Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/I7eNd6BUSbF1YIPQPx_SNzphJaY.mft
File:                     I7eNd6BUSbF1YIPQPx_SNzphJaY.mft (raw, json)
Hash identifier:          DvWCriyObdRpKbchVbiCL62ISyYoJwr+/NGqgEorOW4=
Subject key identifier:   80:A7:05:4F:BB:65:E9:A4:BC:17:53:58:FB:26:77:AA:FA:C7:6F:16
Authority key identifier: 23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6
Certificate issuer:       /CN=23b78d77a05449b1756083d03f1fd2373a6125a6
Certificate serial:       018BCB59000654DEF6B7A611BAE2A29B7679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/I7eNd6BUSbF1YIPQPx_SNzphJaY.mft
Manifest number:          0670
Signing time:             Tue 14 Nov 2023 01:01:29 +0000
Manifest this update:     Tue 14 Nov 2023 01:01:29 +0000
Manifest next update:     Wed 15 Nov 2023 01:01:29 +0000
Files and hashes:         1: I7eNd6BUSbF1YIPQPx_SNzphJaY.crl (hash: MT22GX45SH15WkoPll0T6QxZK3WFM6A9EfMGgjXffE4=)
                          2: Xxpy5-a0sRZ197_KpNIjK-JA65k.roa (hash: thf3xNE9Zg65FtYu12wPdbaKQ3EKVbURvAK1eosqFDs=)
                          3: tL5oGaOouG0pKIA4TIr965DjiFE.roa (hash: /J2h2uhNsko78Lvhys0uItjTNIergGlE9YPepZDvwAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cb:59:00:06:54:de:f6:b7:a6:11:ba:e2:a2:9b:76:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b78d77a05449b1756083d03f1fd2373a6125a6
        Validity
            Not Before: Nov 14 01:01:29 2023 GMT
            Not After : Nov 15 01:01:29 2023 GMT
        Subject: CN=80a7054fbb65e9a4bc175358fb2677aafac76f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:8a:84:f6:e1:ad:0b:f6:52:ec:a5:f5:21:
                    11:ec:d7:6d:fe:69:f6:b6:17:b9:d6:bc:2b:a0:dd:
                    07:3c:49:10:ed:76:e9:69:7c:0c:ee:fd:0b:75:bd:
                    0e:a6:cc:7e:9f:39:36:12:90:c7:0d:aa:72:78:26:
                    3b:9f:96:3d:3b:e4:84:4f:b5:0d:3a:3e:80:23:cc:
                    12:1c:b0:71:d2:e2:77:1e:ce:a7:53:11:16:4a:bf:
                    9e:00:28:db:a9:e8:3f:12:f1:ce:03:91:9e:b1:be:
                    a7:c9:66:b6:7a:6d:ff:6e:d3:c2:b6:a4:b0:3d:96:
                    67:72:2a:ff:c3:1e:77:ef:28:a7:94:16:83:90:3d:
                    cf:0d:49:3f:91:0a:df:b6:83:80:1f:b8:c1:66:db:
                    1d:b9:fe:67:8c:b0:32:9f:d4:11:51:33:de:fe:74:
                    b3:c4:b6:4d:1b:e9:98:cb:eb:4f:57:9f:12:c2:ec:
                    c4:54:ea:49:81:62:a1:22:b7:58:4e:c1:97:81:40:
                    68:18:e8:da:0f:d3:64:f5:1c:8a:5c:0e:66:d7:4b:
                    48:70:18:bb:cf:7a:87:cc:b4:3e:1b:f1:6f:4a:5b:
                    55:62:6b:89:82:fc:f2:ac:c5:e3:e2:05:b7:f1:d6:
                    ad:95:24:d4:74:16:1c:54:0f:90:b2:57:86:16:4e:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A7:05:4F:BB:65:E9:A4:BC:17:53:58:FB:26:77:AA:FA:C7:6F:16
            X509v3 Authority Key Identifier:
                keyid:23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/I7eNd6BUSbF1YIPQPx_SNzphJaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/I7eNd6BUSbF1YIPQPx_SNzphJaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:3d:c5:96:61:7d:72:23:5c:09:5d:7d:49:ab:6f:90:b5:
         51:dd:f2:b7:87:f8:08:79:7f:ad:03:36:df:1b:20:28:3e:93:
         c8:14:c0:cf:b8:be:37:2c:9c:b8:c5:d0:0f:d3:42:31:28:7e:
         38:33:4d:8c:c7:14:4a:1b:12:80:62:18:5a:d4:ae:7a:6d:74:
         a9:c7:ca:fb:a4:b1:45:e3:f5:85:5c:9c:35:8d:df:b1:27:66:
         52:41:9d:c9:50:61:82:76:c6:b0:b6:8b:28:3f:e1:e2:3f:b7:
         70:ba:57:0b:f2:da:6d:a5:80:c7:ba:40:b0:35:19:b0:df:e2:
         59:92:96:58:dc:19:69:90:4d:cf:01:38:d5:0e:dd:b4:66:4e:
         8e:b0:b9:da:b5:3a:42:4b:f1:54:4f:a6:2a:ca:e0:21:01:9d:
         4a:6d:e2:44:18:76:58:42:58:d7:2a:2c:e1:93:99:5c:ff:8a:
         a0:b8:f1:75:ff:e6:61:c4:99:d1:c1:9f:b7:d3:8d:cb:40:8a:
         a6:86:6b:52:2c:20:a3:36:4e:e0:f1:5f:8a:cb:ee:bd:fd:92:
         08:8a:71:39:08:50:9b:f3:12:1b:68:68:10:4c:a8:57:ad:dc:
         51:9f:a0:bb:64:a3:ac:d1:29:a5:6a:88:28:00:19:25:fc:27:
         51:f7:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----