Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.mft
File:                     B-Ao92x5plHfcKmT896wUtWQT3s.mft (raw, json)
Hash identifier:          Kf/HSHkQXTdHRWCvqVmRlfnhXExfWtPyA65EZ/HeNZY=
Subject key identifier:   86:8A:58:DC:48:83:20:50:32:8C:0E:20:A5:BB:18:54:06:8F:45:45
Authority key identifier: 07:E0:28:F7:6C:79:A6:51:DF:70:A9:93:F3:DE:B0:52:D5:90:4F:7B
Certificate issuer:       /CN=07e028f76c79a651df70a993f3deb052d5904f7b
Certificate serial:       018C8BD24BCEE7BB7A4BCC76AD0511F0A339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-Ao92x5plHfcKmT896wUtWQT3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.mft
Manifest number:          03C8
Signing time:             Thu 21 Dec 2023 10:01:04 +0000
Manifest this update:     Thu 21 Dec 2023 10:01:04 +0000
Manifest next update:     Fri 22 Dec 2023 10:01:04 +0000
Files and hashes:         1: B-Ao92x5plHfcKmT896wUtWQT3s.crl (hash: 0Cp0iAlhwMY3GeUJJJ38dIz5lLYhm261cIvuhiBi/1o=)
                          2: H7vhfZtFhJBGVdDeGTsZAEOBNxI.roa (hash: f9KLSjwW9gwFPffwMN1zAF2mJUozKDoBW/6UJhFzBDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:d2:4b:ce:e7:bb:7a:4b:cc:76:ad:05:11:f0:a3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e028f76c79a651df70a993f3deb052d5904f7b
        Validity
            Not Before: Dec 21 10:01:04 2023 GMT
            Not After : Dec 22 10:01:04 2023 GMT
        Subject: CN=868a58dc48832050328c0e20a5bb1854068f4545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f1:b3:e5:0a:45:46:52:19:e2:b3:7c:cf:e8:
                    a1:20:3b:48:51:2a:cc:76:d4:28:dd:d6:fb:f4:3a:
                    bf:80:ad:86:1a:b1:83:99:86:22:cd:7d:b0:32:3e:
                    b5:40:30:1e:e3:ca:c6:62:51:ad:36:14:67:49:90:
                    d4:60:4d:8a:43:3b:ed:28:e7:80:b8:d9:39:92:62:
                    29:ba:52:6d:1b:20:f0:8c:89:4d:4c:bd:8e:f0:df:
                    3e:f6:8a:a8:5a:e1:07:51:10:04:c1:fe:3d:ad:26:
                    ad:40:59:7e:59:8c:17:4e:6b:b2:1a:e3:44:46:ba:
                    08:f5:08:b2:1a:20:78:7d:bb:79:f0:ea:00:e0:ea:
                    a9:ee:cb:c7:1d:a3:ea:45:28:56:f9:f8:de:b0:6d:
                    24:d9:b5:85:13:20:04:5e:55:70:92:ea:dd:eb:0b:
                    93:6e:2d:68:5b:b1:f9:ac:34:ce:04:d7:b4:35:33:
                    40:4d:de:c3:8e:81:22:d4:5a:73:79:3b:52:c1:0b:
                    7d:a2:64:58:4d:f0:73:c6:37:68:3d:7e:0b:88:28:
                    3c:34:52:3c:b7:19:db:96:74:e9:a9:0e:f2:73:00:
                    42:da:6d:71:ef:3c:e0:33:30:c6:94:80:9d:4f:99:
                    19:e7:c6:04:d3:5f:4d:bb:b8:9c:9a:38:70:1f:98:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:58:DC:48:83:20:50:32:8C:0E:20:A5:BB:18:54:06:8F:45:45
            X509v3 Authority Key Identifier:
                keyid:07:E0:28:F7:6C:79:A6:51:DF:70:A9:93:F3:DE:B0:52:D5:90:4F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-Ao92x5plHfcKmT896wUtWQT3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:0c:28:f2:fc:7d:9f:1c:c4:f5:37:8d:dd:c0:7d:18:f0:09:
         7b:54:40:9c:72:22:64:10:c4:d7:7d:98:6d:d9:1a:0c:ce:81:
         28:c6:b2:05:5e:46:98:5b:28:e1:13:5d:3f:47:78:9d:70:f8:
         55:ba:e5:01:49:b5:73:ba:1a:9f:2d:b3:8d:15:66:16:84:4d:
         bb:0c:04:ed:45:90:9a:db:b9:a4:af:09:9b:10:d4:6d:b6:aa:
         4a:fe:3d:4c:f7:a5:eb:70:e5:46:7d:24:d5:af:55:e6:fe:b4:
         fe:60:76:70:6d:49:95:29:a9:14:3c:7d:18:8b:66:d4:11:0d:
         b2:73:10:79:06:fd:20:6c:ea:4a:9b:88:82:14:62:f5:e3:6a:
         17:d8:9a:ae:34:52:bc:e8:d0:85:b3:b6:71:e7:2f:8d:a1:e3:
         b6:35:db:98:ba:00:6c:77:a9:76:a8:9f:78:e6:f1:8d:21:9b:
         8a:88:8f:9f:15:a4:3b:4a:69:e7:71:73:89:d7:63:4d:d1:e5:
         2b:74:2b:e3:d6:9c:5c:9f:9d:32:e5:4e:48:9a:32:6c:19:be:
         24:63:f4:77:1a:91:ae:1f:db:fe:e7:0b:e5:ce:25:2e:ac:c8:
         f2:42:b2:80:fa:99:b5:13:9a:24:76:84:79:9e:8b:1d:13:a0:
         ac:aa:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----