Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0eca03-c06a-4965-b188-5991b137a4b4/1/qcI-kIGcn8dNlEbTDNGiTBWZImA.mft
File:                     qcI-kIGcn8dNlEbTDNGiTBWZImA.mft (raw, json)
Hash identifier:          /4rOxO10mOO9beFNKs+mWL3hZfxiMvMvLFn77YoHJyI=
Subject key identifier:   63:85:87:D3:AA:F4:77:37:87:EF:CB:F3:B1:E5:58:4D:2A:16:94:92
Authority key identifier: A9:C2:3E:90:81:9C:9F:C7:4D:94:46:D3:0C:D1:A2:4C:15:99:22:60
Certificate issuer:       /CN=a9c23e90819c9fc74d9446d30cd1a24c15992260
Certificate serial:       018B1C099FF3F0198AE64B53C1745F855A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcI-kIGcn8dNlEbTDNGiTBWZImA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0eca03-c06a-4965-b188-5991b137a4b4/1/qcI-kIGcn8dNlEbTDNGiTBWZImA.mft
Manifest number:          02D4
Signing time:             Wed 11 Oct 2023 00:01:14 +0000
Manifest this update:     Wed 11 Oct 2023 00:01:14 +0000
Manifest next update:     Thu 12 Oct 2023 00:01:14 +0000
Files and hashes:         1: lsXcKZr_S9zCXuOSNFIwdB-ef8I.roa (hash: apBsBp8YfDgDP+vXbyfYDsHrDLTOMFx5Fs0xaWGLLfU=)
                          2: qcI-kIGcn8dNlEbTDNGiTBWZImA.crl (hash: S6a/Uc1OCCrLQMHAZ/Y26JIf6+HnklucE/w6hPOk0zU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1c:09:9f:f3:f0:19:8a:e6:4b:53:c1:74:5f:85:5a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c23e90819c9fc74d9446d30cd1a24c15992260
        Validity
            Not Before: Oct 11 00:01:14 2023 GMT
            Not After : Oct 12 00:01:14 2023 GMT
        Subject: CN=638587d3aaf4773787efcbf3b1e5584d2a169492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:5d:e1:19:83:3c:52:f9:c0:29:d1:24:fc:
                    1b:58:da:d1:4a:cc:e9:73:10:65:db:61:49:26:38:
                    89:fc:d9:7f:6c:4f:39:48:81:c8:8a:b4:24:82:a1:
                    fa:21:aa:ff:74:d8:c0:e9:4f:15:b4:0e:99:ee:9f:
                    f8:0a:90:45:95:6c:d9:f9:7f:43:dd:a1:95:a4:b5:
                    fc:bd:84:52:08:f3:e5:b3:4b:7f:3c:83:45:55:6a:
                    28:6c:cd:1f:cd:a7:32:b1:ad:15:5f:bb:fd:ec:46:
                    92:15:e9:c1:85:7b:08:2f:56:a0:6e:ed:5b:70:0e:
                    ec:08:d2:ca:9f:e2:ae:48:fa:57:d9:73:56:ea:83:
                    32:79:24:32:be:e6:a7:19:93:7e:10:0d:25:a0:b6:
                    53:5a:77:57:62:4c:e1:7e:48:5e:53:f4:45:32:4f:
                    0d:89:e6:dc:14:84:12:33:b0:fa:02:d7:92:59:24:
                    a0:30:de:91:29:2f:c8:bb:a8:be:95:42:bc:9a:47:
                    24:22:0c:bd:fa:4b:90:08:61:9c:17:9c:01:db:26:
                    29:d4:d1:21:99:f5:67:8c:ea:d0:04:73:d2:13:ac:
                    93:4a:89:5b:e0:0b:f6:1e:b6:83:e0:1b:64:c3:06:
                    e5:7f:94:b5:df:b4:b3:1a:2b:a7:b6:31:7b:c1:2f:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:85:87:D3:AA:F4:77:37:87:EF:CB:F3:B1:E5:58:4D:2A:16:94:92
            X509v3 Authority Key Identifier:
                keyid:A9:C2:3E:90:81:9C:9F:C7:4D:94:46:D3:0C:D1:A2:4C:15:99:22:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcI-kIGcn8dNlEbTDNGiTBWZImA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0eca03-c06a-4965-b188-5991b137a4b4/1/qcI-kIGcn8dNlEbTDNGiTBWZImA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0eca03-c06a-4965-b188-5991b137a4b4/1/qcI-kIGcn8dNlEbTDNGiTBWZImA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:29:86:fc:91:1a:ca:5f:6c:93:26:04:de:ab:88:dd:99:26:
         6a:46:75:76:4f:5c:28:7b:e2:02:40:45:03:c8:eb:6b:67:06:
         95:58:62:7a:24:73:56:58:75:65:50:60:09:a0:0c:c1:83:49:
         39:ac:da:58:a3:a2:dc:de:64:d1:5b:16:91:2a:b3:62:38:a0:
         e7:3b:0c:09:60:ad:3c:3a:da:68:09:c3:34:02:22:73:ec:5f:
         d4:e2:39:2f:86:cf:cd:30:29:93:f4:a2:cb:a9:cb:64:fb:44:
         7a:39:d7:3b:75:a9:72:c1:5b:f5:7f:13:75:d9:b2:ae:95:52:
         be:25:6c:d8:f2:f9:84:bb:1a:05:0a:4a:e9:02:5e:fa:f4:f4:
         a3:de:91:aa:1f:31:1e:de:2e:aa:23:dd:19:19:5a:38:8a:46:
         a0:8b:e1:54:5a:9c:92:aa:bb:03:bf:64:bb:71:34:f1:13:d4:
         f2:87:a4:df:08:9d:38:88:4d:c8:75:82:25:2d:11:8c:aa:38:
         a6:ac:ae:32:1f:55:1e:92:db:84:8a:d7:79:31:d0:7b:e3:15:
         80:d4:b9:ce:0e:ae:3e:3e:26:3b:ad:46:46:51:7c:8b:20:66:
         da:57:f6:c7:fb:1f:5c:ff:cb:ce:8b:85:f0:81:59:f3:db:70:
         28:2b:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----