Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.mft
File:                     gzGjYb3FHXqsrc4wLxJX1cPzWuE.mft (raw, json)
Hash identifier:          T8/jTk/LaKVt3gymizTIAbCuYzFje1EQ4+Siqi6pYSU=
Subject key identifier:   1D:17:C1:C5:4C:15:60:11:BB:7A:B5:F8:0D:0D:81:22:4B:03:FF:6A
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Certificate issuer:       /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial:       018A2A6E8CFF3EE146C4E1EF1A4ED5167284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.mft
Manifest number:          08B3
Signing time:             Fri 25 Aug 2023 02:03:22 +0000
Manifest this update:     Fri 25 Aug 2023 02:03:22 +0000
Manifest next update:     Sat 26 Aug 2023 02:03:22 +0000
Files and hashes:         1: 5RHR4zhI7Lh6UskSoupIdLiT6uY.roa (hash: LhKGLgI6k0VwRCStke21s331Qq2ZzZxgvJPlT2x0zwQ=)
                          2: HDNRSdVahLmL1Sup5ZKqNL54zIs.roa (hash: txoM4c6KVqpVa64xpwBXiGwHcuKDnZaSSfvN5cxsaS0=)
                          3: HL3YkBySQRFxCg6kEp1SOqt9H_Y.roa (hash: YDuhCsM+i95CkXX54koH48F7JztrL4fLLFg6fQwqnbI=)
                          4: VWrPOrM8Fkr8xlRJ4DNfRNYD-CA.roa (hash: nor+a0IvBnV1JWoF5VovQn4dIVDpAWqZt4zl+cG19s8=)
                          5: gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl (hash: YoxKSpE3lyxC4v9wSRVZspiQLSwEwVlfa/U6agcttwc=)
                          6: h86n1pYaEYsiSiV5mwtw_GL3eJY.roa (hash: miE16oza4eGQS2Kd3B2Q4i17oufTu0HX3hsb/iA/TSo=)
                          7: pg989wQ9qkj2qLicmD8CJnwBMOA.roa (hash: wrVoA5j8PfS8+GFvOZq8Z/C0I6w+XHIy56op7A0qQgg=)
                          8: u4jLKVN1j9lu181nl9Z30gbGnYk.roa (hash: u8yQ+kOwbPZFaFowYXuTVM8rrdMcbArNiJV6DZWXpjc=)
                          9: xNepidC8uACX32kWa_VL3tbDEeo.roa (hash: y5CaszoHPg0zyBMJzeb0d+4m77F/p1UwRMz8jfe+AvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2a:6e:8c:ff:3e:e1:46:c4:e1:ef:1a:4e:d5:16:72:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
        Validity
            Not Before: Aug 25 02:03:22 2023 GMT
            Not After : Aug 26 02:03:22 2023 GMT
        Subject: CN=1d17c1c54c156011bb7ab5f80d0d81224b03ff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:31:21:8d:39:a0:23:a0:3c:eb:28:0d:14:
                    92:8c:0f:7f:24:a6:65:06:f8:33:b0:7a:fa:20:9c:
                    fc:15:e8:89:5a:dd:7a:f4:79:9c:b8:d4:0e:2c:05:
                    94:c7:0a:80:75:d3:52:f9:a7:b5:92:39:c7:79:36:
                    13:60:11:58:f0:64:24:9e:71:b4:c3:69:97:ba:cf:
                    59:68:80:3b:ac:5e:a8:83:96:3d:d6:46:cf:77:55:
                    0c:b6:bc:81:5f:8f:86:c0:85:0f:54:a7:76:77:95:
                    e5:47:cc:de:02:f3:9a:b7:91:26:c7:4e:ea:c6:72:
                    92:14:0e:44:74:5c:20:e7:58:57:d9:64:13:c3:d4:
                    d8:0c:bf:36:52:9d:02:a3:1a:0c:a1:12:e0:af:f9:
                    a8:d6:1f:16:66:a8:1f:ca:69:75:4e:9e:14:53:6d:
                    9a:5e:a5:9d:fc:0c:85:32:db:29:5d:f5:53:e2:43:
                    e7:65:86:a3:b8:5a:0b:f6:14:87:26:18:60:e7:84:
                    b3:b0:e5:d2:f8:6b:e7:bc:59:84:d2:7c:76:22:57:
                    ba:f8:e3:07:7b:e0:53:a9:92:a8:7f:8c:f4:82:51:
                    0d:44:4e:bd:08:da:40:44:8a:02:2b:72:8d:e9:2a:
                    55:a2:53:a1:d2:83:7b:0b:a2:f1:92:b6:86:1f:6c:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:17:C1:C5:4C:15:60:11:BB:7A:B5:F8:0D:0D:81:22:4B:03:FF:6A
            X509v3 Authority Key Identifier:
                keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:f2:1f:1a:6d:71:7e:89:f2:59:54:a5:46:b2:de:da:e8:
         e9:7a:ab:c7:a9:f2:75:af:fc:a2:53:61:e4:2a:ae:ba:21:6a:
         54:61:46:a3:48:94:0c:6d:0e:5e:e7:48:00:cd:ac:b0:42:cb:
         99:9d:de:80:c7:2d:49:d0:02:57:08:8a:12:58:4c:64:53:d3:
         08:27:c6:8d:51:7a:31:c9:d5:58:7a:2a:0f:bc:06:3f:59:9e:
         43:80:16:09:63:53:a5:f7:0d:ab:44:d5:11:45:8e:4d:cb:5e:
         f1:3d:c5:9f:31:cc:f5:27:f3:2a:8d:c7:c1:47:55:b4:e0:42:
         4c:9f:be:db:eb:b7:59:35:67:f0:ba:06:44:f3:53:0d:64:17:
         59:19:f5:31:96:c1:1a:ed:89:a1:9d:bf:13:b8:51:13:83:51:
         a0:45:fc:b4:4a:80:49:15:b5:7f:64:e8:28:a1:94:7a:a3:ed:
         fb:a5:84:b7:01:52:51:db:a7:2f:e6:c4:0a:84:75:77:b6:3f:
         8e:45:60:cb:0b:c8:9a:4f:d1:3f:59:cf:c0:a4:4c:26:a1:65:
         43:bc:60:c6:09:7d:63:3b:ec:7e:e2:79:21:e0:67:80:c7:15:
         35:e4:83:00:20:72:3a:25:c2:55:c0:d6:f6:f5:3f:9e:d7:d2:
         08:ed:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----