Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.mft
File:                     mo6mX2lhbvGMC2kfSbwl3TCFQps.mft (raw, json)
Hash identifier:          oFX2uaC8WXZPhC+GrxwkOt/+lNGY4wbCP31PRrpU3ak=
Subject key identifier:   72:8D:84:4A:A4:BB:45:46:5C:B8:0D:83:20:ED:78:B1:1D:60:17:D4
Authority key identifier: 9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
Certificate issuer:       /CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Certificate serial:       018B385C50F21C25E0A7F3B81FEDF84F110F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.mft
Manifest number:          084F
Signing time:             Mon 16 Oct 2023 12:00:55 +0000
Manifest this update:     Mon 16 Oct 2023 12:00:55 +0000
Manifest next update:     Tue 17 Oct 2023 12:00:55 +0000
Files and hashes:         1: ErP6T8Zn2N8TcUe27h8uODygCyA.roa (hash: vRPOPnPBkEZ1SZK1CzMfs6zuOeUjErzYzzEwcjLU+V8=)
                          2: mo6mX2lhbvGMC2kfSbwl3TCFQps.crl (hash: eIzVgZMd/S2+chLInKKvxilJ1VOORK+uvuN2nWK+2dw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:38:5c:50:f2:1c:25:e0:a7:f3:b8:1f:ed:f8:4f:11:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
        Validity
            Not Before: Oct 16 12:00:55 2023 GMT
            Not After : Oct 17 12:00:55 2023 GMT
        Subject: CN=728d844aa4bb45465cb80d8320ed78b11d6017d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:34:0b:9d:1e:56:36:f9:9c:f0:5a:0c:43:
                    76:b6:73:02:35:1d:38:e0:9a:22:d6:c4:c8:5f:6f:
                    e0:60:18:37:1c:22:15:2b:c9:d5:fe:e9:b4:54:45:
                    3b:4b:9f:de:22:e1:59:f5:46:00:0e:ea:9e:46:78:
                    69:28:a9:56:ec:49:68:a6:c3:ac:93:ff:76:7f:e9:
                    38:4d:0e:f5:4e:5d:2e:33:9b:24:6f:69:35:2a:1b:
                    76:a7:5b:fe:01:64:f8:02:38:6e:aa:2e:c6:74:70:
                    14:86:e1:eb:f4:8d:b8:8f:bb:35:2a:22:b4:14:4a:
                    11:9e:5b:16:bf:5c:f7:9b:44:ee:d5:a4:4d:0e:40:
                    25:51:4f:00:6f:52:6e:52:b6:d7:3a:9e:29:f7:33:
                    0c:e9:24:1f:0a:85:9c:f7:26:be:a2:fd:dd:72:ba:
                    c6:87:09:f6:28:19:15:4e:20:e0:47:60:8c:30:a9:
                    b0:9f:4d:2e:0e:36:39:b6:e1:26:8c:20:58:b5:30:
                    6a:e3:af:04:7c:b9:83:79:29:cc:13:fe:28:4c:88:
                    ef:51:fd:60:8a:0c:38:e1:c0:c9:54:63:33:ee:00:
                    99:57:06:c1:f6:6e:4e:b0:f1:40:35:ab:50:d6:ab:
                    ec:13:73:7c:cb:5f:3f:2f:2e:e2:c2:16:bc:29:af:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8D:84:4A:A4:BB:45:46:5C:B8:0D:83:20:ED:78:B1:1D:60:17:D4
            X509v3 Authority Key Identifier:
                keyid:9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:66:69:57:b0:83:76:72:d0:b0:d1:ab:83:79:56:0a:a7:8a:
         5d:37:75:92:a4:2a:37:d6:43:d0:e6:b1:66:50:37:9e:a8:80:
         e1:41:1d:39:f9:e5:17:ec:25:34:62:0f:8c:fa:cd:bd:e6:74:
         4a:89:24:78:78:0a:b3:03:c0:83:0b:06:f5:eb:34:b9:fa:ea:
         73:36:f2:94:25:cd:54:ce:bf:f9:54:ed:b7:50:2f:56:78:9a:
         ed:dd:47:fd:c2:b5:ab:a7:cc:14:aa:21:9d:f0:c1:d2:a1:1b:
         17:9e:51:53:05:2f:37:49:8b:c1:7f:eb:3a:55:50:f5:42:3e:
         5b:16:64:96:33:ef:a1:7a:19:85:c4:56:66:75:f7:47:53:1b:
         f0:8f:2e:91:c7:6e:02:6f:2e:71:e1:6b:04:43:cd:78:dc:6a:
         c5:79:76:67:9e:80:9b:97:a1:42:12:f0:6d:8d:be:d0:2a:ef:
         57:cf:a9:fe:6b:aa:b5:38:79:9d:14:35:8c:5d:0b:1d:9d:0c:
         81:40:b5:89:ca:67:12:5e:ae:6c:2d:cc:bd:66:d8:b2:05:5c:
         fd:de:fd:8a:d9:0c:99:5a:6f:ab:3c:92:b7:05:58:9d:13:cb:
         82:0e:b1:c7:74:cb:44:4c:58:0b:3a:04:2b:4f:6d:2e:95:70:
         76:29:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----