Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.mft
File:                     64HyVmF3eQ-tiA1hDjfN0gmEcgc.mft (raw, json)
Hash identifier:          TQDho0XU+N+JOfvsm5uBGb8Ib/x+9I8YwrT2//tRcdw=
Subject key identifier:   8E:16:03:39:7F:A8:BE:6A:F7:23:D8:02:B2:8A:7D:38:65:BC:13:7D
Authority key identifier: EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07
Certificate issuer:       /CN=eb81f2566177790fad880d610e37cdd209847207
Certificate serial:       018B6C4930D835D1A7E38F7D4070A9825309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.mft
Manifest number:          0C41
Signing time:             Thu 26 Oct 2023 14:00:17 +0000
Manifest this update:     Thu 26 Oct 2023 14:00:17 +0000
Manifest next update:     Fri 27 Oct 2023 14:00:17 +0000
Files and hashes:         1: 64HyVmF3eQ-tiA1hDjfN0gmEcgc.crl (hash: tQtxa1fjOpSwJ7sBXPXhFR33ulXXeLun6iIySvizSVY=)
                          2: 84kRVEdiTmIzkX_UdDBUSnWVPZc.roa (hash: 6mo8Y43KxA2q68wPU2luyRL3umwUncIIG+IoCZyVpio=)
                          3: bC6T8wV40t_GG_ChIjL1WUHuKN0.roa (hash: +kJeByVr6iSU9WfeKvjfw3aoGJk+OasfizoPoqIgdMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6c:49:30:d8:35:d1:a7:e3:8f:7d:40:70:a9:82:53:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb81f2566177790fad880d610e37cdd209847207
        Validity
            Not Before: Oct 26 14:00:17 2023 GMT
            Not After : Oct 27 14:00:17 2023 GMT
        Subject: CN=8e1603397fa8be6af723d802b28a7d3865bc137d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:fd:32:f2:6a:34:db:d4:5c:40:3a:4c:c7:
                    c5:34:fa:ce:20:a3:67:a0:fe:13:41:ab:fd:fb:68:
                    f7:0a:6c:84:0e:2c:1b:64:e8:ee:80:22:f8:6e:68:
                    70:80:83:35:1d:4a:80:39:5e:fa:84:fc:64:09:5f:
                    7d:45:7d:1c:0b:9b:eb:50:ab:ec:f7:7b:50:89:bf:
                    d8:1a:c1:01:47:c6:7f:15:8e:97:87:35:aa:72:fd:
                    e7:26:64:f0:af:79:9d:9c:e8:13:80:6c:e7:23:f8:
                    a8:a8:be:45:f0:43:b4:a9:fe:6e:1b:dc:c3:9e:36:
                    cc:c9:97:fb:84:57:1b:c0:ec:7e:f2:b3:9c:d5:3c:
                    bb:10:01:dd:11:6f:6e:bc:8e:17:34:d3:61:6c:98:
                    da:29:74:7b:a7:8f:29:43:44:ac:b7:87:e6:1f:f3:
                    bd:37:26:82:1d:8a:bd:ca:00:87:d4:99:e5:cd:41:
                    58:e3:ab:35:06:4f:2e:5c:49:80:b6:49:98:f3:9b:
                    cb:d6:6c:e8:ff:0d:28:f2:9a:62:bd:5e:0a:ee:ba:
                    ef:d0:bb:2f:66:7d:6a:3e:25:48:52:95:19:85:c6:
                    68:25:23:b0:9f:80:82:00:41:e3:1a:4c:b8:c8:77:
                    1b:db:4b:3a:80:c8:75:2f:a8:44:79:a4:56:9a:7d:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:16:03:39:7F:A8:BE:6A:F7:23:D8:02:B2:8A:7D:38:65:BC:13:7D
            X509v3 Authority Key Identifier:
                keyid:EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5a:71:55:d6:9e:25:1d:7f:20:aa:33:91:f4:5e:99:d1:fc:
         49:d2:dd:8e:20:19:50:9a:e7:49:cd:d7:43:3c:ad:8e:52:ba:
         e8:76:64:2e:61:28:f2:88:ca:b1:73:ca:96:bd:96:74:48:0d:
         e5:f1:62:08:9d:3a:47:5b:55:a3:d9:17:db:5a:1e:1b:2e:7e:
         86:c0:35:c8:5a:26:27:db:31:c1:f8:9c:a8:0a:96:90:dc:37:
         91:b9:c0:d0:8f:e6:b6:2a:80:71:a6:09:fe:a5:01:7a:87:91:
         27:e4:74:5a:ea:d1:3d:69:d2:16:f9:e0:e1:58:ce:75:f5:ac:
         d1:0f:65:27:6f:51:42:0f:2d:30:f6:b3:d4:37:5a:29:92:26:
         41:a4:66:ba:72:85:e2:4a:2f:09:c8:3f:0c:40:6a:b9:db:95:
         4d:9b:4e:b7:fd:25:a9:fd:93:6b:59:09:7c:87:a8:55:54:98:
         99:89:3f:61:7a:c8:ad:12:64:6b:33:06:b4:0b:1d:4e:1f:e6:
         94:e4:39:0e:fb:92:57:17:de:ab:b1:c0:3d:97:dc:6c:db:16:
         58:f2:c0:f8:55:c3:b1:81:c5:00:00:65:9a:de:da:18:12:3d:
         ae:82:d9:0c:2e:2c:6a:84:26:71:87:71:d3:c1:e6:c1:80:db:
         e5:14:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----