Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c31163-b467-4736-9309-d941842847e3/1/n7B00GnfxJT8YOoB30-NmPgZK60.mft
File:                     n7B00GnfxJT8YOoB30-NmPgZK60.mft (raw, json)
Hash identifier:          Dbod3gCCgQh4fWbQazKKm19j1zmkmURqmEb7GiUeY6M=
Subject key identifier:   79:5E:5F:CB:63:2A:66:85:96:55:8A:20:D9:19:D0:60:51:B5:2F:4F
Authority key identifier: 9F:B0:74:D0:69:DF:C4:94:FC:60:EA:01:DF:4F:8D:98:F8:19:2B:AD
Certificate issuer:       /CN=9fb074d069dfc494fc60ea01df4f8d98f8192bad
Certificate serial:       0189BA84BD7A73A79F680CC21648B7335AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7B00GnfxJT8YOoB30-NmPgZK60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c31163-b467-4736-9309-d941842847e3/1/n7B00GnfxJT8YOoB30-NmPgZK60.mft
Manifest number:          05F0
Signing time:             Thu 03 Aug 2023 08:30:08 +0000
Manifest this update:     Thu 03 Aug 2023 08:30:08 +0000
Manifest next update:     Fri 04 Aug 2023 08:30:08 +0000
Files and hashes:         1: HhYuVQwDTWriIE58fsbg9m-_kHA.roa (hash: R4yVi/O7OaHsLBPpq3W6FGIDl9wzfV8ETOqaauhgk0A=)
                          2: n7B00GnfxJT8YOoB30-NmPgZK60.crl (hash: L2qOrAK6SD/vmBBCG1nSfZbhj6zXBcRDFuXfiF/50qk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ba:84:bd:7a:73:a7:9f:68:0c:c2:16:48:b7:33:5a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb074d069dfc494fc60ea01df4f8d98f8192bad
        Validity
            Not Before: Aug  3 08:30:08 2023 GMT
            Not After : Aug  4 08:30:08 2023 GMT
        Subject: CN=795e5fcb632a668596558a20d919d06051b52f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:f2:7d:cc:77:1f:8e:c9:3d:37:a3:53:9d:
                    04:d5:97:8a:0a:13:34:63:be:ad:a4:ee:6f:fd:77:
                    84:38:0d:86:a2:3f:0d:23:5d:02:2f:03:9d:ac:6d:
                    74:e5:e4:b1:6a:63:37:6f:52:59:82:3f:c3:6c:7e:
                    f3:29:2e:06:50:b1:39:94:3c:a5:52:aa:b8:94:d1:
                    13:b3:ca:f8:e2:c5:48:ea:2e:0e:61:e3:bb:5f:d6:
                    da:bf:1a:a4:42:60:da:66:e6:06:b1:3e:31:98:3b:
                    3c:98:3d:dc:6a:e7:20:a5:37:3d:31:e9:f0:64:6b:
                    52:5e:c4:b2:96:b8:87:88:17:ad:df:4c:ba:e3:26:
                    3a:de:32:94:67:df:66:0f:11:9b:e0:a3:7f:1c:e2:
                    62:0a:43:67:0f:56:cc:a5:f7:13:6a:c2:74:30:62:
                    ed:2a:d9:e8:0e:da:4a:fe:c9:6d:9d:ad:d4:f9:12:
                    10:a7:12:e9:a9:22:95:77:af:5f:a7:f5:6d:1f:79:
                    14:09:07:37:2a:10:9c:98:41:0c:50:5d:f8:19:2d:
                    d5:9b:96:7a:7e:76:68:53:98:6f:a2:23:e7:34:e8:
                    02:76:87:ac:41:3a:ad:a0:83:77:4d:57:91:13:ca:
                    4f:cd:3d:db:a0:da:4b:61:2d:fd:8d:70:ae:6d:53:
                    f6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5E:5F:CB:63:2A:66:85:96:55:8A:20:D9:19:D0:60:51:B5:2F:4F
            X509v3 Authority Key Identifier:
                keyid:9F:B0:74:D0:69:DF:C4:94:FC:60:EA:01:DF:4F:8D:98:F8:19:2B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7B00GnfxJT8YOoB30-NmPgZK60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c31163-b467-4736-9309-d941842847e3/1/n7B00GnfxJT8YOoB30-NmPgZK60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c31163-b467-4736-9309-d941842847e3/1/n7B00GnfxJT8YOoB30-NmPgZK60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ad:aa:34:5b:09:b3:3a:18:95:0b:44:77:ef:b7:9f:bb:0e:
         ce:44:af:98:f5:a4:95:50:c7:6e:6a:17:c9:59:45:2e:d8:3b:
         f1:6f:ca:a6:ad:72:ff:6d:de:b6:f4:f7:17:33:f4:91:00:e8:
         43:3c:4b:3f:df:bf:ab:26:06:e2:77:b5:39:de:7e:13:fb:40:
         60:9e:dc:78:be:c6:6d:99:c0:5f:f8:00:d9:e6:8b:fd:2f:27:
         b6:ec:5a:6f:81:f6:68:02:07:cd:84:7e:25:7f:3d:13:6b:a9:
         68:70:26:1e:4c:f6:aa:48:76:01:19:99:04:cf:8c:fb:db:f4:
         64:80:4d:25:44:7b:79:17:f0:ab:91:9e:ab:7e:9b:73:e7:da:
         d4:f2:4c:0a:0e:b9:29:49:1a:43:f1:a5:38:87:2e:9d:fe:3b:
         f2:e5:32:56:01:f7:da:df:bc:fc:93:19:ce:63:5f:07:d0:b5:
         1d:02:67:63:91:35:89:84:34:38:1b:ae:ed:e3:fe:53:63:2c:
         02:5a:2d:0b:0f:f1:d1:e9:56:e1:ca:4f:cd:71:76:7c:f1:e1:
         0c:1c:a8:ec:67:92:9b:19:8a:8b:d6:e5:f6:5d:03:94:5d:7a:
         c8:52:d3:92:09:b3:4a:24:54:8d:86:26:22:57:b4:cd:ba:d9:
         42:ff:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----