Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.mft
File:                     e9wNDRtC9QoGoIe-oiUSky62iAI.mft (raw, json)
Hash identifier:          CoI4ydCSVJIxtBpSWB8i21cuX9UblPxUikI8aVs5qu4=
Subject key identifier:   56:72:A6:7F:D7:6C:F1:38:AF:1A:51:F9:5D:39:09:4A:CD:CA:72:6A
Authority key identifier: 7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
Certificate issuer:       /CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Certificate serial:       018C00582F2FA2A31DF5C7FFED14420270E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.mft
Manifest number:          0878
Signing time:             Fri 24 Nov 2023 08:00:28 +0000
Manifest this update:     Fri 24 Nov 2023 08:00:28 +0000
Manifest next update:     Sat 25 Nov 2023 08:00:28 +0000
Files and hashes:         1: EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa (hash: ULqMLbo3nnRvJiaWcMxlcz/gJxYKtAgiV7sPX8Zks6k=)
                          2: e9wNDRtC9QoGoIe-oiUSky62iAI.crl (hash: 29MV4j//ui+zmJycwivMa//hlk1A/zRVYUp8GKA53nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:00:58:2f:2f:a2:a3:1d:f5:c7:ff:ed:14:42:02:70:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
        Validity
            Not Before: Nov 24 08:00:28 2023 GMT
            Not After : Nov 25 08:00:28 2023 GMT
        Subject: CN=5672a67fd76cf138af1a51f95d39094acdca726a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:15:29:20:15:f8:99:e0:b9:ad:9f:2a:17:
                    81:b0:d0:e7:8a:fa:bb:1a:67:0d:af:a6:30:4b:42:
                    30:12:6e:93:28:35:a2:bf:e8:d1:82:49:b5:b8:b0:
                    1f:b5:91:23:a5:ba:72:dc:ca:25:1c:93:4a:0a:a2:
                    52:0b:15:a4:70:da:cd:0d:28:3c:e7:f4:7b:5e:5e:
                    81:75:2a:49:4a:fe:de:5c:f8:7e:1a:82:7f:6e:87:
                    dc:02:36:e8:14:83:10:a0:b1:fa:1e:07:28:99:07:
                    51:34:ab:56:ee:97:46:39:4a:64:15:5a:f0:1d:11:
                    11:22:67:2b:20:01:a2:49:69:27:62:2b:73:a1:f0:
                    1d:50:81:b4:3a:81:31:b8:69:c1:bd:52:a9:d7:3f:
                    a2:cf:45:ba:f2:f7:c5:32:3d:b1:4f:26:a3:d4:26:
                    f4:5b:11:ca:44:0c:3f:1d:9c:cc:14:9d:a3:9b:32:
                    82:ad:8b:1f:b4:05:5d:49:a9:83:2d:47:2d:ec:f7:
                    6e:84:80:73:c3:8f:c3:af:1f:70:44:bd:98:fc:2d:
                    4c:8f:7b:7f:87:71:4b:59:f4:57:67:68:56:ca:90:
                    11:a8:f3:e1:da:2f:8e:00:f9:ce:fc:0c:03:d1:e7:
                    16:4b:51:30:7b:4e:07:cf:73:be:9e:5e:55:8e:89:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:72:A6:7F:D7:6C:F1:38:AF:1A:51:F9:5D:39:09:4A:CD:CA:72:6A
            X509v3 Authority Key Identifier:
                keyid:7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:50:fb:69:00:85:0d:68:02:ed:f8:94:02:56:f5:49:ea:
         72:c1:ad:7d:03:0a:4a:b7:3d:6c:9c:0d:52:ac:1d:8f:95:fb:
         9f:71:91:0b:af:5c:f6:75:62:c2:b4:2c:c3:1d:17:c8:8c:e7:
         2d:3e:a4:35:c4:4d:be:3f:a6:5a:50:f5:c6:da:70:2d:10:e0:
         94:76:91:80:a9:43:67:74:3d:61:6c:ce:ef:b5:c5:ef:3f:11:
         a3:88:7d:2e:f9:32:d7:ba:b5:4e:ea:ba:42:3c:c9:10:3e:f9:
         31:c5:b7:6f:00:ad:b1:3b:0f:d9:07:76:94:ca:25:bf:f8:57:
         3c:11:6b:d2:f8:87:44:f5:e2:11:41:75:ad:bf:33:06:50:7e:
         bc:91:7e:c8:9d:75:9a:e5:e6:a3:90:b1:20:49:eb:e4:6d:c3:
         33:65:5c:06:44:14:ec:85:88:98:8e:e9:51:81:d0:63:74:67:
         c4:7a:8f:1c:b9:9b:47:3f:17:c9:e7:6d:13:8f:b5:0a:60:3b:
         5d:53:b6:14:3c:be:8f:da:84:62:24:c4:52:a0:6b:b9:66:0b:
         c4:ff:e4:90:77:ad:b3:5e:4a:ec:5e:a8:d7:aa:1f:57:92:dd:
         07:ed:0b:9f:e9:21:d1:1b:07:39:3b:21:ad:e1:fc:52:71:46:
         01:b1:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----