Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/19f57d-2354-4ea6-9d20-d933de8e2a76/1/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.mft
File:                     oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.mft (raw, json)
Hash identifier:          Cea0X/mU1Y8Okl4lmOVISyVvavC63y0/A0x6C3QZFi0=
Subject key identifier:   66:F0:AE:A3:8D:9F:E5:23:CC:19:DF:41:F3:AB:99:85:14:9A:CF:BB
Authority key identifier: A2:3E:E2:97:3F:59:72:E2:28:38:DA:BE:17:33:0A:19:9F:B1:4F:84
Certificate issuer:       /CN=a23ee2973f5972e22838dabe17330a199fb14f84
Certificate serial:       018A3A33FDB8DEE4F07D3A6020D6F60B43F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/19f57d-2354-4ea6-9d20-d933de8e2a76/1/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.mft
Manifest number:          7B
Signing time:             Mon 28 Aug 2023 03:33:20 +0000
Manifest this update:     Mon 28 Aug 2023 03:33:20 +0000
Manifest next update:     Tue 29 Aug 2023 03:33:20 +0000
Files and hashes:         1: bMnoXL2inu9TPxYE--IQMSCJefo.roa (hash: yk6VgTjhIZwPgPEaeUX1pkBy6MRJSS+FLHrHBYAzPAQ=)
                          2: oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.crl (hash: yZPPdM7wPp0tYEClDK0h5Ab8ljnTgCxxV8lLsUVIUvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3a:33:fd:b8:de:e4:f0:7d:3a:60:20:d6:f6:0b:43:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23ee2973f5972e22838dabe17330a199fb14f84
        Validity
            Not Before: Aug 28 03:33:20 2023 GMT
            Not After : Aug 29 03:33:20 2023 GMT
        Subject: CN=66f0aea38d9fe523cc19df41f3ab9985149acfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:49:99:a7:f2:ab:0c:55:5c:88:35:65:46:
                    2e:89:70:e9:d1:59:b6:26:39:75:f6:46:b2:2c:d0:
                    03:7e:30:07:92:75:99:1f:ac:62:9a:83:ff:fb:74:
                    54:92:9e:46:f0:ed:54:73:25:c3:ea:31:8c:33:c3:
                    2f:dc:fd:d4:af:31:3d:04:0d:b2:2e:16:2f:9c:e5:
                    cc:2f:86:53:ec:b6:ae:e9:f7:e3:7b:cf:14:d7:bb:
                    f3:70:dd:ef:9b:f1:15:3b:94:ca:67:35:16:e3:80:
                    03:b6:8b:35:a1:f4:7f:58:2c:db:07:48:38:b3:ed:
                    88:18:64:ce:06:0b:d6:26:d2:ca:df:5a:f6:b0:23:
                    99:c9:92:9f:f2:c5:7b:38:72:fa:12:10:e6:66:a5:
                    d8:1a:6b:cd:78:a7:ef:46:a7:f3:de:45:95:b4:93:
                    60:85:1e:d3:b8:dd:4d:1a:20:f6:88:e9:96:e1:de:
                    bd:ba:a8:b6:fc:17:58:ff:b6:7c:d6:2a:67:2e:59:
                    f7:40:43:59:4f:cf:9b:58:5e:b2:1e:a3:a3:1a:2f:
                    5a:36:76:7f:1d:81:29:92:13:3b:c1:60:b5:ec:14:
                    c0:20:0d:e7:62:a4:cc:02:a3:d8:d1:83:31:9f:4a:
                    69:04:4c:d5:0a:bd:51:7e:c1:04:61:98:af:fb:8c:
                    21:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F0:AE:A3:8D:9F:E5:23:CC:19:DF:41:F3:AB:99:85:14:9A:CF:BB
            X509v3 Authority Key Identifier:
                keyid:A2:3E:E2:97:3F:59:72:E2:28:38:DA:BE:17:33:0A:19:9F:B1:4F:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/19f57d-2354-4ea6-9d20-d933de8e2a76/1/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/19f57d-2354-4ea6-9d20-d933de8e2a76/1/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:2e:9b:32:53:d5:ca:a5:78:6a:7a:9c:38:ca:35:9b:86:
         05:fe:5a:47:c3:4d:d7:aa:36:e4:a0:37:2d:73:80:d4:d9:db:
         3c:8e:b4:f0:8c:30:ec:01:ab:e6:dc:85:20:86:71:2a:9d:35:
         9c:ff:83:ec:c2:32:69:4c:7d:be:5a:d8:b8:5f:1d:30:b4:d8:
         05:26:6f:a6:24:93:bd:51:c4:ab:04:b8:19:54:14:a0:ac:17:
         34:8d:d7:b3:94:b8:d7:5e:4f:35:74:f2:a1:5e:ef:8c:f7:19:
         9e:cf:d0:d1:13:68:22:75:30:b9:53:8e:19:86:e9:b8:bf:58:
         db:d5:13:7f:2f:17:34:b8:7d:cc:f3:70:97:5a:8b:b2:e1:c1:
         29:e2:eb:ed:76:80:3c:2a:f7:de:4f:d7:b6:d4:28:0a:26:6c:
         f7:1c:3f:ef:0a:40:4d:92:24:76:55:a9:b2:96:60:0d:49:8a:
         17:d0:89:5f:1c:94:b1:1e:6e:74:26:01:4b:a9:69:29:e9:8b:
         39:e0:11:32:fb:e9:65:42:b4:a4:ca:d2:7f:3e:ef:89:74:c8:
         5f:67:0b:43:cd:45:f1:7a:4b:ea:ec:77:20:e8:e1:b2:4f:0a:
         e3:7c:30:d8:b4:4e:94:62:e6:68:b6:0c:f7:65:e2:54:c4:a5:
         a2:cb:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----