Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/IlgsR7AeBtiDaUhB48mAOCxVlAY.mft
File:                     IlgsR7AeBtiDaUhB48mAOCxVlAY.mft (raw, json)
Hash identifier:          Uknrb91HVkfc671A7JFFnJiKWEuH2R+fXJpyqzyFfp4=
Subject key identifier:   0D:77:59:5A:C3:96:F7:B3:E4:76:37:31:F9:A1:44:5C:A8:7F:B2:F1
Authority key identifier: 22:58:2C:47:B0:1E:06:D8:83:69:48:41:E3:C9:80:38:2C:55:94:06
Certificate issuer:       /CN=22582c47b01e06d883694841e3c980382c559406
Certificate serial:       018BC66944252C824F3A508ED928C07A11B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlgsR7AeBtiDaUhB48mAOCxVlAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/IlgsR7AeBtiDaUhB48mAOCxVlAY.mft
Manifest number:          086A
Signing time:             Mon 13 Nov 2023 02:01:09 +0000
Manifest this update:     Mon 13 Nov 2023 02:01:09 +0000
Manifest next update:     Tue 14 Nov 2023 02:01:09 +0000
Files and hashes:         1: IlgsR7AeBtiDaUhB48mAOCxVlAY.crl (hash: szh+QKxgEgVXaHJ3eQjSWqmZ0qJcAv8RJGQMo9JPDaQ=)
                          2: tuJF-PpIu6CxVU8WFZs8TpJSvII.roa (hash: UZZP6WphwtR5BeLDqn3uihaPyufR1Ewcd6I6IsxW9MU=)
                          3: wIAVtxUkCY58z0X6zGPhTg33ITg.roa (hash: SPuQLJbWr9YToCmD8o2PKKxKYwS8Zwsjvkd9JKfYsFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c6:69:44:25:2c:82:4f:3a:50:8e:d9:28:c0:7a:11:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22582c47b01e06d883694841e3c980382c559406
        Validity
            Not Before: Nov 13 02:01:09 2023 GMT
            Not After : Nov 14 02:01:09 2023 GMT
        Subject: CN=0d77595ac396f7b3e4763731f9a1445ca87fb2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:d7:03:4e:7c:91:4a:14:de:eb:ab:fc:a8:
                    01:12:25:71:5e:d5:88:4b:44:27:15:24:9b:5a:85:
                    5b:59:fc:ed:19:04:71:da:bd:3f:18:4a:95:3e:6e:
                    99:26:a3:f2:5a:8b:e1:3f:1d:db:a8:91:ec:90:87:
                    fb:50:e5:7f:41:67:10:71:55:a2:0e:a7:4b:f7:a5:
                    c7:cf:af:cb:e1:fb:3b:65:27:58:e7:f9:f5:e2:22:
                    da:de:cb:a4:70:12:f1:37:b9:ee:66:e8:8f:e2:7f:
                    d0:ec:e3:f2:a0:25:a0:bf:06:73:76:36:89:ef:74:
                    c7:b2:a5:72:12:d2:8c:6f:38:13:dc:be:80:a1:44:
                    2a:81:1c:4b:11:9e:bc:3a:40:c8:b9:56:f8:e8:f2:
                    cf:ba:49:f9:35:67:14:da:ca:76:0d:16:65:b4:ab:
                    45:3f:3d:5c:18:ad:7c:c0:35:f4:15:7c:a3:c8:40:
                    6a:63:d3:bf:36:6b:65:c3:7a:40:fb:36:ff:de:44:
                    43:45:46:12:f5:95:eb:01:c9:5f:62:3e:62:a0:8c:
                    e0:74:ef:91:0d:c3:af:ee:45:8f:50:3d:5e:11:79:
                    79:02:10:65:59:72:e0:d3:35:8c:14:ff:1e:e1:6d:
                    b2:b7:3d:f5:04:34:ea:c9:d5:a6:a4:14:fd:85:76:
                    66:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:77:59:5A:C3:96:F7:B3:E4:76:37:31:F9:A1:44:5C:A8:7F:B2:F1
            X509v3 Authority Key Identifier:
                keyid:22:58:2C:47:B0:1E:06:D8:83:69:48:41:E3:C9:80:38:2C:55:94:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlgsR7AeBtiDaUhB48mAOCxVlAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/IlgsR7AeBtiDaUhB48mAOCxVlAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/IlgsR7AeBtiDaUhB48mAOCxVlAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:d0:86:bd:c0:63:dd:87:2d:00:aa:9d:c5:c1:36:39:60:
         de:52:3e:7f:17:a0:a0:17:91:37:87:e6:38:04:5e:f9:b2:3b:
         66:f1:83:42:09:dc:a1:6d:bc:0d:e2:be:ea:ac:99:1a:b7:45:
         16:51:46:98:5b:37:25:44:0e:b5:97:b6:73:ef:7d:b8:7c:5a:
         9f:b8:9f:e8:e2:fa:9c:5c:b2:ce:9e:34:3a:99:e5:10:5e:9a:
         54:5e:8b:28:5e:06:a9:42:e4:79:58:5a:9a:eb:cb:35:f8:dc:
         52:61:0e:0d:2f:90:06:8b:0c:e5:b3:75:c6:c2:a7:f7:f6:62:
         9c:21:1f:da:b6:29:18:cd:87:1d:36:14:e3:35:cd:91:61:89:
         9e:1a:f3:b5:09:31:c3:e3:67:7b:3c:63:1b:15:db:c0:74:7d:
         af:1e:cc:16:33:7a:e3:9f:9a:34:a1:3c:2e:ad:3f:0b:5d:ce:
         3b:d5:c4:8e:1c:1d:05:4b:46:df:ee:b0:83:8b:74:de:1a:0f:
         26:36:a6:1a:f5:8d:23:02:e5:bf:3e:0e:f6:90:d9:14:8d:48:
         41:dd:1b:69:c1:82:33:2a:8a:f4:fd:e5:d8:10:64:74:41:ed:
         91:92:66:d1:4c:96:98:6c:e8:2c:00:cf:12:8c:d9:05:3e:b3:
         c9:32:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----