Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1629b9-c75f-41d1-ba05-0aa5850ac521/1/OKdOuWgEz_GvI1G_Wmt7DCXmQls.mft
File:                     OKdOuWgEz_GvI1G_Wmt7DCXmQls.mft (raw, json)
Hash identifier:          xjpt1AuvJo19Cs6UTrtYLWJVKiTJIeamcAcrG9cCXCM=
Subject key identifier:   6D:90:FD:13:A6:79:0E:28:B3:5D:8F:21:7D:62:A7:C7:1F:70:3C:95
Authority key identifier: 38:A7:4E:B9:68:04:CF:F1:AF:23:51:BF:5A:6B:7B:0C:25:E6:42:5B
Certificate issuer:       /CN=38a74eb96804cff1af2351bf5a6b7b0c25e6425b
Certificate serial:       018BB387E3E644AA419B7614E4A0F0932064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKdOuWgEz_GvI1G_Wmt7DCXmQls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/1629b9-c75f-41d1-ba05-0aa5850ac521/1/OKdOuWgEz_GvI1G_Wmt7DCXmQls.mft
Manifest number:          0F79
Signing time:             Thu 09 Nov 2023 10:01:49 +0000
Manifest this update:     Thu 09 Nov 2023 10:01:49 +0000
Manifest next update:     Fri 10 Nov 2023 10:01:49 +0000
Files and hashes:         1: OKdOuWgEz_GvI1G_Wmt7DCXmQls.crl (hash: xrdgOrRXPQKhUGC+n0qf1/3qoeoq645lBtksiQFoDSc=)
                          2: tcc9Tsyn6d-96WPt_XbJBv60zew.roa (hash: J6Nb5VpR4KUZjwsP+R+io+86T3laLyrcYfLrTF5fPlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b3:87:e3:e6:44:aa:41:9b:76:14:e4:a0:f0:93:20:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a74eb96804cff1af2351bf5a6b7b0c25e6425b
        Validity
            Not Before: Nov  9 10:01:49 2023 GMT
            Not After : Nov 10 10:01:49 2023 GMT
        Subject: CN=6d90fd13a6790e28b35d8f217d62a7c71f703c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:7e:3c:eb:03:22:f2:08:1a:fa:01:bd:42:
                    f6:91:ce:69:cc:0d:17:0c:09:6a:c1:dc:2e:2e:bf:
                    8b:41:74:c1:0d:3e:99:b2:41:5d:82:ea:2f:60:3b:
                    9c:5b:0d:10:17:93:bd:ec:be:bc:32:4e:7b:4b:d8:
                    fb:ff:de:6b:bb:5c:6f:6d:b7:9b:6b:b1:b6:0f:36:
                    f8:1a:43:78:1a:e5:f8:f2:09:c6:19:90:dc:a7:13:
                    ed:84:81:cb:39:8e:53:1a:7e:db:4b:e2:1c:ea:f4:
                    be:0f:4a:62:46:2d:e3:49:5b:e2:22:d1:5a:01:ed:
                    9c:ee:9e:95:3d:15:6d:00:17:c9:a9:01:69:79:39:
                    8a:92:66:6d:87:09:f9:2b:89:03:4b:b0:8b:9e:49:
                    5b:e9:c5:94:b3:71:6d:2b:b7:e3:54:f4:ce:d8:d7:
                    11:bf:84:56:1a:0e:56:67:68:5a:ad:6b:67:c2:e0:
                    71:a8:e2:20:6f:44:9e:8f:b0:3c:62:1a:25:df:b6:
                    8c:c8:c0:04:d8:9b:9b:71:8a:fb:46:c9:35:5d:ac:
                    3f:f8:50:ce:6d:b3:cb:62:4f:0c:9c:60:b2:63:e8:
                    13:e0:78:1e:42:7f:8e:ba:9a:ca:13:10:82:d1:5f:
                    89:ec:7d:89:63:77:f3:d2:7a:d4:b9:0f:bf:22:8c:
                    6f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:90:FD:13:A6:79:0E:28:B3:5D:8F:21:7D:62:A7:C7:1F:70:3C:95
            X509v3 Authority Key Identifier:
                keyid:38:A7:4E:B9:68:04:CF:F1:AF:23:51:BF:5A:6B:7B:0C:25:E6:42:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKdOuWgEz_GvI1G_Wmt7DCXmQls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1629b9-c75f-41d1-ba05-0aa5850ac521/1/OKdOuWgEz_GvI1G_Wmt7DCXmQls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1629b9-c75f-41d1-ba05-0aa5850ac521/1/OKdOuWgEz_GvI1G_Wmt7DCXmQls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:9f:35:79:39:df:88:bb:9f:24:c4:b9:39:1e:4c:eb:83:
         3c:7a:9e:39:2b:47:28:96:4d:e4:76:ec:a8:52:88:bf:e6:52:
         18:65:6e:fd:25:2a:41:44:fe:46:8d:09:36:6c:6c:dd:1f:79:
         c9:42:c9:91:8d:e8:e6:17:75:5d:5d:68:8d:3a:0b:ae:77:e6:
         3d:4b:1f:c9:ee:23:fb:23:59:34:90:59:f4:d0:8f:44:25:1a:
         80:1b:0f:3a:5e:bb:40:2f:28:76:1c:08:09:ff:28:26:46:77:
         21:15:35:ff:04:37:bd:a0:8e:5b:b7:2c:4e:f1:11:f7:99:a3:
         5a:97:a1:b2:df:6a:df:49:36:bf:ad:11:6a:bb:d9:61:8d:92:
         21:1a:32:ea:ab:6d:7a:db:48:d6:c2:25:80:bf:6c:61:35:c0:
         4e:2d:21:07:96:45:8f:41:2e:e8:9a:70:56:45:39:72:c9:65:
         8d:3d:f2:46:34:71:02:44:6b:3e:e9:49:7a:2b:3b:20:08:ef:
         cc:b9:93:c6:9d:3a:5e:a7:9e:99:3a:78:5a:2e:14:a0:97:1d:
         9d:74:b5:17:46:93:f9:5b:4f:e0:ef:a9:8e:bf:f3:f1:bc:b0:
         e0:51:b5:7a:4f:f9:39:83:16:e1:23:20:6d:74:47:59:e8:40:
         7a:d7:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----