Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ebab-4838-409f-9363-c9600f5f3fdd/1/SEOlNQ0pFPI5C7c9asBXs1gVOHA.mft
File:                     SEOlNQ0pFPI5C7c9asBXs1gVOHA.mft (raw, json)
Hash identifier:          GhEkJrduLhou5h7ADhhuwMwVK2UBrH1uyQF52y9tu0Y=
Subject key identifier:   33:CA:3C:2A:BA:85:CC:7C:D3:C6:51:0E:3E:46:E3:5E:53:0B:82:C9
Authority key identifier: 48:43:A5:35:0D:29:14:F2:39:0B:B7:3D:6A:C0:57:B3:58:15:38:70
Certificate issuer:       /CN=4843a5350d2914f2390bb73d6ac057b358153870
Certificate serial:       018BCD7E6EAF151CC8BC1165546AE35EE114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEOlNQ0pFPI5C7c9asBXs1gVOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/97ebab-4838-409f-9363-c9600f5f3fdd/1/SEOlNQ0pFPI5C7c9asBXs1gVOHA.mft
Manifest number:          0F89
Signing time:             Tue 14 Nov 2023 11:01:36 +0000
Manifest this update:     Tue 14 Nov 2023 11:01:36 +0000
Manifest next update:     Wed 15 Nov 2023 11:01:36 +0000
Files and hashes:         1: E8f7ZxJBm9UzArvmoA0Bh0OyXso.roa (hash: 45IkFt5cFL6v8jmlg0spBnn9YXxHB3C9jEY8O+PJOXA=)
                          2: SEOlNQ0pFPI5C7c9asBXs1gVOHA.crl (hash: ub1CJmHHFl08JmmALnSXq2abcvlwL8d7kmZicgg4YXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cd:7e:6e:af:15:1c:c8:bc:11:65:54:6a:e3:5e:e1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4843a5350d2914f2390bb73d6ac057b358153870
        Validity
            Not Before: Nov 14 11:01:36 2023 GMT
            Not After : Nov 15 11:01:36 2023 GMT
        Subject: CN=33ca3c2aba85cc7cd3c6510e3e46e35e530b82c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:95:a9:47:7d:bb:a5:26:cd:1c:0f:10:3f:
                    3e:13:6a:f8:e8:ea:d4:94:41:2f:ee:62:24:57:4e:
                    8e:73:67:91:a5:07:ba:98:3e:c9:d0:9e:f2:6b:c0:
                    66:ac:7b:6f:15:31:c5:a2:bf:be:53:38:f7:10:48:
                    84:d3:e7:f4:b2:de:ac:a4:e3:8c:3b:48:57:83:f9:
                    37:3a:10:dc:55:ea:16:53:8a:72:11:97:ea:48:de:
                    dd:7d:03:25:46:93:b1:d1:14:4a:0e:1d:37:3d:f9:
                    6c:e5:31:19:b7:c3:55:47:d2:c3:11:f1:5c:04:65:
                    25:88:fa:d3:d9:49:d2:4c:ba:84:91:12:35:e4:33:
                    78:eb:d7:f1:b3:0a:fc:15:cb:73:da:6e:fd:cf:c4:
                    12:75:36:ae:f1:d8:4f:a9:0a:f6:7c:eb:97:d3:b6:
                    e9:af:ad:7c:58:88:d8:28:4b:d7:ec:f8:2a:fc:dd:
                    72:18:c0:5b:ad:93:7f:8f:cf:1b:9d:b6:6d:f4:bc:
                    0a:a8:65:dd:0c:de:12:9e:51:23:cb:dd:8b:f1:9b:
                    4c:65:f7:e1:8d:bb:a4:e1:1d:d9:98:89:0c:ff:c5:
                    8f:8f:5b:a9:bb:7e:5e:a1:8d:26:af:23:d1:11:67:
                    c1:35:db:48:ef:14:b8:d5:30:ab:a3:74:32:6d:26:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CA:3C:2A:BA:85:CC:7C:D3:C6:51:0E:3E:46:E3:5E:53:0B:82:C9
            X509v3 Authority Key Identifier:
                keyid:48:43:A5:35:0D:29:14:F2:39:0B:B7:3D:6A:C0:57:B3:58:15:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEOlNQ0pFPI5C7c9asBXs1gVOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ebab-4838-409f-9363-c9600f5f3fdd/1/SEOlNQ0pFPI5C7c9asBXs1gVOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ebab-4838-409f-9363-c9600f5f3fdd/1/SEOlNQ0pFPI5C7c9asBXs1gVOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:29:01:5d:cd:9b:aa:aa:34:ec:b9:73:63:3b:6f:9c:35:7b:
         f4:37:c7:6b:77:04:d7:43:2c:ed:e5:10:fc:88:c9:11:21:62:
         e4:15:60:4c:d0:1b:23:7e:dc:5a:99:24:af:51:fa:01:7e:4a:
         4e:0c:c2:30:1e:ed:81:ff:71:7c:26:55:7c:45:b9:92:ed:eb:
         f3:83:c3:91:a7:3d:69:b7:53:3c:89:54:1a:e1:89:d8:f5:64:
         fc:87:3e:f1:fb:ec:c2:b3:7b:cc:2f:1a:f4:20:dc:07:88:1f:
         de:8e:79:ce:c1:d1:10:8c:cd:5f:a9:cf:be:ff:fc:3e:2e:08:
         62:45:e0:a3:29:6b:9d:68:c3:7c:13:0e:58:e6:2d:e4:26:84:
         35:5c:b8:bc:01:d8:f6:d8:67:2c:9b:30:28:08:00:82:8d:f7:
         bd:70:36:94:e5:90:19:fa:b3:fc:b1:13:58:7f:cc:a2:65:05:
         e0:23:25:51:a2:cc:fc:31:9a:85:2d:c3:e8:18:a5:0e:20:91:
         cf:f5:66:11:07:f6:b7:52:72:67:fa:10:62:fa:51:f9:07:f9:
         13:3f:ea:39:33:17:62:40:c3:4a:c4:f5:40:7b:d9:29:a5:fb:
         f5:7a:2b:43:55:41:be:80:9f:9b:1b:e9:6a:b4:0b:f0:86:e0:
         77:e4:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----