Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/c7c423-d861-461f-9c87-f31cd68f3a30/1/J488VRMJ_6Rht338x4Goo-xmkjk.mft
File:                     J488VRMJ_6Rht338x4Goo-xmkjk.mft (raw, json)
Hash identifier:          hMZn2wZBBN/pXKTDfRF7v8LIcZ6b6/DGySWlMBxRork=
Subject key identifier:   C3:B8:0E:83:34:3D:09:C9:DB:01:78:4F:D2:2E:24:FF:83:C7:E1:C3
Authority key identifier: 27:8F:3C:55:13:09:FF:A4:61:B7:7D:FC:C7:81:A8:A3:EC:66:92:39
Certificate issuer:       /CN=278f3c551309ffa461b77dfcc781a8a3ec669239
Certificate serial:       018C7C5F043A48452DE24D0E3F7FC821CA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J488VRMJ_6Rht338x4Goo-xmkjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/c7c423-d861-461f-9c87-f31cd68f3a30/1/J488VRMJ_6Rht338x4Goo-xmkjk.mft
Manifest number:          084E
Signing time:             Mon 18 Dec 2023 10:00:50 +0000
Manifest this update:     Mon 18 Dec 2023 10:00:50 +0000
Manifest next update:     Tue 19 Dec 2023 10:00:50 +0000
Files and hashes:         1: J488VRMJ_6Rht338x4Goo-xmkjk.crl (hash: vtKdCarKZUlIFlkXQXqEzo7ED2OqURq3QrMB7jTXXE0=)
                          2: j3Yd5Ltu5X29iBSj7jP42f5QXXA.roa (hash: FJYX/rMm1HqX39ADzYMKZZf0h1Ft/HqAxA8gLjKNmS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7c:5f:04:3a:48:45:2d:e2:4d:0e:3f:7f:c8:21:ca:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278f3c551309ffa461b77dfcc781a8a3ec669239
        Validity
            Not Before: Dec 18 10:00:50 2023 GMT
            Not After : Dec 19 10:00:50 2023 GMT
        Subject: CN=c3b80e83343d09c9db01784fd22e24ff83c7e1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:5b:aa:fe:dd:23:44:a5:d1:5e:68:6a:29:
                    44:60:65:c2:78:03:f6:7d:3a:4d:1d:42:0e:73:19:
                    31:b4:d0:e3:66:28:f6:2b:39:b2:a4:88:63:cb:11:
                    b1:0b:87:68:78:d2:fc:3e:fd:73:6a:a4:c6:a5:2d:
                    fd:5f:d5:09:5a:83:b4:66:ab:4b:90:d4:8f:80:9e:
                    91:00:5a:61:02:bd:6e:36:21:65:fa:cb:c7:1f:52:
                    08:8d:e4:bc:cd:b6:61:52:24:e5:1d:46:89:07:72:
                    6a:2e:53:95:43:fb:a9:67:eb:96:11:35:0f:a2:cd:
                    88:c8:39:13:ce:2c:ac:f0:cb:bf:aa:29:0d:79:83:
                    6b:14:c9:4f:90:f2:8d:75:bd:cb:69:00:e5:22:3f:
                    e3:fe:42:a6:96:45:51:23:8e:5b:6b:bd:b7:92:26:
                    6e:55:d2:2d:e8:1d:71:d5:f7:6b:3a:38:d9:dc:54:
                    85:70:e3:33:74:be:ab:dc:03:96:6a:c3:ab:d0:de:
                    28:d5:74:3f:a4:60:69:d9:62:63:9b:ee:35:93:d4:
                    5f:52:65:4b:c7:7a:11:4f:fe:f1:40:84:97:db:de:
                    da:86:c1:4c:72:bb:2b:ff:48:ab:71:c7:5b:db:ed:
                    05:19:ad:be:3d:61:96:0c:23:df:32:fc:4d:5b:75:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B8:0E:83:34:3D:09:C9:DB:01:78:4F:D2:2E:24:FF:83:C7:E1:C3
            X509v3 Authority Key Identifier:
                keyid:27:8F:3C:55:13:09:FF:A4:61:B7:7D:FC:C7:81:A8:A3:EC:66:92:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J488VRMJ_6Rht338x4Goo-xmkjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/c7c423-d861-461f-9c87-f31cd68f3a30/1/J488VRMJ_6Rht338x4Goo-xmkjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/c7c423-d861-461f-9c87-f31cd68f3a30/1/J488VRMJ_6Rht338x4Goo-xmkjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:23:6a:27:fb:13:62:29:38:74:ec:a0:d5:15:80:ee:58:
         2b:f8:5e:1b:09:ec:45:e1:8f:d9:42:41:09:b1:6e:c5:66:09:
         71:29:7b:4d:1a:33:66:4b:ab:11:ea:1a:4e:63:4b:85:07:7f:
         40:e5:56:97:52:43:78:0a:9c:cb:38:b5:13:55:38:2f:8f:dc:
         17:dc:91:d6:6e:93:43:cc:b7:14:01:08:56:39:22:c6:53:a2:
         d2:21:89:ac:ed:9c:9b:75:24:03:de:eb:ea:4d:e2:ea:21:31:
         74:87:a5:fe:d3:af:f7:ca:66:1b:0a:40:d7:17:13:0e:47:97:
         27:d2:da:84:bf:e8:bb:ff:9f:60:96:17:49:16:b1:1c:d7:c2:
         cc:fa:74:51:ac:89:f5:8b:bc:a9:f6:0b:d1:73:5e:40:96:83:
         db:a6:c9:83:20:6d:cc:64:70:41:27:93:34:87:1e:0a:8f:85:
         6e:f3:7c:a2:23:47:52:bf:49:af:59:a9:30:a4:e6:b2:87:31:
         1d:88:36:a9:cf:1a:b0:61:81:cd:ef:cc:b6:d4:bd:e2:ae:c2:
         25:95:15:5e:b4:33:00:c9:80:44:49:7e:0d:97:25:f7:1f:da:
         e5:37:47:d3:b7:a7:b3:59:06:8b:17:18:71:50:8e:cc:81:c0:
         ab:31:ca:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----