Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.mft
File:                     DQHbVCMXQwQUdXqssJP9cgaRkrE.mft (raw, json)
Hash identifier:          86zvexrAe+WRY+Khr4QGAQjtezIMbaHLdOt6h733KGA=
Subject key identifier:   C0:B0:73:BA:C7:D4:10:9E:84:75:E8:0D:14:D8:EB:32:57:B7:5B:F1
Authority key identifier: 0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
Certificate issuer:       /CN=0d01db542317430414757aacb093fd72069192b1
Certificate serial:       018A656EE0ED947C9A7211A47800F8D05A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.mft
Manifest number:          0ECF
Signing time:             Tue 05 Sep 2023 13:01:19 +0000
Manifest this update:     Tue 05 Sep 2023 13:01:19 +0000
Manifest next update:     Wed 06 Sep 2023 13:01:19 +0000
Files and hashes:         1: BHAbyjqTelfazn_qle35X7gnB50.roa (hash: ruIvtCV5sL4rX0a/K19Od3GoPUuLkfquJ2t6KgZxR5A=)
                          2: DQHbVCMXQwQUdXqssJP9cgaRkrE.crl (hash: XLryu2C13g0hIeISrfrfP5IjPm4NtUHD2uNH+nWkBKI=)
                          3: EBm0psiR9BtzvCTJA_pXmE4SC0E.roa (hash: jKz2d40qGgUMEycA9bp0pZJRgNy8cSMXTjSCNrKncJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:65:6e:e0:ed:94:7c:9a:72:11:a4:78:00:f8:d0:5a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d01db542317430414757aacb093fd72069192b1
        Validity
            Not Before: Sep  5 13:01:19 2023 GMT
            Not After : Sep  6 13:01:19 2023 GMT
        Subject: CN=c0b073bac7d4109e8475e80d14d8eb3257b75bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:d9:96:5b:1d:18:d6:fb:c2:31:f1:4d:8d:
                    1c:6f:36:33:f5:f8:ea:e8:a5:0a:f8:0e:b6:8b:d0:
                    e0:85:e4:23:a4:08:5c:ef:a1:21:28:3f:f8:86:02:
                    7c:40:27:05:75:8f:07:e4:7a:d3:40:a4:76:65:f8:
                    fd:2f:16:56:6d:2f:e5:f3:a6:57:49:62:13:db:13:
                    a4:26:17:c8:d3:01:29:e1:84:6a:37:7a:1b:a8:ce:
                    a4:1a:b7:2c:8f:a3:5b:bd:23:bb:f7:a1:24:14:09:
                    79:47:73:c3:e0:58:be:ad:b1:94:29:c0:21:50:2a:
                    f6:dd:91:12:e6:48:b0:30:ec:c7:e8:46:60:46:4d:
                    b3:5e:0b:37:07:0e:b2:e6:d1:43:3b:4e:dd:d8:b8:
                    23:4c:59:39:20:3a:3b:b3:36:24:73:ee:ee:03:47:
                    20:e2:48:dd:cb:c1:60:65:bb:58:4e:f7:5e:0b:5d:
                    2f:9b:d9:af:c1:c4:19:c5:df:2d:e8:b7:ac:16:4e:
                    13:80:7d:bd:9c:15:bf:9a:3e:e3:6b:b1:9e:79:3c:
                    30:97:b8:32:bf:5d:02:dd:77:ce:06:0a:43:00:d8:
                    92:8b:09:d7:13:63:a2:21:97:7c:de:08:0e:2a:2a:
                    32:2c:73:30:09:69:14:3e:eb:af:97:85:11:ad:d7:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:73:BA:C7:D4:10:9E:84:75:E8:0D:14:D8:EB:32:57:B7:5B:F1
            X509v3 Authority Key Identifier:
                keyid:0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:91:4a:d3:4e:13:1f:16:0c:60:59:d8:ef:9b:33:d5:ce:
         9d:61:f0:de:03:fd:36:e8:f0:c6:2f:19:d8:51:1b:af:e8:d3:
         bc:08:53:cc:cf:09:e9:11:1b:94:37:ce:71:bb:da:d2:1a:49:
         96:58:0d:8e:7c:1d:5c:fb:f8:dd:b8:97:ae:65:6e:e7:59:36:
         1a:3a:49:09:20:61:05:a6:a5:b6:02:90:f0:68:1b:d1:f3:4f:
         5e:a7:d2:f8:9a:d2:79:6e:d5:ce:50:a8:7f:a1:8a:01:51:72:
         eb:0e:e5:ca:07:a5:78:13:93:a6:0d:a9:ef:f9:91:40:09:c4:
         c0:1b:0a:c8:b8:5d:ce:6c:d5:e9:bb:1e:dd:15:c6:b5:3d:fc:
         8f:14:6e:63:08:f8:73:0c:90:87:e1:d3:e2:1d:49:34:bf:b6:
         9b:92:6f:be:e3:97:6f:7d:5e:93:2b:2e:94:33:46:e2:4a:d4:
         02:52:41:b1:7a:f1:e9:0c:de:bf:6f:f4:ba:00:a3:0c:7f:e9:
         df:ba:e9:77:62:e3:b4:8f:9a:2a:49:3d:dc:cb:af:0a:71:ee:
         cd:5b:8d:cd:23:95:22:82:e5:e9:7c:2a:63:f4:b3:8c:6f:f5:
         85:00:f2:8e:db:f9:ae:49:ca:3c:4b:c1:ec:03:aa:6a:1c:3c:
         2c:0d:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----