Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.mft
File:                     eCZo87pHfeIFKswRCxntS2ETCds.mft (raw, json)
Hash identifier:          GN1rgviePjC0J0yfGXZrOPYrjpyO7Rkj88RGZHNyt20=
Subject key identifier:   35:C7:0F:07:48:21:E2:E8:3A:60:5C:DF:13:3F:C9:02:DC:F9:00:51
Authority key identifier: 78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
Certificate issuer:       /CN=782668f3ba477de2052acc110b19ed4b611309db
Certificate serial:       018C5DAF612039BEBB82AFEB0453668B60DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.mft
Manifest number:          07A2
Signing time:             Tue 12 Dec 2023 11:00:23 +0000
Manifest this update:     Tue 12 Dec 2023 11:00:23 +0000
Manifest next update:     Wed 13 Dec 2023 11:00:23 +0000
Files and hashes:         1: SuFx2I1RoMo_gKADFCZ1j4zrCko.roa (hash: ztuUytWmYAuW/U8QKw/5sjtZ3KJyD0eKiOR4HWFamzM=)
                          2: c93tP3dO3eu77AJ1Njkrb2S28NY.roa (hash: edi9rtWynDNjRpYZWNL9EpbDY733Wv7Kgjy02sgvuJk=)
                          3: eCZo87pHfeIFKswRCxntS2ETCds.crl (hash: lRXBrXtNth7nLqPw3qjfDfWZLjLl53w78HVZ9BXTyNk=)
                          4: iPvNt2gZwNRpOX6m5M_3fbKEVNE.roa (hash: m18nLUlh0egaoy0GufW7kRmeHPHBCvQLM4RTSn5A2uI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5d:af:61:20:39:be:bb:82:af:eb:04:53:66:8b:60:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782668f3ba477de2052acc110b19ed4b611309db
        Validity
            Not Before: Dec 12 11:00:23 2023 GMT
            Not After : Dec 13 11:00:23 2023 GMT
        Subject: CN=35c70f074821e2e83a605cdf133fc902dcf90051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:13:d4:a4:ca:b9:c5:d1:f6:79:2e:86:4e:61:
                    78:2c:71:82:6b:a9:b4:01:38:90:ec:5b:bc:e4:cc:
                    a1:30:7c:b4:1c:d1:6d:c0:59:39:a9:64:95:e8:d1:
                    9a:36:3c:49:30:c4:77:72:e3:b2:96:07:8b:be:65:
                    95:f7:ac:18:60:bc:13:d0:93:5f:a1:b6:0e:a3:9e:
                    02:99:1e:f2:71:a0:dd:42:d6:a2:e2:3a:3e:dd:4e:
                    f3:30:d4:62:ff:95:cf:e4:b8:73:f5:84:a4:90:77:
                    1b:3f:87:c8:d3:2f:cb:ad:25:b7:1f:06:a3:63:19:
                    97:1e:cc:10:d4:a2:1b:0e:b1:5b:5b:ba:3b:96:1a:
                    5a:02:25:8e:7c:79:7a:5e:1f:42:e4:df:af:0e:af:
                    63:3f:43:68:8b:7a:2e:fe:12:eb:68:a6:a2:6d:f8:
                    9a:e5:b4:6d:26:09:21:19:38:1a:7b:99:8f:50:cd:
                    fd:3a:aa:64:63:bd:8d:7a:4c:47:a4:bb:ca:22:d8:
                    f8:ed:10:5a:4a:24:88:52:2c:db:38:55:14:65:28:
                    60:93:cd:ab:76:f7:b5:1f:ee:0c:c9:2a:8a:89:2e:
                    26:14:38:da:55:ff:bb:be:44:7f:d8:50:e5:4f:17:
                    eb:8e:c3:e9:ad:0f:47:34:15:96:08:e7:c0:93:b1:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C7:0F:07:48:21:E2:E8:3A:60:5C:DF:13:3F:C9:02:DC:F9:00:51
            X509v3 Authority Key Identifier:
                keyid:78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cc:ac:31:8a:42:4a:bc:28:61:31:4f:13:b1:5a:a5:70:d4:
         dd:9e:98:0b:c3:3d:b4:30:fd:18:7e:4a:c8:77:97:ed:13:38:
         8c:78:3b:24:4a:bd:7e:f1:48:e3:7f:d6:77:59:83:c7:3b:58:
         9e:35:5d:ae:99:9f:04:c5:09:6b:81:67:ab:63:55:1d:80:01:
         fa:b8:c1:39:4b:f3:e9:8b:83:21:b6:dd:ac:7a:31:8d:9f:89:
         7f:2d:6b:96:bc:e3:53:d2:cc:64:1f:af:ad:39:93:b6:c9:4e:
         60:5c:f7:52:bf:90:8a:f8:91:fd:ea:25:4d:ca:2e:e2:f1:b3:
         fd:3d:df:4a:70:24:d4:19:8c:e0:73:66:a8:9e:a2:23:ef:de:
         ba:27:18:d5:f0:48:cf:95:96:29:ce:c3:40:21:ca:73:f3:28:
         84:4b:0e:75:44:41:0a:b6:dc:b6:61:43:5f:12:7d:d2:61:97:
         10:3e:27:53:cc:12:cf:8e:94:0c:c5:15:d7:ed:49:ab:8d:3a:
         4d:ad:6a:b8:15:a5:79:6a:b2:42:f3:aa:b2:68:31:cb:a6:59:
         54:19:e8:79:0d:eb:7b:d2:38:ac:1d:3b:10:e4:8e:79:02:3d:
         d3:1e:0a:44:cf:99:02:0e:7c:98:5e:68:55:5e:9a:5a:87:6e:
         4b:96:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----