Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/Hu37F7h92VmmiF9Oy95sT3ZIGVU.mft
File:                     Hu37F7h92VmmiF9Oy95sT3ZIGVU.mft (raw, json)
Hash identifier:          efJntSmFL/qvPC2+aVsD3c0AcqS1spOncQf9AyhdWU0=
Subject key identifier:   01:D3:58:F1:8F:89:78:28:61:77:4A:FC:DE:85:BE:33:3F:CD:5E:9F
Authority key identifier: 1E:ED:FB:17:B8:7D:D9:59:A6:88:5F:4E:CB:DE:6C:4F:76:48:19:55
Certificate issuer:       /CN=1eedfb17b87dd959a6885f4ecbde6c4f76481955
Certificate serial:       018A49528087658FD61CECA08875E9BD0EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hu37F7h92VmmiF9Oy95sT3ZIGVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/Hu37F7h92VmmiF9Oy95sT3ZIGVU.mft
Manifest number:          085D
Signing time:             Thu 31 Aug 2023 02:00:58 +0000
Manifest this update:     Thu 31 Aug 2023 02:00:58 +0000
Manifest next update:     Fri 01 Sep 2023 02:00:58 +0000
Files and hashes:         1: Hu37F7h92VmmiF9Oy95sT3ZIGVU.crl (hash: XybzOYbzGapyO/LOdEvTcB+lUSwQBCBMSLJ4nSkgKs0=)
                          2: N4tYZJ0HXEClgd1jwhUuaQd7fRs.roa (hash: gIS3Fj/SJUJDEx5r/sVQqOAadM517xa2rJ7en7h7xfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:49:52:80:87:65:8f:d6:1c:ec:a0:88:75:e9:bd:0e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eedfb17b87dd959a6885f4ecbde6c4f76481955
        Validity
            Not Before: Aug 31 02:00:58 2023 GMT
            Not After : Sep  1 02:00:58 2023 GMT
        Subject: CN=01d358f18f89782861774afcde85be333fcd5e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:2f:aa:00:78:ac:f6:8a:3a:31:b6:50:c6:
                    b5:3b:46:11:3c:d4:74:80:55:c5:76:80:b8:ad:22:
                    df:f1:e7:cf:85:3d:3b:4c:10:3e:a5:b3:ff:ef:0b:
                    72:a9:54:f6:16:3c:d0:31:05:7f:89:70:3b:bc:ac:
                    d5:bf:0d:5c:2e:12:07:fe:fa:b1:14:95:be:0f:5a:
                    0f:a1:3b:49:2d:eb:cf:27:0d:16:c4:75:0b:fe:de:
                    ec:58:84:ce:45:c4:29:6b:fc:b2:d3:95:a6:e8:80:
                    87:28:b3:61:11:a0:ea:b8:59:68:d3:4d:dd:4c:db:
                    d1:72:50:7c:3b:a3:6f:79:98:e8:95:2e:f8:18:05:
                    7f:d8:0b:69:7a:69:e3:38:20:42:0b:af:4f:14:86:
                    f9:d9:cc:f6:3d:72:74:30:10:60:55:c3:94:3c:53:
                    2a:a7:ab:b4:b3:73:f6:57:cb:d7:cf:57:6e:69:75:
                    3f:d9:bc:3d:c5:b7:f1:85:26:83:ac:33:50:93:e6:
                    f6:7b:98:80:d5:2f:56:20:05:b8:29:c4:65:ae:94:
                    9c:b1:23:e3:0a:86:09:bc:75:d1:b3:4a:d6:5b:6d:
                    a2:04:26:3a:1d:4e:c0:17:1e:3c:9b:61:29:ca:7f:
                    bd:83:70:ab:01:1e:15:b6:24:b7:b1:44:38:f0:a4:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D3:58:F1:8F:89:78:28:61:77:4A:FC:DE:85:BE:33:3F:CD:5E:9F
            X509v3 Authority Key Identifier:
                keyid:1E:ED:FB:17:B8:7D:D9:59:A6:88:5F:4E:CB:DE:6C:4F:76:48:19:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hu37F7h92VmmiF9Oy95sT3ZIGVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/Hu37F7h92VmmiF9Oy95sT3ZIGVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/Hu37F7h92VmmiF9Oy95sT3ZIGVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:d0:ab:33:95:80:4e:de:45:29:0f:e7:f8:79:3a:90:f8:
         14:c5:ff:73:bb:09:ce:9a:1d:7c:fa:6c:0f:fc:c6:8e:e4:e3:
         45:e4:9f:43:7f:07:37:3c:a8:90:cf:7b:3e:54:87:7e:15:86:
         19:1a:bd:8c:55:f9:ad:65:28:c9:68:7d:e5:ec:80:f7:e9:b3:
         59:17:b2:7d:5c:7e:2a:fd:5b:8a:ee:f6:0a:3a:df:cb:c7:35:
         9c:00:e2:44:b4:59:0e:a6:a7:fb:f8:1c:f7:fd:1f:32:79:47:
         1f:ab:69:64:75:e7:17:4c:7d:33:b2:25:d5:97:67:f6:37:75:
         00:ea:b8:17:1a:d3:c2:4d:f0:b9:2a:b5:42:51:cf:0d:0e:ba:
         29:61:ef:71:05:f3:e8:7c:70:a2:ff:d0:e2:eb:af:5d:3e:cb:
         3e:10:28:0b:70:44:a2:2b:eb:3f:43:b5:46:82:a9:da:10:d9:
         1e:c3:19:9a:ff:f5:ff:04:d4:f1:95:f7:1f:43:56:f0:c3:7b:
         28:65:55:2c:9d:95:ad:9e:5d:33:ad:97:08:7d:48:0b:8a:66:
         de:e6:d6:47:7c:62:d0:36:49:45:db:b2:77:91:8a:3d:f2:ef:
         7a:d4:0e:12:30:46:da:53:af:d7:aa:82:f4:dd:32:7f:9b:9a:
         73:fc:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----