Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.mft
File:                     NE9esO_FF9bKrrfHSoR_llwOFNk.mft (raw, json)
Hash identifier:          gbv1MYWHaMRIZ/r/HKqmqIA1biJkVUhOXfHfpdPc3yA=
Subject key identifier:   D5:D0:0F:89:AD:DA:5A:17:C5:C1:63:17:1B:7F:2B:42:07:60:98:44
Authority key identifier: 34:4F:5E:B0:EF:C5:17:D6:CA:AE:B7:C7:4A:84:7F:96:5C:0E:14:D9
Certificate issuer:       /CN=344f5eb0efc517d6caaeb7c74a847f965c0e14d9
Certificate serial:       018A4A9BA5A24A4C3617786E2D6EBE451313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NE9esO_FF9bKrrfHSoR_llwOFNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.mft
Manifest number:          0C0E
Signing time:             Thu 31 Aug 2023 08:00:28 +0000
Manifest this update:     Thu 31 Aug 2023 08:00:28 +0000
Manifest next update:     Fri 01 Sep 2023 08:00:28 +0000
Files and hashes:         1: NE9esO_FF9bKrrfHSoR_llwOFNk.crl (hash: YRvct3tNoMKF4TuPqfopx9fB78nk8FympI/EFZhFzFo=)
                          2: blV0PoyS7a4eJtdf2-B7PmHKZhY.roa (hash: jjqp3/FqkhbOC36XFl9/+7/DFO7IMYNtVlBTqn9Svuk=)
                          3: j7-iblN5JOeJyLdHecq0S1ivdqw.roa (hash: CheuFxIqng2yjFQNcKCwttoUt/f2nW5FWlg7QfmAb5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4a:9b:a5:a2:4a:4c:36:17:78:6e:2d:6e:be:45:13:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344f5eb0efc517d6caaeb7c74a847f965c0e14d9
        Validity
            Not Before: Aug 31 08:00:28 2023 GMT
            Not After : Sep  1 08:00:28 2023 GMT
        Subject: CN=d5d00f89adda5a17c5c163171b7f2b4207609844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:3d:55:74:b7:42:94:24:05:5c:7b:86:fb:
                    fb:ec:71:6d:a7:f5:c4:72:63:c0:5c:c9:90:37:19:
                    b7:f5:08:38:53:7d:05:0c:bb:2f:6e:4d:4b:e6:b1:
                    b9:9f:f5:0b:f4:fd:2b:d4:9d:c1:92:e1:ee:ab:d2:
                    1b:67:72:ce:cf:44:2b:20:d5:cb:77:1c:1b:81:f8:
                    fa:cf:70:57:97:e9:17:15:01:8f:8c:5a:06:dc:71:
                    db:d4:0f:29:35:c7:4a:81:0d:81:83:8f:5e:a4:78:
                    db:9e:e0:0a:88:28:31:67:b9:b6:22:6b:3c:e6:9b:
                    85:45:26:5e:7d:d5:69:c2:ae:45:70:02:6b:5f:78:
                    6d:81:7b:51:4d:e0:fe:bb:62:71:56:37:a2:be:9b:
                    c0:8b:24:ab:da:a0:92:d0:3d:f7:91:c4:12:22:64:
                    ee:62:4b:0a:8f:0d:b3:7b:aa:81:53:d1:bb:6d:bf:
                    fb:1c:80:8c:9d:3f:c2:36:93:86:ec:8d:56:b5:bd:
                    81:c6:56:83:61:a7:5e:27:56:0a:b4:67:d7:3d:70:
                    f4:76:bb:e1:9a:03:04:ff:0b:5c:26:5a:d8:9d:7e:
                    9f:ed:9a:e3:c3:8f:62:79:4c:03:a5:db:86:65:4c:
                    cf:ab:33:23:3c:e3:9d:c7:dc:a9:e8:24:65:a9:3a:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D0:0F:89:AD:DA:5A:17:C5:C1:63:17:1B:7F:2B:42:07:60:98:44
            X509v3 Authority Key Identifier:
                keyid:34:4F:5E:B0:EF:C5:17:D6:CA:AE:B7:C7:4A:84:7F:96:5C:0E:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE9esO_FF9bKrrfHSoR_llwOFNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:42:fa:56:5b:29:00:52:14:b2:62:23:a9:4b:e2:97:1f:81:
         11:48:39:63:7c:6f:a5:2a:75:ef:a8:76:8c:e6:5e:9e:dc:88:
         44:7e:2d:9d:42:3f:f6:36:21:e3:15:14:c0:91:33:fd:c0:e0:
         20:4e:36:1e:b9:9b:a1:68:ae:7c:d3:36:16:3d:c7:0b:f4:3a:
         dc:d4:e6:31:35:86:d7:66:c6:2b:23:60:90:f6:83:50:4d:16:
         45:56:a7:78:e8:60:f7:fe:19:07:92:2c:e8:83:e0:db:f8:be:
         05:a2:cb:06:3d:6e:4f:b0:dc:c4:60:98:55:bd:37:bd:0d:b0:
         b8:cf:2e:ac:39:8d:c0:42:b5:1e:ed:93:f3:63:c1:82:29:1b:
         1f:e8:1c:2d:69:45:ca:a7:46:68:88:0b:81:8e:70:ec:c3:64:
         16:3a:db:ee:d8:1a:de:8a:04:84:d3:c9:07:96:e6:51:01:9f:
         b5:b8:06:89:4c:eb:fe:89:e5:17:d9:5a:9f:58:61:8e:83:30:
         fe:a4:d4:4b:57:32:3a:e3:de:fb:11:57:f1:75:6b:da:be:d9:
         2f:4f:da:52:30:07:a7:0c:04:0a:4f:13:8a:64:cb:b5:53:27:
         6c:00:7b:5c:c0:64:bb:68:aa:e5:66:51:3a:64:89:8c:37:3a:
         10:19:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----