Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/rlH89j8QZMwyHAEq52mnx1NF6Ts.mft
File:                     rlH89j8QZMwyHAEq52mnx1NF6Ts.mft (raw, json)
Hash identifier:          HRT1wdGoCwjyISPBNWbFqwzKlqvnrE7efinRf+CfBcU=
Subject key identifier:   97:4D:6A:81:25:47:16:8F:3E:1D:97:30:95:5E:71:0F:B0:20:8B:F1
Authority key identifier: AE:51:FC:F6:3F:10:64:CC:32:1C:01:2A:E7:69:A7:C7:53:45:E9:3B
Certificate issuer:       /CN=ae51fcf63f1064cc321c012ae769a7c75345e93b
Certificate serial:       018BD793CB4D91CF016C4C9BFE53F0FA714A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlH89j8QZMwyHAEq52mnx1NF6Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/rlH89j8QZMwyHAEq52mnx1NF6Ts.mft
Manifest number:          076C
Signing time:             Thu 16 Nov 2023 10:01:09 +0000
Manifest this update:     Thu 16 Nov 2023 10:01:09 +0000
Manifest next update:     Fri 17 Nov 2023 10:01:09 +0000
Files and hashes:         1: a0W8ykYLDuxowEVM6So-dXcwbo8.roa (hash: 3jqMwJHsav5ahVMsLhq1o3VmVCuPc0bEZ2Ndo/uRhrI=)
                          2: rlH89j8QZMwyHAEq52mnx1NF6Ts.crl (hash: nd9QAZt354jMmxfVWQgLCqepNsqqfTX4JE9oANLQp6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d7:93:cb:4d:91:cf:01:6c:4c:9b:fe:53:f0:fa:71:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae51fcf63f1064cc321c012ae769a7c75345e93b
        Validity
            Not Before: Nov 16 10:01:09 2023 GMT
            Not After : Nov 17 10:01:09 2023 GMT
        Subject: CN=974d6a812547168f3e1d9730955e710fb0208bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:5e:23:29:e4:1b:68:fc:69:20:58:91:fb:
                    fa:6d:3c:a3:75:b9:c0:d2:8a:e7:c5:84:25:ec:56:
                    46:50:17:c5:ca:d4:85:61:f1:95:a6:b2:f9:64:b0:
                    83:fd:38:9b:1a:05:67:df:d9:53:54:02:9f:a7:11:
                    be:d3:e9:5f:af:d5:14:11:9f:b7:dd:cc:d1:33:f3:
                    b8:f5:28:10:8f:91:98:fa:15:9f:13:56:6b:ac:5d:
                    cb:b3:df:27:b6:35:09:98:b0:19:c7:ed:e6:0f:35:
                    6d:a6:fb:6a:cb:7d:99:2e:8e:76:db:a0:4e:b3:90:
                    bd:ea:8a:b2:2b:e6:bf:2b:d2:cc:b0:b3:53:f3:ea:
                    a6:16:0b:b7:b4:24:a1:c0:b1:40:5a:a6:bd:a4:2c:
                    9c:b2:36:aa:34:08:a6:3d:bc:5d:98:3f:9a:3a:1e:
                    c2:3d:85:ae:bf:8b:d3:75:67:87:28:39:2e:d6:af:
                    e8:4e:b2:bc:65:9d:27:d5:53:b4:3b:6d:e8:41:5b:
                    89:7d:1d:82:5e:8f:7e:74:a8:77:7c:31:93:5f:57:
                    b3:90:f7:bb:f5:df:a5:f7:a3:19:ee:af:d6:de:9a:
                    be:a7:73:10:f0:e7:ea:32:31:ee:8b:8a:fb:da:f3:
                    e6:2c:76:7b:c7:f0:17:1d:09:84:41:46:35:c8:68:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4D:6A:81:25:47:16:8F:3E:1D:97:30:95:5E:71:0F:B0:20:8B:F1
            X509v3 Authority Key Identifier:
                keyid:AE:51:FC:F6:3F:10:64:CC:32:1C:01:2A:E7:69:A7:C7:53:45:E9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlH89j8QZMwyHAEq52mnx1NF6Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/rlH89j8QZMwyHAEq52mnx1NF6Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/rlH89j8QZMwyHAEq52mnx1NF6Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:65:13:b4:48:ce:df:fd:ff:3b:64:d9:25:c3:57:21:e1:72:
         d9:20:e5:08:f5:78:3a:73:fd:c6:15:6e:3f:c5:22:25:0a:bd:
         16:7e:4f:ce:d7:52:1d:e3:b5:54:3d:a3:5b:7d:b9:18:dd:05:
         bb:71:42:9b:12:90:ed:26:da:2b:6b:8a:95:d4:ce:90:76:67:
         3b:d1:15:4d:a7:f0:a2:5a:8c:10:7f:88:5e:99:14:91:2b:d1:
         5d:a2:58:ee:c8:23:84:45:e4:27:5f:92:94:e4:63:3b:61:99:
         bc:55:0a:5b:2a:e5:cc:bc:3a:5c:10:0d:bc:be:de:b1:b4:f9:
         ff:96:93:71:8b:31:4c:b2:44:c2:68:46:a7:18:fa:b1:3e:57:
         da:e0:a5:88:ff:51:90:9f:82:db:04:b1:c7:c0:29:6f:a2:5e:
         70:c6:1e:50:8e:08:9b:20:23:74:10:bf:4c:c3:1d:82:5d:38:
         56:da:e3:79:95:b4:8c:b4:22:97:dd:ac:e5:c9:04:62:3c:f1:
         31:aa:95:8a:71:16:c8:0d:d4:27:77:d3:ad:98:a5:5f:6f:23:
         00:1e:d7:27:32:9b:4b:1b:69:6c:85:34:3c:1d:8c:06:37:cf:
         50:41:63:51:6c:0b:63:12:4f:c9:30:15:e3:1d:c2:49:5a:67:
         d0:6a:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----