Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/AMNfDYQqetu1bQXAM9xHd91p2CI.mft
File:                     AMNfDYQqetu1bQXAM9xHd91p2CI.mft (raw, json)
Hash identifier:          oNpeotU7tv2w0jyzRfU1MJzbqAig1P6JMWi/nmgMqHk=
Subject key identifier:   9B:66:11:B0:55:30:4C:53:78:0D:30:7A:C4:86:24:CC:54:CC:BF:F6
Authority key identifier: 00:C3:5F:0D:84:2A:7A:DB:B5:6D:05:C0:33:DC:47:77:DD:69:D8:22
Certificate issuer:       /CN=00c35f0d842a7adbb56d05c033dc4777dd69d822
Certificate serial:       018B36A4FC961AB53CB8AA59EFBC98F6DD15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMNfDYQqetu1bQXAM9xHd91p2CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/AMNfDYQqetu1bQXAM9xHd91p2CI.mft
Manifest number:          06BC
Signing time:             Mon 16 Oct 2023 04:01:04 +0000
Manifest this update:     Mon 16 Oct 2023 04:01:04 +0000
Manifest next update:     Tue 17 Oct 2023 04:01:04 +0000
Files and hashes:         1: AMNfDYQqetu1bQXAM9xHd91p2CI.crl (hash: HZZCLNBCT4Hji8zzUMHNhBUiUcmg1vgoZzInzdNUYas=)
                          2: oAN622JEV_pnTsEH3wp8dBELono.roa (hash: R1TjmFNM4xehFheChA99YjRM5Idr+sykfSz7fimrIvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:a4:fc:96:1a:b5:3c:b8:aa:59:ef:bc:98:f6:dd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c35f0d842a7adbb56d05c033dc4777dd69d822
        Validity
            Not Before: Oct 16 04:01:04 2023 GMT
            Not After : Oct 17 04:01:04 2023 GMT
        Subject: CN=9b6611b055304c53780d307ac48624cc54ccbff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:e7:a7:2b:ee:24:51:f5:a5:54:a9:ce:2e:
                    25:76:71:d9:6b:a0:97:15:a0:2f:18:fd:96:60:43:
                    8a:6d:2d:22:6b:22:7a:82:83:58:73:7d:5b:c0:72:
                    66:82:df:05:c6:e9:ed:b7:4d:ff:e3:a0:1d:30:91:
                    77:49:3d:2f:33:7e:a2:fa:3c:54:8d:55:75:0d:13:
                    ee:a8:03:67:b4:96:db:b3:f1:5f:4a:4b:ee:af:04:
                    0c:73:68:01:ac:ec:42:95:71:e7:a5:0c:1d:31:24:
                    4e:d9:bf:d1:6d:91:51:78:aa:c5:ec:4b:fa:30:03:
                    80:df:ae:b4:5f:43:95:b8:fd:50:96:9a:bd:60:09:
                    70:6a:7b:4f:4e:47:36:0e:55:e1:71:2f:05:1e:f0:
                    91:a8:a5:ed:2f:fa:1d:46:bc:85:13:a0:a7:a8:7a:
                    f0:6f:15:be:00:4d:91:a8:e6:9c:81:64:85:dd:af:
                    78:2e:7d:08:60:54:0a:15:4e:33:b7:2d:99:b2:c8:
                    62:c1:04:c4:a3:5e:78:9d:b8:52:7b:10:92:85:cd:
                    c9:e0:9d:f4:ab:3e:97:0c:a0:ef:7e:74:fa:c9:8f:
                    85:df:30:7b:d9:95:2d:9c:6b:2e:91:8d:66:60:07:
                    49:f2:4b:91:c9:a0:3e:1e:4d:43:35:4c:f0:82:ce:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:11:B0:55:30:4C:53:78:0D:30:7A:C4:86:24:CC:54:CC:BF:F6
            X509v3 Authority Key Identifier:
                keyid:00:C3:5F:0D:84:2A:7A:DB:B5:6D:05:C0:33:DC:47:77:DD:69:D8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMNfDYQqetu1bQXAM9xHd91p2CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/AMNfDYQqetu1bQXAM9xHd91p2CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/AMNfDYQqetu1bQXAM9xHd91p2CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:01:4a:a7:1d:02:47:1f:3e:2e:d5:bb:eb:96:73:d6:7e:f4:
         7f:39:5c:0a:7c:88:d0:10:88:ca:33:8b:29:6e:a7:60:38:83:
         0b:03:13:6f:95:81:a6:72:d1:63:f9:1d:9e:00:6e:21:99:ee:
         a9:7c:f1:6f:09:36:b8:f2:04:de:69:bd:73:9d:20:28:02:d2:
         6f:ea:47:7f:84:79:ad:a6:22:c6:07:01:c0:29:a6:5f:a0:4e:
         f6:ed:a3:e7:47:bd:0c:d4:fa:c5:07:46:dc:26:7f:58:55:dd:
         2e:60:58:9a:2e:d3:da:5f:63:7c:99:c8:ef:e2:b4:ea:33:cb:
         c0:c6:96:f7:8f:d8:34:fd:d9:33:9a:bc:56:1c:a1:42:f7:76:
         ba:b2:03:39:05:45:61:43:6a:6c:4b:3e:e2:ab:79:48:1f:68:
         3b:d3:04:32:bf:11:e8:68:9a:5f:65:9d:06:7c:25:38:55:6e:
         df:47:c0:38:3c:c8:a2:0b:06:0a:10:49:eb:3b:0f:67:a9:a1:
         68:d1:8a:a3:2b:70:f4:96:e5:5d:b6:af:c1:27:aa:b9:60:82:
         8a:c8:c6:82:39:19:ce:14:4d:5d:29:20:5e:88:7f:4f:e4:84:
         57:2f:fc:08:1f:7a:54:78:10:6c:96:9b:1e:07:95:db:b4:5f:
         9d:3b:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----