Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.mft
File:                     1Scab5nqwSq-CFYQChSi2WY857s.mft (raw, json)
Hash identifier:          5mFBuliFk49HLp3pVZkJTq/aUaL5B8e9jpkNOIrRc/Y=
Subject key identifier:   08:10:75:83:4F:47:6D:70:C8:EA:8C:31:3F:1C:6A:8E:44:B4:FD:BD
Authority key identifier: D5:27:1A:6F:99:EA:C1:2A:BE:08:56:10:0A:14:A2:D9:66:3C:E7:BB
Certificate issuer:       /CN=d5271a6f99eac12abe0856100a14a2d9663ce7bb
Certificate serial:       018A3B4FF18CC631869C8A6F52FB02DD6A3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Scab5nqwSq-CFYQChSi2WY857s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.mft
Manifest number:          0EB9
Signing time:             Mon 28 Aug 2023 08:43:29 +0000
Manifest this update:     Mon 28 Aug 2023 08:43:29 +0000
Manifest next update:     Tue 29 Aug 2023 08:43:29 +0000
Files and hashes:         1: 1Scab5nqwSq-CFYQChSi2WY857s.crl (hash: VZZ45Y1pu5nTBg1isl77RfZDiUb3xyQhd9tGX+p/1Ik=)
                          2: 8khRhB5Y4SEth5FUQX7u6Vf9W5s.roa (hash: CP18D/HqwSM592lID+Mnngct87uvwmSKETlV/FGz9Nk=)
                          3: AZgUttUvgZ2j_QesiB6Nayrnk-c.roa (hash: 1vBFL2gSyo5QKyAsIih+GWXejNRfz43BFbb4wsWNM7g=)
                          4: o4GKTPQVyfNfezn8lpjRsLgZDYI.roa (hash: jUSbaXSci5g7RVauuMWevKQzbftBJXWLykmKU3/70rU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3b:4f:f1:8c:c6:31:86:9c:8a:6f:52:fb:02:dd:6a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5271a6f99eac12abe0856100a14a2d9663ce7bb
        Validity
            Not Before: Aug 28 08:43:29 2023 GMT
            Not After : Aug 29 08:43:29 2023 GMT
        Subject: CN=081075834f476d70c8ea8c313f1c6a8e44b4fdbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:0d:b7:fc:5c:b4:b3:a0:f3:d7:83:aa:34:
                    10:5c:58:47:08:fb:2c:6b:5a:dc:40:53:71:d7:bc:
                    1c:a4:2e:a0:20:b5:2d:bc:e7:dc:c5:f5:04:9c:25:
                    40:7e:1b:c0:f2:df:e0:9c:49:75:8f:de:74:56:e7:
                    1a:7a:a0:60:af:64:2d:c0:46:0e:bd:b8:61:d7:fb:
                    d8:f0:e4:d3:16:ee:4c:60:6b:dd:16:2b:cb:29:29:
                    b6:c7:f9:08:c6:84:a0:8c:67:66:61:6a:f2:8f:62:
                    a4:6f:54:8f:ac:1b:04:74:49:b5:f6:36:94:db:34:
                    e2:af:b9:4d:fb:3c:0b:af:99:81:45:1e:a9:db:06:
                    59:a1:26:58:aa:75:75:ab:1e:a8:e9:97:ec:3f:23:
                    6c:55:62:79:43:62:3e:3f:2b:68:fb:69:27:b4:62:
                    c5:3b:9b:15:2d:87:ce:f9:4f:cc:3d:ab:f2:59:5c:
                    f5:3d:23:40:ec:5b:ef:fa:b2:be:70:b9:01:06:50:
                    67:ca:01:76:4b:a2:5b:a4:94:22:91:3f:1b:ad:13:
                    71:7d:40:e9:93:c0:83:1b:77:87:ef:d6:bf:e9:8b:
                    ed:b3:3e:0e:86:d0:11:96:06:fd:be:51:39:2f:fd:
                    d7:33:bd:4a:6c:e7:1a:fb:ee:38:a3:38:8e:bd:1b:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:10:75:83:4F:47:6D:70:C8:EA:8C:31:3F:1C:6A:8E:44:B4:FD:BD
            X509v3 Authority Key Identifier:
                keyid:D5:27:1A:6F:99:EA:C1:2A:BE:08:56:10:0A:14:A2:D9:66:3C:E7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Scab5nqwSq-CFYQChSi2WY857s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:6d:e2:10:d7:85:74:42:44:c6:ba:59:2c:4a:3e:99:8b:
         99:87:e5:a6:8b:8c:3c:60:5d:e3:83:23:58:99:3b:10:d1:98:
         04:0a:59:9b:fa:42:81:b0:d4:5a:5a:f7:98:d2:a6:d0:18:3d:
         9a:3c:af:06:3a:9b:8e:98:6e:10:45:dd:bb:b0:cb:b8:bb:f4:
         30:98:35:a6:3b:1a:4c:47:95:47:a6:8f:67:25:13:40:3c:ae:
         fb:5c:c4:e4:e8:ff:35:33:0a:3d:07:05:4d:68:78:78:d9:40:
         f7:25:2c:47:0a:52:ff:13:07:8f:95:cc:7c:c3:9b:99:77:8c:
         4b:5f:9f:0e:90:91:c1:c2:d1:ee:19:80:1f:5f:14:27:56:a3:
         8c:14:f3:59:8e:fe:9e:43:62:51:44:2c:f8:55:e4:29:ee:91:
         8f:62:ff:fa:2c:52:37:02:0a:25:2e:20:e6:c0:33:3c:1b:87:
         d4:49:14:c9:61:0a:bf:76:51:76:05:f9:3e:ca:60:54:f5:0c:
         9f:53:17:09:f7:ea:cc:cb:d1:f2:0e:87:e0:ca:57:a8:3e:ab:
         58:b9:2e:14:96:34:0c:00:b4:80:d1:49:07:f0:2f:86:97:b1:
         b5:c7:0e:2e:8b:a3:a8:f5:33:05:79:ce:58:22:b5:24:13:5c:
         49:d8:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----