Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.mft
File:                     rtn9u0vVd5ryUokENEOysHxyswo.mft (raw, json)
Hash identifier:          6EWvj6K7HxQhkQtyEmB5Iez2BOpAdjQTTcSFGo8iB8w=
Subject key identifier:   97:4D:35:CD:F7:EE:A2:22:0D:06:FE:8D:25:89:C0:C1:6B:4A:C7:9C
Authority key identifier: AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
Certificate issuer:       /CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Certificate serial:       018BB95255E703DC732EDC9B0C330E9E26E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.mft
Manifest number:          0A4F
Signing time:             Fri 10 Nov 2023 13:01:02 +0000
Manifest this update:     Fri 10 Nov 2023 13:01:02 +0000
Manifest next update:     Sat 11 Nov 2023 13:01:02 +0000
Files and hashes:         1: 94KMeOWTdOigOwViyIGTzealXFQ.roa (hash: EyZUt/VwS/ycX3fSq5nQBmMxsVOw0v8tkFYLWN3ysIs=)
                          2: rtn9u0vVd5ryUokENEOysHxyswo.crl (hash: gmCokic2NfgBiW0o7jSpIe5e5kiZbS32HmgpPuFjeoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:52:55:e7:03:dc:73:2e:dc:9b:0c:33:0e:9e:26:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
        Validity
            Not Before: Nov 10 13:01:02 2023 GMT
            Not After : Nov 11 13:01:02 2023 GMT
        Subject: CN=974d35cdf7eea2220d06fe8d2589c0c16b4ac79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:c2:96:32:73:1d:c4:ba:79:3f:af:89:cc:
                    c7:22:a1:70:6a:ae:68:bf:58:ad:dd:1b:b1:c9:c9:
                    c3:7c:8f:82:cf:b5:b4:8c:a5:cf:1a:04:38:4e:c4:
                    dc:fc:53:e7:f9:22:6d:c1:46:89:d1:0f:91:8a:b7:
                    d1:f2:3d:8a:50:44:ac:c8:02:3e:83:5d:9a:a3:27:
                    33:09:48:98:a6:53:3b:2d:8d:bb:a5:94:4b:d0:37:
                    ac:78:ba:37:c5:50:f4:65:26:c3:2d:3f:ac:73:c4:
                    04:05:36:8b:78:df:ac:a9:4f:f3:e3:18:4d:1a:05:
                    13:d7:c5:d8:1a:65:26:95:84:30:f9:ba:f3:7d:d0:
                    43:4c:52:64:23:06:30:f8:d0:b3:81:7c:b6:d9:0e:
                    8f:aa:40:5a:f2:56:22:28:c0:43:5a:60:0a:e2:5e:
                    e9:9d:2b:00:f9:31:47:9f:5a:04:85:35:2c:51:6e:
                    da:48:8b:ec:d9:98:8b:9d:85:c4:d5:8c:c9:39:e8:
                    95:93:21:27:93:7c:58:45:35:bc:bf:83:9f:e6:e4:
                    bc:f4:c4:bb:3e:d3:1d:c7:d3:7c:0b:ad:ca:32:6f:
                    43:73:aa:5a:74:b1:82:7c:f2:57:b0:c5:f2:9b:56:
                    60:c9:e8:16:05:0a:b0:68:aa:d1:51:86:32:95:bf:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4D:35:CD:F7:EE:A2:22:0D:06:FE:8D:25:89:C0:C1:6B:4A:C7:9C
            X509v3 Authority Key Identifier:
                keyid:AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:b7:0f:f5:42:3d:1c:49:ec:22:22:5d:be:53:20:33:f7:
         c9:9e:c6:a7:68:6d:e9:6c:78:b5:07:90:d2:23:f1:99:ce:f9:
         9e:d4:87:41:bb:03:10:84:f5:f6:54:55:6e:04:3a:07:c8:81:
         ec:13:74:f6:b3:d7:1c:e7:5f:37:8f:c9:cd:f8:53:eb:6a:c0:
         59:89:ff:39:95:40:88:70:07:80:e7:53:40:5b:f8:a7:1a:3d:
         21:d0:1a:bd:be:01:f1:27:e4:e9:ab:55:3b:0c:c0:1a:42:7d:
         ad:38:df:75:42:17:7e:f8:c6:9a:23:fe:a9:6b:ca:ff:d6:47:
         58:78:e4:79:db:0a:5b:1d:74:78:85:69:c5:9f:53:0e:82:1b:
         fc:78:d9:c8:d0:96:83:e2:27:e2:fd:05:0b:85:65:27:46:02:
         60:3e:34:d3:e9:f1:56:1d:f0:93:df:71:e1:15:7c:0f:9b:e7:
         f6:40:64:4d:18:a4:e0:51:d8:79:33:05:16:cc:6d:91:66:d0:
         7e:e2:30:f9:5d:68:68:2f:e8:96:e5:4d:27:5d:51:57:06:dd:
         3d:a4:a6:a0:85:47:a6:47:29:f9:a5:1b:9f:42:ff:f3:f3:e3:
         2e:ad:ca:19:ad:35:7b:60:3f:85:49:22:6e:76:17:1c:88:97:
         98:bf:f2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----