Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.mft
File:                     6zi33lYZ1UIbFdLevVbUze2UJHw.mft (raw, json)
Hash identifier:          wZggoo7r17nDlQ5YPwpCQcQmSpwNv7XLbDziiVZq9WM=
Subject key identifier:   78:4E:91:FC:0A:AD:1A:F2:47:5F:84:E9:C3:B3:2B:C2:91:CF:F3:BB
Authority key identifier: EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
Certificate issuer:       /CN=eb38b7de5619d5421b15d2debd56d4cded94247c
Certificate serial:       018B36A5B5ABB38EFBEE54D2B933493E83B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zi33lYZ1UIbFdLevVbUze2UJHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.mft
Manifest number:          087F
Signing time:             Mon 16 Oct 2023 04:01:51 +0000
Manifest this update:     Mon 16 Oct 2023 04:01:51 +0000
Manifest next update:     Tue 17 Oct 2023 04:01:51 +0000
Files and hashes:         1: 6zi33lYZ1UIbFdLevVbUze2UJHw.crl (hash: Mhc6tQPmJcOUb5RS0xilzfKmyGFvmq7WpqRR8fbD7Q8=)
                          2: rfECSZ5O8ite-faXZBKO3H8Wd4E.roa (hash: GglwPufRUjkKXguavcKqaqFsi9/+HXr47Y7QDqYojpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:a5:b5:ab:b3:8e:fb:ee:54:d2:b9:33:49:3e:83:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb38b7de5619d5421b15d2debd56d4cded94247c
        Validity
            Not Before: Oct 16 04:01:51 2023 GMT
            Not After : Oct 17 04:01:51 2023 GMT
        Subject: CN=784e91fc0aad1af2475f84e9c3b32bc291cff3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:22:72:87:9b:65:aa:51:43:f4:31:ff:54:db:
                    2e:d9:c0:e8:2d:92:f2:a4:92:87:74:d6:54:b7:58:
                    53:24:74:82:e8:4d:11:05:3e:a7:6a:7e:33:dd:37:
                    d8:d5:f2:36:8b:9e:54:68:ef:03:39:a6:ad:4a:3a:
                    53:1c:b4:cc:1b:19:3e:bc:d3:ef:1b:e6:c1:bf:10:
                    d9:9f:ec:0c:72:71:23:5d:75:22:e2:27:0a:1c:b2:
                    2d:ef:8d:1b:b1:0b:2b:59:02:5f:e5:ce:48:b5:54:
                    14:1c:c2:c4:29:b5:64:ac:98:5b:59:d7:84:63:97:
                    74:25:b1:56:7e:87:36:e1:4f:9c:6e:b6:8b:59:40:
                    f6:17:9f:40:19:e9:20:b9:d0:76:b6:8b:e1:45:b2:
                    04:d3:de:3d:72:fd:a6:25:88:3d:2b:7b:1e:81:c4:
                    0c:48:1a:dd:2f:9c:61:a3:34:fa:cc:21:97:54:f5:
                    21:ac:8a:3a:38:e6:a2:7b:18:28:c7:cc:15:b0:48:
                    25:dd:3c:d2:ac:bb:ee:50:bf:fd:f7:f8:bf:3b:da:
                    e5:5e:f1:41:ca:04:8e:35:d4:06:46:3f:3b:83:44:
                    a7:83:4e:e9:e2:b7:28:ea:39:22:d2:b6:88:31:21:
                    e3:1c:bd:64:d4:e0:39:b2:ae:c7:a0:f7:b4:27:aa:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:91:FC:0A:AD:1A:F2:47:5F:84:E9:C3:B3:2B:C2:91:CF:F3:BB
            X509v3 Authority Key Identifier:
                keyid:EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zi33lYZ1UIbFdLevVbUze2UJHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:70:92:f3:6a:49:14:de:ab:df:74:85:85:43:ab:98:40:db:
         8b:96:0b:a2:f8:a9:a8:22:df:1d:1e:36:96:38:22:98:4c:54:
         34:34:86:01:ce:81:45:93:8a:39:ff:06:b4:9e:48:f4:74:e5:
         3c:bf:e4:ec:c1:8d:9d:9b:48:d4:b3:af:a0:81:d3:8e:75:5a:
         33:0e:2e:3c:b2:bc:8e:3f:71:66:15:47:08:73:b0:af:f5:2c:
         b7:d2:28:3f:3f:65:e6:95:28:1b:30:3a:95:ac:7f:66:f1:55:
         67:f0:02:7e:0f:55:03:c0:0d:48:92:9b:ae:eb:6c:4a:0e:36:
         4e:d3:2d:33:4f:b9:01:97:c3:1b:1f:87:80:41:49:17:95:ef:
         3a:fd:3c:a8:ed:84:ee:f0:b2:99:1d:19:9c:27:6f:5a:76:95:
         c6:57:3e:10:5b:18:ee:e7:7d:6d:7a:d7:51:ed:37:12:35:f9:
         10:c1:31:9a:d1:48:ff:37:b0:3f:98:f6:e2:15:bc:b6:8f:72:
         b5:5b:83:c1:7b:83:80:ae:22:66:af:0f:08:94:e6:f0:af:16:
         58:4c:92:b2:bc:a7:11:1b:c6:f9:9e:18:3a:04:77:ea:7c:43:
         37:c4:53:55:77:09:65:d4:3e:60:b2:e1:e5:69:af:81:1d:b4:
         d5:de:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----