Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/BQcqI3MLvhoxBR8H47stOdYIVSc.mft
File:                     BQcqI3MLvhoxBR8H47stOdYIVSc.mft (raw, json)
Hash identifier:          kS6oEVyJPyhllclZoHi/cWka3udle0+W/HSNt7pk0D0=
Subject key identifier:   1F:4B:45:DE:C8:B2:84:E3:73:DB:4B:3D:F5:34:FF:B4:66:9E:A4:A3
Authority key identifier: 05:07:2A:23:73:0B:BE:1A:31:05:1F:07:E3:BB:2D:39:D6:08:55:27
Certificate issuer:       /CN=05072a23730bbe1a31051f07e3bb2d39d6085527
Certificate serial:       018CC88C2E6CB559CA4A42E4F0FBB9CAA19A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQcqI3MLvhoxBR8H47stOdYIVSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/BQcqI3MLvhoxBR8H47stOdYIVSc.mft
Manifest number:          05B8
Signing time:             Tue 02 Jan 2024 05:01:19 +0000
Manifest this update:     Tue 02 Jan 2024 05:01:19 +0000
Manifest next update:     Wed 03 Jan 2024 05:01:19 +0000
Files and hashes:         1: 8oAqyk-zpU8h5dXTUWQeVihj2SA.roa (hash: ONg35SUwO3VHIHhgfJQf9URMzy+6uZ9ZXYLtUp4qHKU=)
                          2: BQcqI3MLvhoxBR8H47stOdYIVSc.crl (hash: bGsSVbnzV/yZOxW7ZTG34XheuxwPKZXkvH2nX1IoUaY=)
                          3: aICEd3MWzWJDIaWu83sH2GJVj90.roa (hash: uHjR7z0ysdWZlr1Q05ISoyusgCOyuohVev1SCZ6MaaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:8c:2e:6c:b5:59:ca:4a:42:e4:f0:fb:b9:ca:a1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05072a23730bbe1a31051f07e3bb2d39d6085527
        Validity
            Not Before: Jan  2 05:01:19 2024 GMT
            Not After : Jan  3 05:01:19 2024 GMT
        Subject: CN=1f4b45dec8b284e373db4b3df534ffb4669ea4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:d8:ee:91:b0:6e:cf:46:97:ee:8b:73:6c:
                    8a:56:9d:5f:e0:23:40:8c:02:bb:91:df:a6:ab:07:
                    13:b4:3e:0e:ff:31:66:72:9e:c9:27:82:0f:5d:d7:
                    b9:cc:c3:bb:2d:fe:38:ba:ee:67:ed:5c:0a:77:a0:
                    fe:54:01:d3:ff:ec:5e:13:97:d8:6d:b5:f4:40:af:
                    74:22:2f:d7:99:fb:ac:09:84:a1:b3:fe:c3:7b:c9:
                    a4:92:e7:71:25:38:9b:68:ff:70:2d:d8:4a:af:cc:
                    7f:19:cd:cb:a7:46:da:91:88:98:ac:9e:dc:01:ac:
                    76:b8:10:a5:6b:12:b0:ab:4a:a1:39:81:44:9c:43:
                    63:6d:4f:64:2d:ec:62:c5:04:13:d5:7a:c7:81:4f:
                    38:78:ce:51:31:74:45:a8:c3:0d:94:ab:e2:d5:f7:
                    35:fa:e8:f0:82:79:50:d1:6d:53:23:4e:6a:2b:b4:
                    a5:5b:ea:93:91:b6:a5:a9:16:34:d4:d4:7f:2d:d5:
                    6a:ca:25:12:41:4d:2e:d7:23:26:29:a0:0e:e7:44:
                    15:32:76:3e:ae:f9:de:12:6f:50:f2:05:94:ac:0f:
                    0d:5c:e6:f3:ff:93:72:01:74:06:25:e3:ea:c0:7c:
                    e2:a2:40:b5:9b:ca:6b:40:8b:f1:5e:08:38:c8:c2:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:45:DE:C8:B2:84:E3:73:DB:4B:3D:F5:34:FF:B4:66:9E:A4:A3
            X509v3 Authority Key Identifier:
                keyid:05:07:2A:23:73:0B:BE:1A:31:05:1F:07:E3:BB:2D:39:D6:08:55:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQcqI3MLvhoxBR8H47stOdYIVSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/BQcqI3MLvhoxBR8H47stOdYIVSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/25df87-15ab-4b90-b760-52279153bbf4/1/BQcqI3MLvhoxBR8H47stOdYIVSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:7f:5a:83:47:e2:4f:ca:47:a8:de:cc:c2:93:14:e9:90:
         93:2a:a9:6f:cf:66:52:88:ca:c3:e8:e9:cb:d0:1c:9b:76:60:
         c5:d6:15:72:38:15:2f:48:10:b9:dc:55:4c:e7:20:a1:fc:ea:
         7a:b6:5d:eb:cf:dc:4c:4c:a7:57:00:4c:24:8b:b9:c1:6c:2b:
         e5:6c:76:22:13:a0:ed:c6:f8:60:2c:0c:cb:2b:13:ad:c4:38:
         67:2b:34:f0:fa:4c:c4:ae:43:98:c5:10:32:04:dc:bc:a0:27:
         ae:9f:c1:19:55:01:66:2c:4e:e6:b3:2d:76:35:bd:26:a9:30:
         40:c1:b2:51:fa:05:e4:6d:ff:26:12:9a:d9:bc:00:d2:82:af:
         54:91:8c:69:57:9b:08:4c:c5:dd:1e:04:5d:b1:50:a4:b9:b6:
         0a:e5:c3:41:06:45:bb:0c:2f:cb:93:87:96:bf:01:d3:39:88:
         80:52:c0:f3:20:d9:b4:62:ae:86:96:97:be:2f:b3:bb:94:28:
         79:9c:79:57:3e:16:d0:40:6d:14:26:9d:59:70:a1:a0:0f:7a:
         47:d6:a6:c2:3d:56:8b:26:59:1b:d6:8e:28:f7:c7:a0:a6:13:
         bd:f3:fe:cf:1a:84:e5:d7:fa:3d:1b:3b:60:11:88:da:08:e2:
         21:d3:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----