:8a:92:a0:18:e4:d7:
                    9c:85:03:bf:6c:63:e9:1a:aa:c9:3f:96:b1:e5:f4:
                    a4:f8:cc:76:bc:95:07:36:f9:46:3f:29:60:23:a6:
                    b7:18:1b:79:c9:02:c1:83:33:cc:d6:f2:03:15:ee:
                    c4:b9:8d:d3:5d:d2:d1:90:67:fc:b8:18:b4:e8:87:
                    da:59:a8:df:c9:f3:d6:8a:40:2c:3e:de:5c:28:6c:
                    3b:6e:c5:dc:85:73:3b:e8:b8:86:f7:df:b1:92:2d:
                    32:d2:d6:07:58:11:28:46:f4:d7:bb:a6:c4:c8:86:
                    7b:10:5c:ce:5d:31:57:a7:ea:fb:16:c2:e9:04:6c:
                    f1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B1:BF:06:EE:91:FC:9F:EE:B9:E7:E5:78:5D:8A:3D:39:E8:6D:7F
            X509v3 Authority Key Identifier:
                keyid:06:4A:BA:01:5D:2B:65:2C:B4:89:DA:4B:D9:92:D1:4B:E0:76:73:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:c1:9d:f4:cf:e8:dc:45:8b:49:81:4b:b6:fe:59:70:24:
         50:83:7b:1b:57:70:2c:de:2a:69:7a:53:6d:18:2a:4d:2b:d9:
         03:2e:5c:0b:87:1c:3a:e2:44:7a:76:0f:b0:ed:6d:85:36:aa:
         c6:27:35:c1:ff:4b:cf:4a:33:35:ae:c2:bc:41:d0:53:9a:18:
         af:27:9b:15:e3:06:f0:43:28:dd:d1:18:10:0d:52:64:68:48:
         62:ac:e3:37:cd:a9:96:50:a3:e4:6d:b2:b5:e8:ed:08:1a:cf:
         fb:d9:36:44:d1:86:b4:d1:a6:98:76:ce:c1:cf:14:86:d6:6d:
         8c:2c:d4:7a:46:1a:a8:6c:ec:4c:a3:af:aa:08:39:a8:52:45:
         d3:ed:04:23:cd:fb:fc:25:80:eb:a8:63:2e:dd:f2:6e:99:39:
         d6:6b:bb:c2:b7:c3:9e:c5:df:dc:b4:75:7e:17:33:0b:d4:e3:
         2d:fd:8f:d5:7e:bb:05:3a:88:d3:f8:7a:1b:3d:23:6a:da:1c:
         5b:d2:ba:e5:6d:db:28:80:7c:78:09:34:1f:c4:2f:ce:b3:57:
         f0:72:72:41:b5:b0:45:81:bc:39:02:d7:26:cc:76:3b:4b:00:
         b5:f8:28:ca:72:e1:ed:fd:cc:f2:88:db:69:fa:8f:b7:f0:54:
         82:b8:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----