Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.mft
File:                     F-MCgK4iRDQG9rY89eDY4GHWu8o.mft (raw, json)
Hash identifier:          wXiYSMQqns2sjkBkmdX5W6WTPtpE5HXl/40N26vy5Lg=
Subject key identifier:   05:AB:52:CE:FA:5D:F5:FD:C6:8B:F4:42:78:21:6C:46:03:9C:F4:AD
Authority key identifier: 17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA
Certificate issuer:       /CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
Certificate serial:       018B894154454E12372F81B0E869DD6CA971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.mft
Manifest number:          08CE
Signing time:             Wed 01 Nov 2023 05:00:41 +0000
Manifest this update:     Wed 01 Nov 2023 05:00:41 +0000
Manifest next update:     Thu 02 Nov 2023 05:00:41 +0000
Files and hashes:         1: F-MCgK4iRDQG9rY89eDY4GHWu8o.crl (hash: o4JwyMp8xGOJrt80+aMK4CgkE1+aCoLWfTvlQfH4BJU=)
                          2: _kE_49-gVfncdUnnfu-p_okPQwI.roa (hash: x551WImK7PgpaVcDQu+yAdrMhQblgXTSV08+OvbLKv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:89:41:54:45:4e:12:37:2f:81:b0:e8:69:dd:6c:a9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
        Validity
            Not Before: Nov  1 05:00:41 2023 GMT
            Not After : Nov  2 05:00:41 2023 GMT
        Subject: CN=05ab52cefa5df5fdc68bf44278216c46039cf4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:e6:10:cd:c2:6c:7d:f3:1f:a5:e5:82:86:
                    da:b2:09:8b:4f:09:33:ca:df:a3:54:f6:5c:e3:e0:
                    65:b9:41:67:79:ba:b9:14:28:4e:98:d6:94:d9:ac:
                    d4:00:73:9c:df:62:3d:3b:96:4c:24:8f:93:e4:63:
                    70:a0:ac:24:84:03:0c:c0:7d:10:54:d4:3c:be:b7:
                    02:22:f1:ef:8a:e7:4b:72:ab:2f:df:92:2c:5f:2a:
                    2f:11:41:63:94:26:9d:37:72:af:93:a4:d9:68:75:
                    ac:2d:24:54:32:6f:99:ee:23:95:4f:66:19:63:b4:
                    f9:9d:9a:1b:ae:95:ca:e5:97:10:e9:00:d3:b0:e9:
                    c1:87:30:f4:ac:04:14:6e:a0:78:e6:23:95:9b:42:
                    f7:f4:5c:df:5d:20:06:c0:cb:ca:c7:6f:e3:e6:a6:
                    86:94:95:b2:f7:88:b4:62:ec:b5:50:b9:73:74:80:
                    ef:93:07:0d:f9:ba:ca:0e:49:1d:23:dc:6d:8c:a9:
                    e6:81:d4:10:7e:40:be:46:bd:a5:56:7b:a4:d0:b1:
                    14:27:e4:21:a4:cc:17:7f:c4:b5:65:0c:97:42:de:
                    04:70:73:b7:d4:a7:85:87:c6:80:71:c6:c8:07:ab:
                    6b:d5:54:3e:fa:55:7c:5d:e0:a5:41:e3:c5:12:cf:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AB:52:CE:FA:5D:F5:FD:C6:8B:F4:42:78:21:6C:46:03:9C:F4:AD
            X509v3 Authority Key Identifier:
                keyid:17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:65:9c:13:6f:49:6e:2b:ab:1c:87:5f:67:5b:37:38:43:
         72:c8:e1:5d:b2:8f:b8:06:ab:f1:5b:bc:58:b4:dd:6c:a0:3c:
         66:7e:ff:fd:e1:7e:72:48:ba:7d:0f:ac:39:ba:92:13:22:3a:
         43:d1:d6:58:6e:57:97:f7:f7:bc:de:56:b7:25:ad:40:31:e3:
         13:86:ad:bb:56:6f:2b:19:21:22:9d:df:c3:41:ab:59:1a:52:
         b7:d8:59:81:48:c8:d7:70:52:f1:e4:07:df:ea:55:ab:4c:08:
         6f:61:a3:b3:9a:b5:ca:5e:9d:98:3e:84:98:32:90:ac:f5:14:
         2c:ec:4e:e4:4b:90:43:ec:dc:2d:d2:db:e1:80:00:d3:f5:a8:
         d7:cd:18:b0:5a:45:e7:17:9a:18:8c:dc:de:32:25:8e:dc:b9:
         fd:86:0a:3c:a8:57:f7:3b:ae:25:6e:4b:9a:48:bd:04:c7:b9:
         b1:a0:b3:bf:e3:99:9b:2d:12:5b:bd:19:30:aa:d9:dd:ca:c0:
         5e:45:12:c2:87:d9:f1:32:04:93:50:c9:44:60:bc:93:25:47:
         7b:06:bd:57:bc:e0:04:3b:83:8c:49:bb:5c:a0:a3:d8:17:25:
         1d:02:25:b9:99:f9:08:6f:34:5d:ed:bd:99:d0:df:54:ae:1a:
         74:c4:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:39:04 2023 by rpki-client on console-ams.rpki-client.org