Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.mft
File:                     Iwfnl0-4MSouaqqZb174R0pTEHw.mft (raw, json)
Hash identifier:          pew8VBG/Hs2rUHbE2PHiej3w9KzAuE4oZn0TQWt67QY=
Subject key identifier:   9F:38:01:43:E4:55:11:7C:77:9F:0B:6E:24:7E:5C:C3:8F:05:C5:9D
Authority key identifier: 23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
Certificate issuer:       /CN=2307e7974fb8312a2e6aaa996f5ef8474a53107c
Certificate serial:       018BEAAC610D6F58621547A8612EBF80DE38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iwfnl0-4MSouaqqZb174R0pTEHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.mft
Manifest number:          085B
Signing time:             Mon 20 Nov 2023 03:00:47 +0000
Manifest this update:     Mon 20 Nov 2023 03:00:47 +0000
Manifest next update:     Tue 21 Nov 2023 03:00:47 +0000
Files and hashes:         1: 6NHqSrdTAzROpIaLwh8zM5u_ois.roa (hash: UPGyUnrhOEZh+ITBN3H2lgY9N623dH867E77Hc+GhQ4=)
                          2: Iwfnl0-4MSouaqqZb174R0pTEHw.crl (hash: oKOQOcb4b5pQ2mk7WXFV5YxGxefYkV5DQrUPLrnSEjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:ac:61:0d:6f:58:62:15:47:a8:61:2e:bf:80:de:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2307e7974fb8312a2e6aaa996f5ef8474a53107c
        Validity
            Not Before: Nov 20 03:00:47 2023 GMT
            Not After : Nov 21 03:00:47 2023 GMT
        Subject: CN=9f380143e455117c779f0b6e247e5cc38f05c59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:eb:b5:e6:db:4a:8b:12:b1:e5:49:1a:46:
                    8f:9e:f3:91:5e:d6:1f:30:08:06:6d:43:67:6d:88:
                    87:9b:a8:7d:5f:4f:e7:18:35:92:f3:70:36:c4:02:
                    93:64:d7:3e:2b:1c:6d:78:0e:97:6a:1d:25:81:a7:
                    dc:90:eb:8a:fb:74:27:e6:0d:1c:d7:84:84:99:da:
                    c6:6d:a6:91:dc:c5:79:5c:36:8e:ae:c5:dd:73:38:
                    7a:f9:ca:5c:aa:19:3e:a1:86:1c:7d:21:95:6a:19:
                    75:bb:0f:7e:1d:ed:d7:f7:0b:53:3e:07:3d:27:d2:
                    19:3d:ad:b0:7a:48:3d:4e:eb:c0:17:ac:00:8e:fa:
                    c7:92:60:9b:a2:54:cf:a4:d6:b0:0a:36:a1:f0:df:
                    65:a6:c0:1b:7b:7f:a4:86:4f:7b:0a:9d:96:c0:9f:
                    c1:46:6d:ca:86:d9:c2:82:ca:61:61:d6:21:49:fd:
                    88:a9:61:ba:ba:21:29:a8:de:8a:6c:32:47:32:2d:
                    c9:43:4b:78:8a:d2:f4:d0:70:ff:b6:90:6b:67:3a:
                    49:cd:21:b9:d4:63:8a:6a:42:82:fb:f4:c4:12:1f:
                    ef:f6:0e:ea:77:aa:c2:95:d1:c0:c4:9b:9c:fb:7c:
                    cf:31:37:38:0d:5c:80:00:74:af:c6:67:61:bd:fd:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:38:01:43:E4:55:11:7C:77:9F:0B:6E:24:7E:5C:C3:8F:05:C5:9D
            X509v3 Authority Key Identifier:
                keyid:23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwfnl0-4MSouaqqZb174R0pTEHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d9:97:c9:03:a1:29:51:43:80:f4:f2:7e:cf:08:8e:75:22:
         55:bd:f5:94:3f:ec:8b:f0:06:f8:2a:73:89:e6:36:39:ab:24:
         48:64:71:26:25:61:8c:8e:cd:37:55:ef:9e:c7:6b:ee:6d:bd:
         96:cb:34:7c:53:4b:5d:44:b5:2e:b8:3c:59:94:1d:f7:af:15:
         09:52:20:d2:fc:50:30:a8:a2:97:85:41:87:76:49:42:dc:04:
         61:21:7b:33:9e:bc:b3:dd:7d:6f:16:c1:ab:4a:3a:d4:30:d0:
         3f:ba:6a:e6:61:9e:58:e5:ab:d9:17:07:c3:5b:56:6b:d8:6c:
         87:36:7e:db:3d:60:af:ab:2e:0c:ae:17:d4:3e:f1:c9:17:3f:
         21:35:59:87:34:58:da:f6:7e:1f:f9:bb:d0:e6:83:28:e5:78:
         56:03:0b:e7:35:2b:29:cc:f0:8c:50:60:79:fe:f5:2e:3f:40:
         8a:2b:05:b7:0b:01:58:6f:21:f8:17:43:cd:9a:70:a9:8f:e6:
         c8:97:ab:4a:e0:be:35:17:1e:ff:8f:6d:0d:12:28:65:f8:07:
         87:1e:ee:58:00:61:a7:0b:b2:d7:00:93:fa:0d:10:2f:42:e8:
         89:76:cf:ea:b6:cc:52:93:3e:23:06:af:e3:ac:dd:c0:1f:fb:
         58:2f:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----