Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.mft
File:                     JtxGblYiUSTugFiFRBMFZizrHyM.mft (raw, json)
Hash identifier:          Ts8klCyTnUwopTS95ywlWGcQoxwKVxHR8w8CD7N5SCs=
Subject key identifier:   E9:C4:57:65:27:74:46:B7:A6:BC:2A:C8:FD:16:7A:FB:26:1A:35:0C
Authority key identifier: 26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
Certificate issuer:       /CN=26dc466e56225124ee805885441305662ceb1f23
Certificate serial:       018B803DD5C0999B67F003551529DFF6CA42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.mft
Manifest number:          088D
Signing time:             Mon 30 Oct 2023 11:00:17 +0000
Manifest this update:     Mon 30 Oct 2023 11:00:17 +0000
Manifest next update:     Tue 31 Oct 2023 11:00:17 +0000
Files and hashes:         1: 1-zlYbRsSE8_lcGlLoB-P9s09gpY.roa (hash: 522z0zC074tp+sYfdaGIiiP9OVb7/QqpNxRGnaQ6zkk=)
                          2: JtxGblYiUSTugFiFRBMFZizrHyM.crl (hash: 3NVgJY4rMhNEjH5mTMQ8Nq7L+h6hBXu5DUQ3rUZ/sEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:80:3d:d5:c0:99:9b:67:f0:03:55:15:29:df:f6:ca:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dc466e56225124ee805885441305662ceb1f23
        Validity
            Not Before: Oct 30 11:00:17 2023 GMT
            Not After : Oct 31 11:00:17 2023 GMT
        Subject: CN=e9c45765277446b7a6bc2ac8fd167afb261a350c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:87:46:5c:d9:b2:0a:77:a5:63:c9:75:f2:
                    25:26:dc:93:33:da:11:aa:79:f1:00:c2:77:3c:52:
                    0d:b7:a3:fc:24:36:f5:d1:a3:65:e2:27:e4:6e:4c:
                    aa:71:cd:af:23:69:b0:3c:25:60:75:1a:87:ea:ad:
                    0a:c7:04:07:d0:4c:0e:a0:03:5f:ba:91:2e:17:3e:
                    52:d4:a7:21:31:b6:61:b7:32:f0:d9:11:32:68:47:
                    73:d0:4a:46:7d:b5:0d:d0:25:99:b2:18:f7:2b:a0:
                    52:71:f7:a0:74:a6:a8:84:03:24:26:70:7f:3c:d3:
                    be:8d:5b:7a:45:31:51:8c:9c:f8:e2:0b:8b:8d:32:
                    40:f7:f9:15:f1:38:34:6e:cf:a0:1e:a9:50:9c:be:
                    bb:34:54:4e:59:8c:ca:6b:16:a6:ac:31:ec:58:7a:
                    8a:34:07:29:36:10:c3:2e:6c:93:f9:ea:bd:70:3f:
                    74:14:34:5e:df:2f:9c:95:d9:69:85:76:29:6f:39:
                    a9:5b:ab:cb:6c:9f:22:2c:a7:77:14:6b:c1:6b:3c:
                    f9:0a:20:61:8f:e4:42:ab:f4:91:e5:bd:69:6a:ef:
                    01:d7:1f:5f:88:07:bc:05:44:ea:4e:b1:23:45:cc:
                    3e:a6:49:3f:73:7d:1e:2f:f3:49:b8:34:3b:e3:60:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C4:57:65:27:74:46:B7:A6:BC:2A:C8:FD:16:7A:FB:26:1A:35:0C
            X509v3 Authority Key Identifier:
                keyid:26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:36:bb:74:4a:a2:8d:d2:dd:c9:98:66:bf:94:e3:67:7c:69:
         8a:90:14:a0:73:81:9a:66:e4:6a:5b:c3:f2:56:eb:c5:1d:3e:
         8c:8d:ce:d8:33:00:4a:ee:f6:90:84:9f:fa:d2:6e:cc:17:7e:
         3e:31:d8:a5:69:78:00:0b:f8:71:8e:ca:69:43:c7:b1:41:ad:
         d5:61:ae:4e:58:f3:02:ef:de:58:0b:09:87:65:13:09:b7:7e:
         f2:c7:8e:dd:60:a4:40:da:bd:fc:e2:13:8f:eb:22:92:d7:c2:
         ac:9d:6c:cd:e0:c6:8c:ad:ab:8a:eb:0d:cb:83:54:6f:c0:e6:
         4e:a5:fa:ca:8a:1c:ec:8b:af:2a:56:94:46:d2:82:eb:96:89:
         68:8f:23:f5:43:7f:ac:29:b6:7a:60:90:5e:f4:6d:34:f9:81:
         b3:2d:d5:71:e4:44:4c:0e:98:c8:e5:b2:b0:e6:14:20:3e:ae:
         f1:86:97:74:b1:af:b3:7c:af:95:22:dc:63:9e:2f:42:7e:1f:
         77:d9:4f:b4:d2:48:3c:bf:b7:97:27:ac:71:c0:6b:06:b9:c1:
         ee:37:f8:92:b8:17:4a:24:fd:95:40:68:d5:c5:0a:23:7f:33:
         fa:ae:ec:ea:67:74:f0:a7:a6:97:15:7a:3e:2d:b6:57:79:25:
         ad:98:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----