Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c4cdb0-d9f6-45d5-a524-f5d34f5e85d6/1/K_N0bbBAgMeAqLxtldcCRYGMBzg.mft
File:                     K_N0bbBAgMeAqLxtldcCRYGMBzg.mft (raw, json)
Hash identifier:          twQeEpSgwvUrXwn2+PzaoSs1+j/YsZXEOpBX4qDrgbA=
Subject key identifier:   38:60:02:E4:6E:9E:23:BA:30:28:E1:16:F5:3F:90:7E:42:C6:49:41
Authority key identifier: 2B:F3:74:6D:B0:40:80:C7:80:A8:BC:6D:95:D7:02:45:81:8C:07:38
Certificate issuer:       /CN=2bf3746db04080c780a8bc6d95d70245818c0738
Certificate serial:       018ACA48912907900C57BD562A7E84C3B70D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_N0bbBAgMeAqLxtldcCRYGMBzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/c4cdb0-d9f6-45d5-a524-f5d34f5e85d6/1/K_N0bbBAgMeAqLxtldcCRYGMBzg.mft
Manifest number:          0890
Signing time:             Mon 25 Sep 2023 03:01:07 +0000
Manifest this update:     Mon 25 Sep 2023 03:01:07 +0000
Manifest next update:     Tue 26 Sep 2023 03:01:07 +0000
Files and hashes:         1: K_N0bbBAgMeAqLxtldcCRYGMBzg.crl (hash: ccUnqrxaS7N3PdUHkf1UnE+QVWrTipL7Q3MQ9dJyehU=)
                          2: XqSU2XYjkJB9Yat8AHqNfbgF64c.roa (hash: HdSZO2kKAVLMFspGGdoyOTOsgKIxXLkHDtT/2iIBUE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ca:48:91:29:07:90:0c:57:bd:56:2a:7e:84:c3:b7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3746db04080c780a8bc6d95d70245818c0738
        Validity
            Not Before: Sep 25 03:01:07 2023 GMT
            Not After : Sep 26 03:01:07 2023 GMT
        Subject: CN=386002e46e9e23ba3028e116f53f907e42c64941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:b4:71:19:85:65:38:87:4e:e6:57:c1:97:
                    2b:f6:9d:e0:a1:38:ec:91:e5:a8:a9:5b:9f:fe:f4:
                    02:11:56:72:30:ae:3f:c2:29:89:04:de:66:89:8b:
                    fe:10:a8:99:2e:5e:5d:c1:76:d7:c6:c2:59:99:48:
                    30:b3:60:4e:0e:f3:cc:b6:d8:a2:92:9a:66:3a:87:
                    8e:89:fb:5a:84:74:7b:9d:2c:fd:1f:dd:95:89:3f:
                    37:b1:42:11:e0:2b:f3:f9:3e:9f:c4:d2:00:15:c6:
                    6e:cf:74:54:38:ae:0a:a1:12:48:78:9e:ce:8d:9f:
                    a7:60:4b:2f:83:9c:d4:1d:d9:f5:60:12:59:ce:64:
                    19:af:69:16:c7:60:b2:af:b4:f9:58:08:cf:d7:fa:
                    da:0a:50:26:d0:76:80:ca:3f:06:de:a2:aa:94:0c:
                    fb:f4:eb:ed:c1:7f:af:3e:6b:af:97:23:b7:29:48:
                    fc:0d:0f:e0:f7:de:86:ba:76:57:83:24:b6:7d:a8:
                    7c:54:49:f2:82:72:16:8b:a8:29:0c:64:8d:37:09:
                    0e:19:e5:4b:53:67:02:b8:8e:11:a6:a6:40:d1:af:
                    37:aa:3e:9e:88:8c:47:c9:38:b6:7a:6e:ce:ea:11:
                    70:10:e2:2d:09:54:9a:f4:6a:6d:e6:57:0d:65:c4:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:02:E4:6E:9E:23:BA:30:28:E1:16:F5:3F:90:7E:42:C6:49:41
            X509v3 Authority Key Identifier:
                keyid:2B:F3:74:6D:B0:40:80:C7:80:A8:BC:6D:95:D7:02:45:81:8C:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_N0bbBAgMeAqLxtldcCRYGMBzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c4cdb0-d9f6-45d5-a524-f5d34f5e85d6/1/K_N0bbBAgMeAqLxtldcCRYGMBzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c4cdb0-d9f6-45d5-a524-f5d34f5e85d6/1/K_N0bbBAgMeAqLxtldcCRYGMBzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:a3:c2:47:3a:28:dc:3d:41:1b:10:a5:1d:fe:8a:9d:b5:
         a2:6a:2d:ab:6e:b7:13:7c:37:16:8d:16:46:79:50:84:a9:cd:
         2e:58:17:85:96:d8:ae:c3:83:c1:ad:ab:7f:dd:a3:11:b1:04:
         4d:00:53:d4:53:02:04:2a:dd:53:6c:32:b4:59:71:49:87:d2:
         b6:c6:3f:12:1c:9d:34:61:6a:fe:ef:99:bd:94:8b:e0:54:85:
         b1:8a:52:cc:47:f2:b2:e2:19:0b:c9:fe:c0:44:8f:e7:52:50:
         fd:38:cf:da:73:cb:48:ca:f1:b3:24:6e:9e:91:55:b2:a2:ff:
         90:3b:2b:cc:3a:6a:22:87:e4:9b:3d:ac:d0:92:6a:a8:d1:f7:
         07:04:dd:ef:ff:bc:b6:d7:76:0b:65:75:d7:6f:aa:f5:ea:5a:
         9c:34:64:7a:c0:2a:f9:86:77:56:06:00:9d:65:eb:27:86:ab:
         ba:e0:7a:f4:a7:3f:16:6d:4e:a6:74:bc:82:87:92:be:18:5a:
         97:08:f3:9c:fd:d8:b7:da:c9:7a:46:1f:28:8b:45:9a:4a:ff:
         22:9d:c1:a3:c5:89:c3:6a:68:07:9b:3c:18:9d:32:ea:27:d0:
         06:d8:ea:2e:69:fb:33:4e:80:b8:90:b0:b2:83:d2:42:14:96:
         ae:16:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----