Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.mft
File:                     Cw03aKjvw7cGiAHLvunrVv5tABw.mft (raw, json)
Hash identifier:          ZsLYB/A/ssFOYW8+BdMC4XEZ1upkGwKoNStFmlXWcbs=
Subject key identifier:   23:6D:2D:AE:30:AB:C5:A5:5B:84:AC:22:B0:39:9E:D3:87:F1:C1:53
Authority key identifier: 0B:0D:37:68:A8:EF:C3:B7:06:88:01:CB:BE:E9:EB:56:FE:6D:00:1C
Certificate issuer:       /CN=0b0d3768a8efc3b7068801cbbee9eb56fe6d001c
Certificate serial:       018DC92E7E5C798306CD08C3C58FFAC2D6A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cw03aKjvw7cGiAHLvunrVv5tABw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.mft
Manifest number:          1093
Signing time:             Wed 21 Feb 2024 01:01:23 +0000
Manifest this update:     Wed 21 Feb 2024 01:01:23 +0000
Manifest next update:     Thu 22 Feb 2024 01:01:23 +0000
Files and hashes:         1: Cw03aKjvw7cGiAHLvunrVv5tABw.crl (hash: uXe9IdrRK7qvR8YPyrrHzTPfZb3JGg1upUVfoIueEws=)
                          2: Tat0ZOdbooLBdr87Y0GGk826cSU.roa (hash: jiWbQ33XEWT+EtoWgcQI0ZFp5rreKry70YdxyrMRCIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c9:2e:7e:5c:79:83:06:cd:08:c3:c5:8f:fa:c2:d6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b0d3768a8efc3b7068801cbbee9eb56fe6d001c
        Validity
            Not Before: Feb 21 01:01:23 2024 GMT
            Not After : Feb 22 01:01:23 2024 GMT
        Subject: CN=236d2dae30abc5a55b84ac22b0399ed387f1c153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:15:ff:61:38:f5:af:f6:a5:df:bf:5c:30:9e:
                    98:b1:49:e8:0a:b9:fb:07:cb:bc:21:99:20:14:bb:
                    1f:66:b4:dd:48:62:5a:4f:bb:ce:58:6e:8b:7f:ec:
                    b1:02:a6:d2:c1:d8:9f:9e:2b:a2:33:20:e0:fc:57:
                    52:09:64:80:74:f7:5c:56:a6:6f:61:1c:b6:19:a4:
                    5c:30:3c:af:9a:ba:7b:dd:20:a9:57:1b:94:aa:75:
                    9d:39:3e:96:7d:58:93:d4:08:69:78:d8:d8:b8:79:
                    ed:36:43:d1:52:25:69:97:95:56:9c:12:a5:1a:15:
                    83:05:d3:0c:b5:06:dc:a6:67:71:87:60:2a:5c:01:
                    a9:6e:4f:e0:4c:bb:06:31:b2:60:02:20:d9:25:1e:
                    93:a5:96:b6:36:cc:76:7c:62:99:36:70:8b:01:ce:
                    58:14:e0:a6:80:47:0f:6f:d1:bd:76:f1:93:ad:f9:
                    59:2d:b7:e3:ae:7e:df:8e:23:6d:2b:cf:85:3e:f5:
                    3b:78:d5:d3:07:06:d0:6b:f9:ed:8c:b1:8b:0f:a1:
                    52:06:fe:f1:b5:9e:8d:27:f8:b8:75:f6:ec:d9:e4:
                    d4:35:4e:07:7f:8f:a6:04:46:3a:4e:ad:ba:5f:4b:
                    28:f0:24:82:61:5d:b8:71:6a:e8:e9:28:6a:6c:67:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6D:2D:AE:30:AB:C5:A5:5B:84:AC:22:B0:39:9E:D3:87:F1:C1:53
            X509v3 Authority Key Identifier:
                keyid:0B:0D:37:68:A8:EF:C3:B7:06:88:01:CB:BE:E9:EB:56:FE:6D:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cw03aKjvw7cGiAHLvunrVv5tABw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:37:9a:58:9a:91:16:b7:ca:2a:51:d1:36:48:fc:bf:39:27:
         9c:d3:89:df:49:d3:72:c8:1f:36:62:17:3e:98:17:ea:3f:30:
         6c:1b:86:29:e7:28:f8:0a:c0:bd:8c:bb:fe:e0:df:d2:bc:ce:
         29:66:fd:9e:b4:ff:ea:f9:c5:a6:46:81:7a:70:63:39:35:a7:
         ab:b0:03:74:14:24:d5:8f:2a:33:b9:b7:cd:76:63:fa:8e:d0:
         38:82:1d:1c:01:8e:1b:84:1c:a9:5c:73:09:22:31:11:ea:11:
         a9:4e:08:4b:28:fa:11:49:c2:f9:4d:a4:2b:df:01:8e:5b:eb:
         02:8c:ef:8c:66:ef:6d:fa:73:5a:1d:e8:e7:c1:ce:c6:b8:84:
         42:bb:be:44:8f:85:5c:cf:92:f8:be:99:99:30:4e:61:6b:d6:
         64:d7:61:29:d8:dd:1a:c9:fa:8a:e1:1a:e5:54:f2:2c:14:86:
         16:14:6b:e9:09:c3:c8:50:b1:03:84:70:a8:e3:59:ce:b0:2e:
         f2:68:1f:68:3e:da:35:f6:b1:24:ba:ef:d6:d0:b7:df:2b:ed:
         6c:8b:2c:ac:c3:66:3b:84:69:b6:5f:d9:b6:13:0d:37:36:5d:
         f5:42:79:68:f7:b0:40:84:12:e8:e3:45:8e:82:53:e2:c6:bc:
         e6:d6:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----