Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/jO9ibU3SHVh9YHE0zA8phHquJzI.mft
File:                     jO9ibU3SHVh9YHE0zA8phHquJzI.mft (raw, json)
Hash identifier:          eSdSyoqIEyjeaR+87RLzhH/wIut12r0E2tG3AFZQtZU=
Subject key identifier:   7D:33:2E:47:58:28:69:FB:2E:47:0C:5C:D3:86:A2:33:5B:05:10:12
Authority key identifier: 8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32
Certificate issuer:       /CN=8cef626d4dd21d587d607134cc0f29847aae2732
Certificate serial:       0189D484986D069E526A65EADDDF19E17791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/jO9ibU3SHVh9YHE0zA8phHquJzI.mft
Manifest number:          0812
Signing time:             Tue 08 Aug 2023 09:40:06 +0000
Manifest this update:     Tue 08 Aug 2023 09:40:06 +0000
Manifest next update:     Wed 09 Aug 2023 09:40:06 +0000
Files and hashes:         1: awVXZjww8kmPsC_IbxAIhq9o6B0.roa (hash: KNSPGNz0LJr9FbG37lwscYAH+uZQDj3bJRcKz54OCtY=)
                          2: jO9ibU3SHVh9YHE0zA8phHquJzI.crl (hash: azHkyrE684zMZHnU+DygszN8iRwA7aQqze3ceGsZDEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:84:98:6d:06:9e:52:6a:65:ea:dd:df:19:e1:77:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cef626d4dd21d587d607134cc0f29847aae2732
        Validity
            Not Before: Aug  8 09:40:06 2023 GMT
            Not After : Aug  9 09:40:06 2023 GMT
        Subject: CN=7d332e47582869fb2e470c5cd386a2335b051012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:7d:ec:f3:35:08:c4:d8:d7:fb:de:6b:db:
                    c0:94:40:cd:9d:33:f5:a9:74:81:0f:c2:36:8a:4d:
                    32:5d:56:6f:20:82:0e:7b:a5:78:50:36:62:63:ea:
                    7e:14:d7:5f:5a:f5:2e:bf:44:1d:e9:79:33:cc:f3:
                    35:fa:c6:11:e7:f1:17:03:72:a3:6c:4c:b1:8b:23:
                    48:23:a0:39:82:81:8b:fc:bc:c5:81:e6:ac:80:50:
                    88:10:e2:d2:15:e9:4b:8d:c2:75:25:e2:28:6f:b0:
                    7d:8d:0e:d7:86:be:7d:86:43:ea:d0:3d:92:19:6a:
                    bd:46:fa:f8:76:4e:fa:2b:9c:9d:9e:95:0b:ca:65:
                    b1:49:07:f4:99:c7:47:ae:38:27:aa:6c:ca:12:1c:
                    d6:4f:3b:ce:fb:3b:83:39:cd:5e:d3:82:d7:a2:09:
                    01:2f:21:36:03:34:bb:94:e3:ce:36:fb:d0:28:df:
                    e5:84:40:f2:d4:be:d3:5c:4c:98:94:58:a5:f0:96:
                    d4:c6:91:a2:1c:7f:2c:3f:ec:3c:47:8f:a0:e1:cd:
                    c3:e1:d8:fb:0f:45:56:b7:b4:69:52:fb:29:e2:4e:
                    a7:2e:3c:98:4c:0f:b5:fe:ea:ac:8a:cc:12:66:89:
                    f1:d9:db:4d:34:61:81:a0:e8:b3:9d:2d:19:0d:15:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:33:2E:47:58:28:69:FB:2E:47:0C:5C:D3:86:A2:33:5B:05:10:12
            X509v3 Authority Key Identifier:
                keyid:8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/jO9ibU3SHVh9YHE0zA8phHquJzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/jO9ibU3SHVh9YHE0zA8phHquJzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:33:43:59:ff:2a:ad:8a:b5:c2:b2:7c:af:e2:c6:79:9d:1e:
         08:8f:bf:f3:a1:47:eb:ef:63:57:8d:d1:03:23:0b:c0:95:fd:
         4c:ac:f5:49:44:7c:e3:01:c7:60:07:f8:86:df:ef:05:4c:f5:
         ad:5b:5d:d7:a5:e2:e2:c9:d9:01:5b:7e:22:67:80:aa:2b:94:
         b9:05:80:35:31:cc:2e:09:a3:4f:12:47:af:27:48:a5:62:44:
         79:a9:a3:74:09:51:0b:a1:2d:27:93:a8:1f:2f:11:5c:9d:64:
         22:02:15:97:e5:e5:0b:f4:a9:66:ab:20:c1:7b:4a:87:df:c1:
         9f:f8:34:4e:9c:94:fd:1b:83:1c:ae:06:05:ab:68:a9:17:61:
         70:20:a8:28:95:b2:c7:27:c9:0c:dd:54:fb:d8:10:6e:69:97:
         81:6f:08:76:0d:0d:b5:49:53:fa:8c:2d:da:fe:1f:d3:fd:54:
         1c:ff:ae:52:1a:4f:e2:6e:27:ac:df:de:55:fb:55:d2:fd:0e:
         2a:a6:ef:74:12:54:94:f8:af:be:5e:fa:64:32:c6:a0:71:be:
         07:48:07:c5:82:8a:10:91:0e:e4:4e:fd:14:c8:48:5f:97:26:
         13:7e:70:ef:f4:bb:51:94:00:fd:cb:51:a7:19:2a:ef:b0:fc:
         df:6b:e3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----