Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.mft
File:                     lh_77d_l3Pd_Agbg1z8WTwzVMmg.mft (raw, json)
Hash identifier:          4Uxb93P+J452aOARiPPU9Clvt5upHd3pB6w5Zf+UM9c=
Subject key identifier:   AC:83:DA:8E:D8:23:1D:2D:4F:B1:46:6A:14:75:1B:8C:1C:FF:BD:26
Authority key identifier: 96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68
Certificate issuer:       /CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
Certificate serial:       018BFB323D144051DE2D4BCD0E0E7835DBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.mft
Manifest number:          0867
Signing time:             Thu 23 Nov 2023 08:00:55 +0000
Manifest this update:     Thu 23 Nov 2023 08:00:55 +0000
Manifest next update:     Fri 24 Nov 2023 08:00:55 +0000
Files and hashes:         1: 1-htL2pmqq4zfg-GYiBYRqnad4JU.roa (hash: FgxkbyVvAirxzOoHUoKeZr8+3Wl2YbH7MMmABsoIYnk=)
                          2: lh_77d_l3Pd_Agbg1z8WTwzVMmg.crl (hash: Y5niWFJeFH4FOjHGaDY/W4TRQKfR622rzVz7bgwCrUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fb:32:3d:14:40:51:de:2d:4b:cd:0e:0e:78:35:db:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961ffbeddfe5dcf77f0206e0d73f164f0cd53268
        Validity
            Not Before: Nov 23 08:00:55 2023 GMT
            Not After : Nov 24 08:00:55 2023 GMT
        Subject: CN=ac83da8ed8231d2d4fb1466a14751b8c1cffbd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:04:55:c6:14:43:94:f1:f1:85:03:56:2d:
                    d1:9a:5d:50:97:4c:de:f2:7c:d9:77:2d:6f:d0:48:
                    87:9d:04:62:16:d9:a9:f0:6e:88:9f:0c:a0:e5:3e:
                    3e:b9:94:ce:9a:87:23:a6:5a:7d:92:b0:99:9d:1e:
                    d9:78:87:67:06:31:7f:54:4f:69:c0:0e:96:18:d5:
                    10:b5:4d:be:92:ee:28:fc:b1:cd:ef:46:06:10:54:
                    15:3d:d4:99:82:db:fb:73:83:77:63:a3:5b:39:f1:
                    a5:97:c0:c3:55:e3:ff:d9:fb:e3:12:a7:37:0b:46:
                    8f:f1:f0:c2:b8:4c:44:5b:97:52:99:2b:00:55:20:
                    79:ee:8b:55:28:c3:69:fe:81:1f:29:a5:44:8e:b3:
                    99:6a:8a:54:fb:71:bf:a4:21:d6:63:af:3f:16:c7:
                    c3:f3:2f:14:bb:56:8f:5f:b8:de:21:5e:ad:15:b2:
                    1e:ad:e5:7c:17:f1:bc:fc:f7:73:9c:98:00:d7:6a:
                    99:6c:72:e4:23:69:3e:2b:a1:1f:de:83:99:d2:51:
                    51:0a:c6:c7:26:ed:a3:76:e7:4a:b1:b9:30:9a:61:
                    81:51:7f:4c:70:f1:47:e3:36:72:d0:9a:08:d3:e5:
                    b5:60:1e:4f:81:1d:40:1a:64:fa:2e:9a:62:ce:10:
                    07:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:83:DA:8E:D8:23:1D:2D:4F:B1:46:6A:14:75:1B:8C:1C:FF:BD:26
            X509v3 Authority Key Identifier:
                keyid:96:1F:FB:ED:DF:E5:DC:F7:7F:02:06:E0:D7:3F:16:4F:0C:D5:32:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh_77d_l3Pd_Agbg1z8WTwzVMmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ed6ccf-929a-4e49-96fc-b5eb03dbf556/1/lh_77d_l3Pd_Agbg1z8WTwzVMmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:dd:d1:d0:79:84:98:c3:c5:e3:28:9e:c0:57:e9:83:95:a6:
         89:63:e4:e3:ad:58:36:cb:d9:1a:ac:c1:62:3e:ea:7c:a1:1d:
         aa:ec:fc:09:39:2f:bc:06:cb:5a:30:35:c8:37:d6:d9:3b:22:
         3f:43:61:9e:c6:72:57:84:27:bb:a4:4b:7b:8a:44:22:1c:a5:
         8b:09:df:2d:b3:45:c6:c9:b3:be:04:7f:28:4e:b0:72:90:28:
         73:25:4b:d4:03:25:4b:e3:3e:45:bb:00:a9:e5:fd:1f:af:b1:
         68:7f:1f:37:03:42:b5:96:d2:e5:7a:01:b5:c2:b1:14:af:26:
         fa:0d:ab:04:85:a6:79:95:23:d4:ba:33:75:6b:14:cd:e8:cd:
         5b:f2:ec:a6:f2:e5:ef:8b:70:cb:fe:10:57:bc:9a:78:f3:97:
         a2:fd:81:44:73:2b:ac:2a:9e:1e:6e:ee:a1:95:e2:28:aa:14:
         5b:b1:15:24:38:e9:11:19:71:f5:95:84:22:c1:5e:85:20:ea:
         8b:33:c4:e7:34:1f:ee:19:e0:bd:f2:94:23:c2:bc:f4:86:9a:
         eb:48:b9:ff:ef:0a:ca:d0:ac:46:fc:c6:96:ff:f0:b0:e8:2e:
         b3:0b:a2:bb:b2:74:e4:7d:25:76:b1:d5:f6:9d:45:b2:24:c6:
         0d:44:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----