Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/BmU7BJMl_ChzczJdDaTZYxyVHng.mft
File:                     BmU7BJMl_ChzczJdDaTZYxyVHng.mft (raw, json)
Hash identifier:          b0IaKTZAXmPn46C14KZgXvaIaYS1gaM0R+aRuL94jzs=
Subject key identifier:   7A:C3:CB:5C:AC:1B:18:0E:99:AE:2D:8C:C1:55:B1:0F:AB:22:0B:7F
Authority key identifier: 06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78
Certificate issuer:       /CN=06653b049325fc287373325d0da4d9631c951e78
Certificate serial:       018C5DAF437F26FC28687333F7617E80F0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/BmU7BJMl_ChzczJdDaTZYxyVHng.mft
Manifest number:          0FD4
Signing time:             Tue 12 Dec 2023 11:00:16 +0000
Manifest this update:     Tue 12 Dec 2023 11:00:16 +0000
Manifest next update:     Wed 13 Dec 2023 11:00:16 +0000
Files and hashes:         1: 4wtiVmlocQ9xEZwaBgl_7P3Vq5E.roa (hash: 3YncXP3nYgsk4HRsIs4K2hoptIwI0qpq/4r/D+3Ecms=)
                          2: BmU7BJMl_ChzczJdDaTZYxyVHng.crl (hash: OyvMQkCs6jXBbUKJ0wucFHxebLncgHBmU8vdHN+Sedc=)
                          3: RTcioBpLBr-zKva2UboygdPc6e4.roa (hash: CqSjsHsIoHQvYLffMVsg0AFw1r7idHMSmD7dZsF2veY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5d:af:43:7f:26:fc:28:68:73:33:f7:61:7e:80:f0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06653b049325fc287373325d0da4d9631c951e78
        Validity
            Not Before: Dec 12 11:00:16 2023 GMT
            Not After : Dec 13 11:00:16 2023 GMT
        Subject: CN=7ac3cb5cac1b180e99ae2d8cc155b10fab220b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:7d:ed:73:06:5b:1c:88:7e:17:97:01:ab:
                    d2:ea:ef:07:ee:4f:9d:9d:4f:96:75:21:4f:dc:bd:
                    e7:d4:a6:27:e9:65:47:39:b4:5b:ee:b9:86:e8:2a:
                    c0:76:96:f1:33:d2:de:c1:04:7d:24:82:f5:0c:27:
                    5b:8d:9f:b5:5e:35:53:1d:56:49:24:04:1d:86:a3:
                    17:cd:6d:57:ff:0d:b9:be:b4:52:83:a6:86:e2:77:
                    9b:47:67:9c:6e:d7:17:79:75:e6:d4:bb:aa:b0:95:
                    9e:0e:c6:03:83:b7:f7:90:12:e7:1d:38:bb:8e:cd:
                    95:39:df:95:28:cd:dc:74:f3:34:2d:41:cc:59:98:
                    62:43:9e:97:bf:ac:49:51:a0:ce:43:42:26:fe:ae:
                    4e:78:53:fc:ce:59:37:58:c0:8e:1a:eb:ad:83:b4:
                    c4:cc:81:48:ce:f5:33:b1:58:64:17:75:59:49:21:
                    eb:ac:63:65:d0:d0:d9:5a:45:15:71:bb:0a:c5:79:
                    68:75:2d:87:43:11:73:44:d4:2a:43:33:79:9e:50:
                    e3:eb:77:52:21:b1:cd:29:ee:a0:b7:ce:9e:96:b9:
                    7e:1e:bf:ce:ec:59:2a:4f:30:bf:7d:2e:9e:58:27:
                    52:83:50:e1:8e:92:18:55:1d:23:45:87:da:33:a7:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C3:CB:5C:AC:1B:18:0E:99:AE:2D:8C:C1:55:B1:0F:AB:22:0B:7F
            X509v3 Authority Key Identifier:
                keyid:06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/BmU7BJMl_ChzczJdDaTZYxyVHng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/BmU7BJMl_ChzczJdDaTZYxyVHng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:d4:21:2b:69:5e:eb:69:3e:13:e1:32:f8:a9:73:d8:5f:
         18:e8:70:fa:2f:a6:5e:e8:72:11:d4:1d:65:fd:d3:dd:3b:49:
         2b:0b:79:8e:16:ef:2b:e9:2e:5f:7e:d6:ad:4a:42:b2:61:7f:
         a9:d1:0f:b3:0d:96:10:85:bf:21:ef:0f:44:d4:e4:ff:22:dc:
         73:40:24:ab:d4:7f:8c:9a:65:b5:eb:5d:26:c8:9b:e0:e2:32:
         72:9d:a9:8b:38:2b:ac:30:f0:5c:23:40:e7:7e:9b:ec:bc:30:
         56:42:b1:24:57:e9:36:f9:7c:ee:13:f2:49:51:b7:ba:b4:0b:
         89:78:38:83:78:de:c3:c2:87:65:40:71:37:5d:83:b1:8f:ea:
         24:31:5a:0d:63:c3:40:7a:a4:b1:cb:ae:2b:54:9d:f4:51:2e:
         9a:f7:d3:99:4b:4e:ec:35:f2:2e:d9:ce:14:26:e7:ba:99:d1:
         e3:f3:7c:2b:f7:1c:c4:ff:de:56:f2:c3:78:d0:8c:f4:70:e9:
         b5:3b:94:2c:90:c8:19:1b:61:26:c4:e8:92:62:62:ad:39:53:
         41:a1:fe:f0:97:ce:4f:04:ce:f8:b3:ab:8a:07:9b:b8:42:55:
         11:27:c9:0a:ac:8c:33:0d:62:71:fc:16:23:d3:13:2a:85:ec:
         d8:a1:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----