Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.mft
File:                     ZBfK6V1xFCEKss1HUyi8hwQn5es.mft (raw, json)
Hash identifier:          oiNCCSDddQZa0LvlKmMtysKF2gX73RlaT275d8noDGA=
Subject key identifier:   6D:19:69:92:9E:9C:87:62:E9:FE:06:02:F0:2F:F7:17:5C:E6:9F:F3
Authority key identifier: 64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
Certificate issuer:       /CN=6417cae95d7114210ab2cd475328bc870427e5eb
Certificate serial:       018BDA5DA84745BFA8D6143CF6C67853E668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.mft
Manifest number:          086D
Signing time:             Thu 16 Nov 2023 23:00:52 +0000
Manifest this update:     Thu 16 Nov 2023 23:00:52 +0000
Manifest next update:     Fri 17 Nov 2023 23:00:52 +0000
Files and hashes:         1: YIGh09OMpYvydD5qcHMX637PpGY.roa (hash: JG7sRNrRaUy653jGTpVMvdz6BF72UH+832lT4S4UxVE=)
                          2: ZBfK6V1xFCEKss1HUyi8hwQn5es.crl (hash: ifOpTkRZvgHRVMXcEYCw4wEpmTTRq50H8XgazYRX0ow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:da:5d:a8:47:45:bf:a8:d6:14:3c:f6:c6:78:53:e6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6417cae95d7114210ab2cd475328bc870427e5eb
        Validity
            Not Before: Nov 16 23:00:52 2023 GMT
            Not After : Nov 17 23:00:52 2023 GMT
        Subject: CN=6d1969929e9c8762e9fe0602f02ff7175ce69ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:18:fb:99:3c:10:85:7b:f6:b3:ee:64:67:
                    1c:10:bd:2c:da:b1:8b:32:e9:83:09:cd:1d:8c:38:
                    3c:3d:76:d1:29:5a:31:c8:dd:f0:4b:40:33:ae:54:
                    7e:db:37:3a:fb:45:25:45:93:b5:38:aa:71:eb:b7:
                    82:60:cb:ad:52:ef:45:10:dd:3b:73:80:a7:23:07:
                    ac:7f:6b:36:aa:c7:68:13:2b:61:db:7b:6d:06:90:
                    a7:26:3d:25:40:c3:fc:0f:1c:28:fe:89:32:1a:e5:
                    8a:26:81:1f:e1:c7:e1:38:0a:cd:20:e6:39:1b:08:
                    2c:8a:8d:61:95:8c:06:43:87:e6:0c:9f:bd:3f:30:
                    74:06:15:cc:45:29:41:b0:9e:93:ba:ea:d9:63:36:
                    db:14:52:dd:8a:b1:d1:83:f4:de:d2:94:d4:90:3d:
                    42:7b:58:99:9d:6c:06:aa:f7:27:8a:75:7b:c7:6d:
                    93:65:5d:d9:c7:64:78:19:9f:6c:a7:6b:b9:95:7a:
                    68:88:bc:4a:c8:52:6d:f7:9e:b6:4d:89:87:37:71:
                    52:b1:d3:ff:9a:87:10:97:ee:f2:9d:65:66:e3:ac:
                    ca:9c:1c:80:0f:d9:ba:b0:d2:12:09:b7:62:59:0d:
                    1b:79:59:07:67:52:e7:5b:4d:26:d8:a0:62:1d:ef:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:69:92:9E:9C:87:62:E9:FE:06:02:F0:2F:F7:17:5C:E6:9F:F3
            X509v3 Authority Key Identifier:
                keyid:64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e0:f2:bd:c0:e6:19:7a:95:59:ec:06:a4:c3:c5:42:60:ac:
         12:ca:f4:84:4a:00:21:df:df:5e:99:91:75:f6:cd:ba:92:74:
         8b:64:ae:da:77:c9:94:60:ff:e9:87:94:a5:c4:1b:f0:83:2e:
         8b:b0:ea:98:70:e9:54:08:46:16:06:14:90:47:ca:b3:18:36:
         f2:bd:09:67:0b:9e:ce:70:23:5f:f8:6d:6b:2d:d3:a6:dc:6c:
         93:b6:8e:3d:6b:e0:92:4c:29:4c:c0:2c:36:90:a8:36:f0:ff:
         3e:50:87:0c:a8:1c:fb:16:24:4b:8e:38:c3:8b:d3:f0:bd:38:
         61:1d:16:69:c5:66:3c:20:b9:69:b3:a5:78:36:55:83:4c:2e:
         d1:d8:7b:20:ca:7f:c2:50:5d:3c:6c:d1:da:c5:9d:7f:df:f4:
         58:f8:e0:cf:7d:7a:2c:26:36:be:b5:d8:3d:3c:dd:f8:18:d1:
         b8:61:13:78:10:05:1a:b2:c6:62:4a:5e:cc:c7:d4:65:79:78:
         32:ec:a8:4d:12:50:5f:77:0d:29:20:13:a9:a8:82:8a:c2:53:
         3f:f3:a7:a5:18:f1:68:21:57:63:6d:fc:7c:20:c2:74:bc:c5:
         2d:38:ee:7b:4a:58:e8:2b:dc:31:53:ab:1a:1e:e6:90:59:98:
         e8:06:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----