Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a2396c-2dfd-45f6-aa34-54c1dc574145/1/aG8KTaI3MgXvNEXSjiYMKEaEt0s.mft
File:                     aG8KTaI3MgXvNEXSjiYMKEaEt0s.mft (raw, json)
Hash identifier:          MU746RbhwTKHLg3vEFAt4MPkbYGbaYedNn+b3jOKBxI=
Subject key identifier:   B7:49:26:CC:DD:3A:F1:46:45:C5:B8:43:12:57:C4:5A:F9:91:7E:AC
Authority key identifier: 68:6F:0A:4D:A2:37:32:05:EF:34:45:D2:8E:26:0C:28:46:84:B7:4B
Certificate issuer:       /CN=686f0a4da2373205ef3445d28e260c284684b74b
Certificate serial:       018BFFEB030FD07FE501E1B74843F8DA2DF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aG8KTaI3MgXvNEXSjiYMKEaEt0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a2396c-2dfd-45f6-aa34-54c1dc574145/1/aG8KTaI3MgXvNEXSjiYMKEaEt0s.mft
Manifest number:          08B3
Signing time:             Fri 24 Nov 2023 06:01:13 +0000
Manifest this update:     Fri 24 Nov 2023 06:01:13 +0000
Manifest next update:     Sat 25 Nov 2023 06:01:13 +0000
Files and hashes:         1: aG8KTaI3MgXvNEXSjiYMKEaEt0s.crl (hash: Vw5LVRfTdRZH9DcInTJJoT2Q7XVDtG4toUll+/N8VTM=)
                          2: fq87kewMSw3CmsH-pyzzUH2zxS4.roa (hash: VjnsdN9Q2tRqQuqIFH6WWT78xUh2Uztq9DtMeS9dZ5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ff:eb:03:0f:d0:7f:e5:01:e1:b7:48:43:f8:da:2d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686f0a4da2373205ef3445d28e260c284684b74b
        Validity
            Not Before: Nov 24 06:01:13 2023 GMT
            Not After : Nov 25 06:01:13 2023 GMT
        Subject: CN=b74926ccdd3af14645c5b8431257c45af9917eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c8:23:ff:84:ed:24:0b:e5:5d:6e:20:cd:e3:
                    cc:7b:0b:24:56:3e:db:19:e8:74:69:3e:a8:fd:b0:
                    47:25:62:a2:2c:09:84:40:bc:25:3e:2a:a3:ad:30:
                    c3:72:9c:be:7c:4f:fa:4d:3e:6d:bf:17:ee:f7:77:
                    e6:01:19:54:df:ee:eb:37:41:42:7c:b0:7a:aa:f2:
                    85:6e:e0:0a:68:40:a6:9d:eb:67:1c:12:88:55:92:
                    12:e4:d2:28:04:92:4b:07:59:73:c9:d7:57:cb:9d:
                    6f:63:9d:81:e7:fa:77:4e:87:35:d5:ea:20:b1:ce:
                    12:19:de:1a:04:1f:de:85:ab:10:a5:37:49:0d:cb:
                    37:e6:78:80:ad:2c:c9:b0:ff:3d:29:a8:f5:e6:c4:
                    93:86:71:d0:c6:6e:bb:62:da:12:9d:54:df:33:d9:
                    64:32:ae:7f:09:25:3e:9e:5c:4c:ec:81:bc:13:22:
                    a2:89:8c:b9:62:16:ff:fa:ec:33:f2:80:20:a9:e1:
                    92:e9:82:99:e7:1d:52:54:8a:1e:59:75:23:f4:b0:
                    e0:a0:cb:bd:2a:b5:c3:8c:1d:28:b6:a2:66:78:83:
                    2c:f8:ac:76:dc:0c:4b:ff:06:e6:35:ac:0e:ee:cf:
                    71:1c:e3:c9:57:a8:4e:59:7b:6c:bd:ca:49:73:0c:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:26:CC:DD:3A:F1:46:45:C5:B8:43:12:57:C4:5A:F9:91:7E:AC
            X509v3 Authority Key Identifier:
                keyid:68:6F:0A:4D:A2:37:32:05:EF:34:45:D2:8E:26:0C:28:46:84:B7:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG8KTaI3MgXvNEXSjiYMKEaEt0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a2396c-2dfd-45f6-aa34-54c1dc574145/1/aG8KTaI3MgXvNEXSjiYMKEaEt0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a2396c-2dfd-45f6-aa34-54c1dc574145/1/aG8KTaI3MgXvNEXSjiYMKEaEt0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:32:ec:62:fe:b7:72:5f:ba:8a:e3:ad:d1:06:40:53:ae:
         6e:49:78:e6:b4:a3:60:22:6d:5f:35:56:fc:c2:87:2d:c6:15:
         05:52:b3:c0:9e:75:63:cd:cd:7d:e2:8b:65:17:e5:94:33:db:
         0f:6b:b0:a8:ef:48:f8:2d:e9:7d:43:38:5b:9a:35:85:68:77:
         3a:55:37:0d:51:4b:a0:39:89:2d:96:8b:85:82:cc:05:21:15:
         49:bd:82:a2:4b:2e:00:a9:d8:ab:20:ad:01:84:5c:47:eb:6c:
         5f:8d:4e:9f:30:0e:66:a8:63:ef:92:6f:96:5d:7b:a8:7b:5d:
         e3:b3:72:c5:64:19:ab:02:7e:7d:97:b5:33:d3:d3:bb:e7:01:
         77:83:65:86:8f:a0:bc:21:b7:d5:99:c6:d0:7d:79:c9:8b:24:
         16:84:13:81:fc:d3:d9:ed:a2:a5:6a:bb:67:ff:85:40:72:d1:
         fd:f9:f1:13:10:2b:8b:1d:b2:98:04:a5:1b:ec:0b:62:1a:09:
         66:d2:39:23:da:4f:72:72:8f:ed:37:d1:77:af:90:68:aa:45:
         fc:a9:98:9b:72:01:e3:3b:0c:31:5b:24:74:42:ad:14:39:cd:
         5b:1b:f5:1f:16:1c:24:4b:ae:87:59:fa:08:2a:19:44:b2:ee:
         d0:df:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----