Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/84iCNFNbUuyHVUS2b6qjI-6Iwt0.mft
File:                     84iCNFNbUuyHVUS2b6qjI-6Iwt0.mft (raw, json)
Hash identifier:          uFoxSZ1VqdXgRcXGlXAodnOv3NG+9PjyWeX8G3x2zpM=
Subject key identifier:   89:74:E7:26:10:D1:45:D1:D2:5E:93:AC:AE:1D:96:12:E5:9A:E3:0F
Authority key identifier: F3:88:82:34:53:5B:52:EC:87:55:44:B6:6F:AA:A3:23:EE:88:C2:DD
Certificate issuer:       /CN=f3888234535b52ec875544b66faaa323ee88c2dd
Certificate serial:       018ACBFFE8FBB9D86B6BC06A5434AEABDE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84iCNFNbUuyHVUS2b6qjI-6Iwt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/84iCNFNbUuyHVUS2b6qjI-6Iwt0.mft
Manifest number:          0BFE
Signing time:             Mon 25 Sep 2023 11:01:00 +0000
Manifest this update:     Mon 25 Sep 2023 11:01:00 +0000
Manifest next update:     Tue 26 Sep 2023 11:01:00 +0000
Files and hashes:         1: 84iCNFNbUuyHVUS2b6qjI-6Iwt0.crl (hash: 6vmCi6CQaNE4tJHu50k1CkZDbeyXrRgm7tF6QsVmlvU=)
                          2: j04KVjlWML1iH4WqSkMhWoGBHy0.roa (hash: m+FXGK1IqQRR+8BZayJ1zJhmcC850wUfhWeewwzswY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cb:ff:e8:fb:b9:d8:6b:6b:c0:6a:54:34:ae:ab:de:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3888234535b52ec875544b66faaa323ee88c2dd
        Validity
            Not Before: Sep 25 11:01:00 2023 GMT
            Not After : Sep 26 11:01:00 2023 GMT
        Subject: CN=8974e72610d145d1d25e93acae1d9612e59ae30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:26:6f:c6:26:a8:4d:82:4d:7c:26:cb:0c:
                    e9:c2:c7:33:a4:57:a2:55:a0:c0:69:61:17:79:64:
                    53:bb:8c:60:e1:2c:d7:ed:2d:c8:be:61:30:d8:a0:
                    2f:25:72:e3:02:88:6d:94:a8:ad:98:71:15:25:7a:
                    1f:cb:49:a8:ab:95:05:51:69:79:58:ae:8b:96:11:
                    4f:b4:64:ec:5f:e5:8f:b6:67:f9:25:52:26:57:e1:
                    d8:20:1d:b6:ea:5e:c3:12:9f:10:e5:10:e2:2c:07:
                    86:b4:c2:1b:29:34:e1:54:e4:64:21:8f:89:b7:4a:
                    b7:92:f4:5f:7c:fa:b2:e1:5b:ab:53:95:bb:6b:07:
                    c7:c2:46:c4:3c:1f:79:85:04:16:10:d2:01:38:5b:
                    b8:cb:cf:f7:03:57:28:f9:b5:9d:b0:c2:d5:04:fb:
                    c4:ec:ed:43:4f:b8:0f:7f:0f:3a:f1:7b:dc:b3:d0:
                    df:80:8f:fb:d6:ed:19:f7:1d:f8:7e:df:68:4b:a4:
                    a4:52:b9:f4:00:06:81:7b:ed:d2:03:53:58:34:98:
                    91:a6:78:3e:83:9f:eb:38:81:e5:53:71:61:32:ae:
                    7b:a2:7a:75:56:b7:0d:f6:9c:ac:ef:90:5e:89:25:
                    00:df:92:33:c5:43:98:8d:79:58:06:84:d1:ca:f7:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:74:E7:26:10:D1:45:D1:D2:5E:93:AC:AE:1D:96:12:E5:9A:E3:0F
            X509v3 Authority Key Identifier:
                keyid:F3:88:82:34:53:5B:52:EC:87:55:44:B6:6F:AA:A3:23:EE:88:C2:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84iCNFNbUuyHVUS2b6qjI-6Iwt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/84iCNFNbUuyHVUS2b6qjI-6Iwt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/84iCNFNbUuyHVUS2b6qjI-6Iwt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bf:56:41:bb:7f:71:06:29:c1:36:79:87:22:0c:94:75:5e:
         49:05:b8:d1:08:d0:5e:d7:be:db:c7:e0:a4:e8:f5:15:07:25:
         ae:7e:65:0a:c5:d1:87:81:a3:92:bd:60:30:33:9e:35:25:85:
         8f:d3:a6:6c:c6:c1:ff:39:1a:15:40:55:55:2b:17:0b:2f:fd:
         07:e6:95:4d:b5:b3:89:99:df:a5:b4:bb:8e:d4:77:79:92:4b:
         73:95:30:3d:f4:76:78:1f:4f:d7:a1:7b:84:12:21:2c:91:a8:
         d2:d2:e1:60:e7:96:2d:8b:a9:0a:cb:52:6c:b7:b5:92:f9:04:
         b3:25:f2:22:d9:f5:d4:f5:32:4c:ac:f9:3d:a7:82:3c:a7:e4:
         4c:8f:5e:3d:b6:cc:29:06:45:5c:09:06:fd:57:21:56:d0:e1:
         84:80:46:37:92:dc:65:8c:37:7f:6f:3b:7a:b8:0b:c9:6a:a2:
         8e:e2:68:d9:8b:7b:97:d2:06:33:b8:bf:2b:61:61:54:9b:c9:
         a0:d1:13:08:2d:53:f1:16:c4:30:e1:2e:41:29:eb:2e:19:23:
         b2:42:00:f4:6c:d1:1a:e8:d8:f9:c6:75:05:a8:31:17:a5:d9:
         e1:1a:24:3f:2e:36:53:38:23:e7:4f:75:57:35:a6:06:1b:d4:
         38:44:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----