Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/hbt7dbJt_hPoWD6nwa5iGUTIzjA.mft
File:                     hbt7dbJt_hPoWD6nwa5iGUTIzjA.mft (raw, json)
Hash identifier:          f+wLE8u+l3Tb0fU4KURQXGocnrZodIqq11RoNulVt5s=
Subject key identifier:   7E:8F:72:FB:8A:8F:DC:44:55:07:8C:D1:9D:83:26:F5:F4:A2:DB:CC
Authority key identifier: 85:BB:7B:75:B2:6D:FE:13:E8:58:3E:A7:C1:AE:62:19:44:C8:CE:30
Certificate issuer:       /CN=85bb7b75b26dfe13e8583ea7c1ae621944c8ce30
Certificate serial:       018C0E4B2FE0AE3FE301E244E7C86CF9649A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbt7dbJt_hPoWD6nwa5iGUTIzjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/hbt7dbJt_hPoWD6nwa5iGUTIzjA.mft
Manifest number:          0717
Signing time:             Mon 27 Nov 2023 01:00:57 +0000
Manifest this update:     Mon 27 Nov 2023 01:00:57 +0000
Manifest next update:     Tue 28 Nov 2023 01:00:57 +0000
Files and hashes:         1: Kyuw8bpPcD0_x1FHfOyDObfs0yY.roa (hash: GW4P1RkFT48Xz7dHm8jM6r90gu2lFIe6J1AgYAuQmAs=)
                          2: hbt7dbJt_hPoWD6nwa5iGUTIzjA.crl (hash: xl4OkxvQ4n02S3oqlqV9LN8PtzAk1QHB2pOvKKn5N9E=)
                          3: yZQLTG006ORc8tk2gGHyZ6awP7Q.roa (hash: 84awqjTnHIBVa1ApUtn31gmrV6IcAiTBMv8779q2a2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0e:4b:2f:e0:ae:3f:e3:01:e2:44:e7:c8:6c:f9:64:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85bb7b75b26dfe13e8583ea7c1ae621944c8ce30
        Validity
            Not Before: Nov 27 01:00:57 2023 GMT
            Not After : Nov 28 01:00:57 2023 GMT
        Subject: CN=7e8f72fb8a8fdc4455078cd19d8326f5f4a2dbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:21:a8:82:e8:19:30:08:d6:c7:96:2d:e5:48:
                    d0:6e:c0:31:df:09:b0:7f:8c:8f:c1:5d:bd:29:e6:
                    ca:49:a6:b1:db:61:0d:1e:13:6e:be:6a:29:99:01:
                    de:45:b8:87:73:45:44:40:e5:b0:09:f0:38:b7:b7:
                    a4:c8:44:b7:47:6b:7e:49:31:06:ee:00:69:ae:f4:
                    03:04:5d:f7:1b:6e:84:31:81:af:e3:23:08:6a:85:
                    43:33:8a:7c:77:3b:15:0b:87:77:8a:9d:b7:82:b8:
                    e6:61:cd:0b:81:fe:4b:c2:9d:b0:f0:55:76:bd:9d:
                    99:df:88:c8:d3:db:cd:ef:aa:5a:eb:ce:ba:8e:57:
                    23:0c:6e:24:a7:f1:49:e3:60:59:db:4d:ab:65:f7:
                    cd:be:68:6f:a9:7e:42:da:04:83:c4:fa:fe:ad:ae:
                    98:db:d9:21:96:84:4e:84:3f:b5:34:84:ae:a7:32:
                    05:57:85:53:40:87:e2:cc:77:63:e6:08:c3:59:b7:
                    f6:b1:37:63:24:ad:6c:16:d5:ae:13:22:e5:8d:25:
                    f6:b4:a0:f8:0c:8e:1f:37:9a:b0:82:62:50:30:8c:
                    48:80:9a:43:ea:2f:69:f7:fc:42:16:00:14:f9:c1:
                    06:85:ff:81:f7:b6:2e:dd:de:32:44:ff:bc:89:08:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8F:72:FB:8A:8F:DC:44:55:07:8C:D1:9D:83:26:F5:F4:A2:DB:CC
            X509v3 Authority Key Identifier:
                keyid:85:BB:7B:75:B2:6D:FE:13:E8:58:3E:A7:C1:AE:62:19:44:C8:CE:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbt7dbJt_hPoWD6nwa5iGUTIzjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/hbt7dbJt_hPoWD6nwa5iGUTIzjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/hbt7dbJt_hPoWD6nwa5iGUTIzjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:42:c7:0c:d0:09:f9:46:6b:bf:04:e4:da:4e:82:4b:c5:60:
         22:89:5f:1a:6f:16:56:66:3c:1c:7b:9d:7e:66:4d:3f:52:1a:
         40:be:8c:9d:89:85:b0:31:b7:0a:8b:5c:44:ee:e0:fc:04:ea:
         10:55:31:03:ba:d5:dd:96:bd:80:90:fa:5d:bf:22:fd:ed:ce:
         4f:0d:55:bb:14:b2:1f:fc:a5:8c:57:db:95:4b:16:53:7a:b1:
         39:06:b6:c7:00:c8:eb:90:95:1c:e1:9b:fc:06:44:b5:bc:41:
         e5:e1:b9:e2:e9:9a:b9:b3:76:72:fe:9f:4d:21:4b:05:53:98:
         f2:55:92:2e:4f:28:db:be:1c:35:3f:03:18:da:46:9f:4a:7a:
         3b:ad:6b:33:c1:e6:19:71:4f:7d:7e:cd:08:13:b5:ad:e9:78:
         68:24:4a:16:77:a9:51:c4:01:ac:54:b2:f8:fa:45:79:92:00:
         d4:cb:16:97:37:de:9b:66:7a:7d:92:d2:ea:c7:b5:41:15:3e:
         98:19:83:98:4d:4f:48:8f:25:bd:69:20:ec:f4:eb:47:89:ca:
         39:59:02:8d:a9:90:b1:d9:6a:92:34:37:45:63:0b:ea:92:cd:
         4d:d8:cf:05:1e:3f:d8:bb:45:6d:4a:f6:c2:21:e0:7b:1e:16:
         b8:df:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----