Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/pz-1CMjrPROMUFV2nsIUg2noabw.mft
File:                     pz-1CMjrPROMUFV2nsIUg2noabw.mft (raw, json)
Hash identifier:          sarLuiPwogpgSq6S6EzOzOKbZ3N6zBlcKUVxJp+gIjk=
Subject key identifier:   88:A3:2D:D6:92:8C:17:55:23:75:0C:2B:3C:8C:4F:1C:3A:34:1C:07
Authority key identifier: A7:3F:B5:08:C8:EB:3D:13:8C:50:55:76:9E:C2:14:83:69:E8:69:BC
Certificate issuer:       /CN=a73fb508c8eb3d138c5055769ec2148369e869bc
Certificate serial:       018C686A2658689A7DB60D708CF1B233B99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pz-1CMjrPROMUFV2nsIUg2noabw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/pz-1CMjrPROMUFV2nsIUg2noabw.mft
Manifest number:          0F7F
Signing time:             Thu 14 Dec 2023 13:00:36 +0000
Manifest this update:     Thu 14 Dec 2023 13:00:36 +0000
Manifest next update:     Fri 15 Dec 2023 13:00:36 +0000
Files and hashes:         1: Rxo5G0_kkL0za3nEAWqcH4zPd1k.roa (hash: SUABFTfGU/ZkPj1t+PcBceAm4affquu4M81kFuRuoK0=)
                          2: pz-1CMjrPROMUFV2nsIUg2noabw.crl (hash: Tg855RyLFatT62VTxu091eJDDPpwAZPmAAyNKHQT3IA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:68:6a:26:58:68:9a:7d:b6:0d:70:8c:f1:b2:33:b9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73fb508c8eb3d138c5055769ec2148369e869bc
        Validity
            Not Before: Dec 14 13:00:36 2023 GMT
            Not After : Dec 15 13:00:36 2023 GMT
        Subject: CN=88a32dd6928c175523750c2b3c8c4f1c3a341c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:1c:d3:31:66:3b:17:41:e3:f7:84:07:7f:
                    e6:12:88:60:f8:22:e3:93:ef:8a:35:6c:0f:2b:4d:
                    cf:ea:b7:06:e9:44:9b:0c:a1:a5:98:54:19:14:d9:
                    09:1c:b7:52:9b:3a:11:0d:a2:e4:cb:78:d3:1d:04:
                    4c:b5:bf:bd:1a:26:40:83:50:df:f0:c4:25:73:5b:
                    e4:bc:c6:ce:d7:50:8e:31:16:a1:c2:ad:d1:11:e3:
                    2a:56:18:5f:e6:5d:39:75:c9:fc:5b:24:b2:ab:70:
                    8d:a3:b1:96:03:02:9a:84:32:73:97:78:d0:6c:af:
                    b7:17:82:95:42:c4:ec:b9:e9:99:2a:0f:b4:3e:6e:
                    d1:34:12:d9:42:c8:1d:ec:85:0f:d7:fb:e2:77:5a:
                    07:08:27:42:0e:7d:9c:35:d4:6d:0e:8b:92:9f:b0:
                    f9:07:33:7e:76:1d:13:82:d0:e8:ac:25:9e:3c:00:
                    f2:1b:b1:2b:d6:a6:7a:6a:1e:08:86:d3:26:7f:e9:
                    7f:73:af:ae:1e:9b:11:94:85:35:c8:f3:bb:ca:b1:
                    c5:7d:d4:f5:08:36:fb:5a:91:d0:b0:a3:63:89:b4:
                    7e:d6:de:a7:22:c8:5d:62:e3:ce:0e:00:b4:6c:f6:
                    74:43:f4:ef:e6:29:1f:d9:52:16:a1:93:de:aa:00:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A3:2D:D6:92:8C:17:55:23:75:0C:2B:3C:8C:4F:1C:3A:34:1C:07
            X509v3 Authority Key Identifier:
                keyid:A7:3F:B5:08:C8:EB:3D:13:8C:50:55:76:9E:C2:14:83:69:E8:69:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz-1CMjrPROMUFV2nsIUg2noabw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/pz-1CMjrPROMUFV2nsIUg2noabw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/pz-1CMjrPROMUFV2nsIUg2noabw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e7:c7:cd:e5:80:24:08:77:37:96:13:3a:9a:79:eb:39:a5:
         9f:ff:e0:1e:a4:8f:87:9a:d7:c0:04:8a:5f:63:72:88:7a:53:
         d0:ea:00:cb:b4:ab:98:84:57:c8:64:b6:04:25:52:90:5f:c6:
         f5:53:07:dc:e3:13:61:ee:91:ea:73:55:be:83:65:1d:b1:34:
         be:d7:d7:b6:33:ab:86:02:d8:a2:bb:89:d0:7b:14:7c:c5:e3:
         44:f0:f2:93:ad:64:96:12:0e:2c:c0:c6:37:92:18:53:e1:c4:
         fd:22:03:bd:c4:2b:02:0e:5d:b5:34:5d:a2:24:2b:a3:dd:d4:
         65:85:5a:60:ca:3a:e6:e2:b3:24:9e:5f:fb:a9:b9:d1:ee:65:
         57:0f:0b:79:08:6a:dd:dd:1a:95:c8:76:82:65:e0:8b:57:c5:
         6f:e4:d5:d9:d7:2b:d9:25:22:2c:19:13:9b:f9:8f:36:bc:de:
         57:0d:ec:f3:3e:cc:67:a6:8c:14:33:0b:16:39:89:8b:42:34:
         1e:4e:72:b6:f6:5e:9b:be:4d:7e:6a:46:92:73:1a:98:36:78:
         b5:e9:d3:03:e0:ee:a1:5d:4c:e8:f8:cc:6c:13:70:d9:36:15:
         f2:9d:85:7d:99:e5:5e:38:e2:f6:64:e9:04:be:19:fb:87:44:
         54:40:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----