Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/t9TebWJoY0eOlbzmg6h_Cq9JtdA.mft
File:                     t9TebWJoY0eOlbzmg6h_Cq9JtdA.mft (raw, json)
Hash identifier:          Vh2NZbWU9yJ6GtJMTA95ksvuvOdkNcV09H1q1Bz1160=
Subject key identifier:   36:A7:10:8A:AB:4D:85:D6:F1:77:99:B3:A5:E3:79:24:F7:6B:2A:66
Authority key identifier: B7:D4:DE:6D:62:68:63:47:8E:95:BC:E6:83:A8:7F:0A:AF:49:B5:D0
Certificate issuer:       /CN=b7d4de6d626863478e95bce683a87f0aaf49b5d0
Certificate serial:       018D23BD3E0CD70373877C4B67A4838FE1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t9TebWJoY0eOlbzmg6h_Cq9JtdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/t9TebWJoY0eOlbzmg6h_Cq9JtdA.mft
Manifest number:          17
Signing time:             Fri 19 Jan 2024 22:00:21 +0000
Manifest this update:     Fri 19 Jan 2024 22:00:21 +0000
Manifest next update:     Sat 20 Jan 2024 22:00:21 +0000
Files and hashes:         1: AWAwhTa_wkNA7lGH3eEqsP_Bf2s.roa (hash: tg4HWUNjrfqPw7BmiryrNZBM9zlpA8r4d7B2XH5XyzY=)
                          2: hp0CRbs_499OlQ2d59W4q8uhFZo.roa (hash: p6Z6yjmNERu7aZ5sFhG7EFBIm40zsHzMvUTzm1XPNRA=)
                          3: t9TebWJoY0eOlbzmg6h_Cq9JtdA.crl (hash: q2oXTewuvtJzNyrigUhlXvLRm0gKNUUcVM+Kx6zrEjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:23:bd:3e:0c:d7:03:73:87:7c:4b:67:a4:83:8f:e1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7d4de6d626863478e95bce683a87f0aaf49b5d0
        Validity
            Not Before: Jan 19 22:00:21 2024 GMT
            Not After : Jan 20 22:00:21 2024 GMT
        Subject: CN=36a7108aab4d85d6f17799b3a5e37924f76b2a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:6a:b2:2f:ea:da:2e:59:40:82:96:60:9e:
                    84:b1:e9:36:57:75:f2:e2:5d:f3:f5:0b:a9:80:6c:
                    d3:38:c9:f7:c1:a1:c5:35:59:e1:a3:20:61:7d:1e:
                    e8:2c:56:b7:eb:d0:62:77:41:07:94:1b:b2:02:ad:
                    8c:af:39:f1:88:a5:a9:4e:1d:b2:5c:aa:b8:32:95:
                    e3:18:d1:f2:ba:6b:88:bb:20:26:eb:84:16:24:d4:
                    76:ac:51:c0:93:61:f8:cc:e3:5f:12:d3:d4:74:2e:
                    94:68:75:cc:bd:27:d6:e6:c6:a3:a3:0d:7e:e6:76:
                    64:b0:1d:b5:8d:4a:a5:70:57:7d:2a:ac:37:7a:bf:
                    ca:e6:c4:01:e9:4f:87:ef:15:7d:a9:c2:49:29:4d:
                    ad:e0:ab:bc:bf:02:8d:ab:f8:73:48:e9:67:c9:50:
                    e3:1c:cd:cd:f3:4b:c6:63:75:1b:e5:90:39:18:97:
                    38:93:bc:14:21:58:2c:43:94:16:71:d2:53:4a:74:
                    aa:43:31:0a:1e:fb:8c:77:04:3c:1e:69:55:3d:24:
                    c3:55:88:04:26:f1:b7:e5:51:75:7f:d3:f7:75:b0:
                    c4:ba:f0:b8:33:d7:f5:d9:b7:4b:1e:84:de:01:25:
                    82:94:e9:79:82:ae:09:ee:e9:da:23:07:35:5b:64:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A7:10:8A:AB:4D:85:D6:F1:77:99:B3:A5:E3:79:24:F7:6B:2A:66
            X509v3 Authority Key Identifier:
                keyid:B7:D4:DE:6D:62:68:63:47:8E:95:BC:E6:83:A8:7F:0A:AF:49:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9TebWJoY0eOlbzmg6h_Cq9JtdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/t9TebWJoY0eOlbzmg6h_Cq9JtdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/t9TebWJoY0eOlbzmg6h_Cq9JtdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:bf:68:9c:7b:37:22:7e:38:14:08:8d:86:53:23:0c:3d:
         d8:bb:79:22:fa:55:a9:6d:62:07:df:61:5a:5e:51:eb:25:cf:
         b7:39:6e:68:be:29:2f:37:57:f5:42:89:49:5f:47:f1:80:30:
         15:b6:e7:04:7b:e3:3a:28:58:cc:53:db:36:07:e3:5c:bf:ad:
         7e:3d:6a:30:7b:77:54:f5:18:16:45:b4:c7:36:37:25:12:9e:
         18:c0:5b:f7:e7:26:30:a0:41:fa:c1:57:68:d4:ed:a5:6f:07:
         ad:bb:d7:94:15:9b:d2:13:d6:65:98:0f:af:b1:90:64:32:e9:
         36:85:0b:1f:29:7a:37:67:b2:c8:56:b5:50:02:5e:39:66:65:
         db:eb:49:58:b6:52:a1:61:9d:9a:16:8c:03:fb:3c:9f:3f:62:
         40:d6:0a:9e:06:e8:63:38:d1:b7:ea:8a:c5:2a:35:55:2a:a3:
         b9:ab:9b:a6:45:44:f5:dc:7f:58:40:d1:31:b1:d0:e3:fe:91:
         ac:c4:20:85:4b:92:ba:29:c3:2d:61:4c:1f:90:d7:d0:10:aa:
         f0:47:a2:19:4d:48:65:2b:11:25:3d:83:3d:fe:32:c5:71:e7:
         f7:14:15:e5:81:7b:91:5a:82:62:35:fe:c9:82:c8:0e:3c:1f:
         60:19:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----