Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/tnIcZKOdozcCRzGe8LsFPObdxx4.mft
File:                     tnIcZKOdozcCRzGe8LsFPObdxx4.mft (raw, json)
Hash identifier:          pHiPcoR2wwSJWRe37Pyfdc047DkrV7E9iQjPAXInD+8=
Subject key identifier:   67:00:20:5C:BB:2F:AD:FF:09:25:68:65:DD:B1:C0:66:F0:74:15:05
Authority key identifier: B6:72:1C:64:A3:9D:A3:37:02:47:31:9E:F0:BB:05:3C:E6:DD:C7:1E
Certificate issuer:       /CN=b6721c64a39da3370247319ef0bb053ce6ddc71e
Certificate serial:       018B21671971263B1225E4E0D618BD044DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tnIcZKOdozcCRzGe8LsFPObdxx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/tnIcZKOdozcCRzGe8LsFPObdxx4.mft
Manifest number:          085F
Signing time:             Thu 12 Oct 2023 01:01:26 +0000
Manifest this update:     Thu 12 Oct 2023 01:01:26 +0000
Manifest next update:     Fri 13 Oct 2023 01:01:26 +0000
Files and hashes:         1: p1ch5H7l6zeh3bZhYF2rkOMTgOE.roa (hash: 8zftOZo3afqPHeUmW5f9dgY9rZ6AOOAgHIcyksWIf7I=)
                          2: tnIcZKOdozcCRzGe8LsFPObdxx4.crl (hash: fXw3X1QtsZ4f/vKXtDK3CoJZoS2aJ0WlQMoEuigvFZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:21:67:19:71:26:3b:12:25:e4:e0:d6:18:bd:04:4d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6721c64a39da3370247319ef0bb053ce6ddc71e
        Validity
            Not Before: Oct 12 01:01:26 2023 GMT
            Not After : Oct 13 01:01:26 2023 GMT
        Subject: CN=6700205cbb2fadff09256865ddb1c066f0741505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:d5:ce:e2:1c:9c:f0:e2:29:b3:5f:21:ff:
                    2b:77:e2:60:f8:18:a6:bb:2b:6d:96:00:16:c2:c0:
                    8a:4c:1f:1d:d7:d2:79:14:62:6b:6e:a0:92:15:ba:
                    51:0a:c3:ad:4d:b4:0e:a0:dc:33:24:98:c7:55:a2:
                    b6:8c:84:c9:8f:54:b2:f4:d0:1f:5c:92:aa:94:37:
                    e3:7b:0d:8a:ce:ea:06:8d:48:f5:36:b1:22:a4:1f:
                    f4:74:59:cd:1f:06:17:2b:b3:da:48:89:a6:f9:4c:
                    98:89:19:9b:99:a5:81:97:1d:f7:a4:8f:b2:c5:3e:
                    0c:c1:56:a2:f7:b6:de:9a:f9:b7:5d:69:50:63:c1:
                    4d:5f:e2:c3:94:4b:84:ee:23:81:bc:aa:9d:be:d5:
                    f6:e7:05:0c:b9:10:e7:b9:8c:bb:11:4d:f2:3d:a4:
                    14:14:1d:f8:f9:24:50:4a:dd:3d:fb:4b:e2:11:3e:
                    68:f3:8f:55:31:25:7d:22:7e:c0:52:b2:9f:2a:22:
                    d7:c3:f9:1e:d5:9c:03:6a:e6:4c:33:e4:27:d9:42:
                    ec:8b:30:6a:aa:b6:d6:1e:d7:e7:3e:2b:a9:f5:62:
                    80:68:8d:20:08:0c:96:dc:ba:cf:e9:97:26:78:ff:
                    d6:2f:a8:35:2a:be:d3:bf:fc:cb:54:0f:7b:e8:b9:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:00:20:5C:BB:2F:AD:FF:09:25:68:65:DD:B1:C0:66:F0:74:15:05
            X509v3 Authority Key Identifier:
                keyid:B6:72:1C:64:A3:9D:A3:37:02:47:31:9E:F0:BB:05:3C:E6:DD:C7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnIcZKOdozcCRzGe8LsFPObdxx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/tnIcZKOdozcCRzGe8LsFPObdxx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8c51a0-7272-4e12-bbc4-882572ad9833/1/tnIcZKOdozcCRzGe8LsFPObdxx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:e4:34:9e:dc:f0:e1:43:5a:cc:9a:5d:08:b2:69:91:1b:
         0c:85:a1:f2:0d:b5:4d:62:f5:2e:21:36:ef:a8:82:96:48:38:
         d7:3d:6c:ff:45:ae:a2:86:00:92:54:38:47:33:c0:26:ec:63:
         18:45:4e:8d:1b:b0:fc:34:7c:89:c9:8e:e8:ca:ea:21:aa:72:
         db:96:c0:d6:74:25:64:d3:a8:f3:b1:a6:32:83:e1:38:1c:85:
         2e:34:a6:c8:c6:05:3a:a2:a3:68:1b:ca:c3:ca:46:fc:90:10:
         a2:5a:25:5c:b3:72:13:b4:ec:9e:67:61:91:26:d0:32:fd:c0:
         34:ec:8b:1d:34:41:c0:81:4f:e3:55:fc:51:2c:e5:6c:6e:49:
         23:de:7f:81:56:ca:94:81:cc:4d:98:e6:b7:36:ac:e8:1a:0b:
         05:17:cd:e3:40:e1:f4:10:d5:00:ac:2e:5d:7d:0d:ec:1d:ef:
         47:4d:91:da:45:c1:6e:63:2a:db:d3:2f:bd:f3:fa:60:f6:7f:
         34:84:ab:ff:ac:86:07:34:08:f9:5f:36:ce:34:99:f1:71:bb:
         c8:35:a5:05:e8:e3:23:b2:30:46:e6:fd:e9:c1:9b:a6:7a:ce:
         f8:31:e4:c4:4a:b5:83:44:32:17:c7:16:57:cc:97:61:88:37:
         d2:22:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----