Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/O1mdv97z9_ovpzn3fNyEAgVbDQw.mft
File:                     O1mdv97z9_ovpzn3fNyEAgVbDQw.mft (raw, json)
Hash identifier:          HZOJIy1MCKusZFhTzT+zDUfDFMrZbd9/8ErUdOT+Lhg=
Subject key identifier:   3C:01:0A:4F:C5:52:F1:C3:89:28:A7:9C:99:34:BE:3B:03:A9:76:66
Authority key identifier: 3B:59:9D:BF:DE:F3:F7:FA:2F:A7:39:F7:7C:DC:84:02:05:5B:0D:0C
Certificate issuer:       /CN=3b599dbfdef3f7fa2fa739f77cdc8402055b0d0c
Certificate serial:       018B93C584595AF6135F430B28C0AEBC81D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1mdv97z9_ovpzn3fNyEAgVbDQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/O1mdv97z9_ovpzn3fNyEAgVbDQw.mft
Manifest number:          08D4
Signing time:             Fri 03 Nov 2023 06:01:17 +0000
Manifest this update:     Fri 03 Nov 2023 06:01:17 +0000
Manifest next update:     Sat 04 Nov 2023 06:01:17 +0000
Files and hashes:         1: O1mdv97z9_ovpzn3fNyEAgVbDQw.crl (hash: N6MEAKRZxvk87O1ejs+v4YvIvn99oxh2aqsGRlLVgoo=)
                          2: __CDJ1VQocFKfa3_0fKM1lnCOS8.roa (hash: OF07aEnOhcAE7LyHK0R4l3i/Gb8ow82fDGlusNq8sbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:c5:84:59:5a:f6:13:5f:43:0b:28:c0:ae:bc:81:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b599dbfdef3f7fa2fa739f77cdc8402055b0d0c
        Validity
            Not Before: Nov  3 06:01:17 2023 GMT
            Not After : Nov  4 06:01:17 2023 GMT
        Subject: CN=3c010a4fc552f1c38928a79c9934be3b03a97666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:42:69:93:52:c4:c5:5f:83:4b:95:bb:5c:78:
                    4a:9f:e5:07:76:6c:a1:77:ce:e7:fd:53:0a:23:53:
                    e5:6f:22:fd:70:97:33:ca:46:31:b1:97:e8:19:d7:
                    21:e5:51:c6:1a:b5:90:ab:41:b6:a6:06:e2:49:c9:
                    63:e0:b7:9a:f7:4d:97:96:cd:be:f9:8c:96:0b:b1:
                    97:b1:a8:c2:74:89:6a:6c:e2:22:eb:73:95:ba:bc:
                    29:6f:42:85:fd:f4:17:22:e1:57:6c:7c:c5:8b:db:
                    9a:fe:c8:19:d1:92:11:15:53:cf:6d:f7:92:00:bd:
                    5e:25:e7:da:e5:68:27:a5:f4:06:3e:78:80:47:fa:
                    0a:ea:a1:6b:44:b9:2a:76:83:d6:d5:9b:31:72:a3:
                    0e:ce:65:8f:08:94:5b:26:57:09:cc:a9:22:a1:13:
                    bf:69:48:0c:17:80:79:7b:cd:f3:c1:d3:7a:03:f0:
                    75:ef:a3:91:0c:1a:dd:7b:40:8f:fb:6b:36:d9:19:
                    f7:cf:f7:f5:6d:43:b1:13:e3:90:33:4e:04:51:60:
                    c2:62:d5:47:a1:b0:2c:3f:3f:f7:55:a1:10:cd:fa:
                    6e:84:46:65:8d:a0:7b:6d:fb:c0:cf:39:a7:66:ab:
                    ab:c9:53:71:83:c7:e9:b2:e5:a2:b5:eb:61:25:42:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:01:0A:4F:C5:52:F1:C3:89:28:A7:9C:99:34:BE:3B:03:A9:76:66
            X509v3 Authority Key Identifier:
                keyid:3B:59:9D:BF:DE:F3:F7:FA:2F:A7:39:F7:7C:DC:84:02:05:5B:0D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1mdv97z9_ovpzn3fNyEAgVbDQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/O1mdv97z9_ovpzn3fNyEAgVbDQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/O1mdv97z9_ovpzn3fNyEAgVbDQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:2f:03:21:f9:92:51:9e:ba:a4:f5:76:89:0b:84:8f:88:
         8f:14:63:b3:e1:c8:be:70:e1:60:e7:09:4f:a3:a9:19:85:0a:
         d7:f5:83:e6:aa:86:9a:7d:70:66:9b:07:14:1c:4f:24:5a:1b:
         e9:ab:a9:ce:e0:46:e5:19:f8:9a:f2:dc:da:1d:06:76:f4:85:
         fe:b2:a6:e5:20:92:f7:19:98:e4:5e:16:46:b0:a8:68:44:d3:
         c9:6b:16:c5:b8:3d:22:04:fd:65:26:cd:f2:11:e7:10:36:ef:
         84:8f:b1:e9:30:96:87:8e:40:a2:54:32:39:cf:e3:c4:e8:48:
         85:62:22:2d:28:71:2d:d6:c4:6c:ce:71:7a:9b:7f:f4:94:ab:
         4b:18:35:d3:9b:d7:01:88:ea:61:bd:d9:d6:81:97:98:ed:6e:
         94:4b:bc:dc:07:52:e1:4d:73:dc:d6:06:12:7d:94:22:b2:0f:
         56:8e:c4:cf:6f:a1:58:ba:5c:28:9e:de:bf:e5:70:7f:22:2e:
         6c:95:57:68:bc:eb:b9:ca:65:9d:c3:2f:2a:f8:9d:7f:01:c9:
         fb:50:59:31:c8:02:14:60:f9:11:db:d9:61:c0:ba:f5:d2:b5:
         56:6e:5f:75:02:ad:3e:bd:cc:aa:ea:ea:4f:12:22:ba:31:6d:
         93:16:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----