Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.mft
File:                     CwJi65tDeBr0e_2DPXsqjtW9acA.mft (raw, json)
Hash identifier:          mI8i8UcYpHD19HyZ1KbN6OOiVLFEMCXCrWKRwuaYiho=
Subject key identifier:   FB:67:C3:5D:5D:3F:F3:A7:16:FA:3E:2C:E4:AA:33:B5:A1:8F:5D:AD
Authority key identifier: 0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0
Certificate issuer:       /CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
Certificate serial:       018A1C5A0A0A0943178B20E35BE7D9817E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.mft
Manifest number:          087F
Signing time:             Tue 22 Aug 2023 08:26:17 +0000
Manifest this update:     Tue 22 Aug 2023 08:26:17 +0000
Manifest next update:     Wed 23 Aug 2023 08:26:17 +0000
Files and hashes:         1: CwJi65tDeBr0e_2DPXsqjtW9acA.crl (hash: Rc+tE45HBFlmZxgfwjpHxRBcIZh8vT573P5jI1m8eGQ=)
                          2: KLRDwAvDAX8tYEYsC1u2gAFTQ9U.roa (hash: d/d09bo0wBOoO6EsR9FX7pRvS/FLWxQaiBao1yXST88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1c:5a:0a:0a:09:43:17:8b:20:e3:5b:e7:d9:81:7e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
        Validity
            Not Before: Aug 22 08:26:17 2023 GMT
            Not After : Aug 23 08:26:17 2023 GMT
        Subject: CN=fb67c35d5d3ff3a716fa3e2ce4aa33b5a18f5dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:fe:e8:73:00:c6:85:9f:7c:8a:23:1e:27:
                    36:b3:bf:33:5d:86:fe:ad:e8:66:3f:d9:ea:47:b7:
                    5e:e1:0e:d3:79:f1:7f:7e:81:bf:45:c1:f4:f9:13:
                    7b:6b:5c:d5:3b:bc:75:57:83:c4:27:f9:81:d0:a4:
                    20:df:3b:f8:2e:09:bc:42:a1:18:6e:19:21:09:97:
                    12:67:07:e5:2c:4d:c2:a9:22:d0:b0:ce:03:ec:d3:
                    24:12:b6:13:4f:04:78:60:e6:77:b3:00:7b:73:a0:
                    84:82:5a:d9:28:f6:6e:0e:5e:6a:06:9b:a8:35:e6:
                    1d:e5:fa:6e:fd:74:42:76:04:b3:54:48:69:53:4c:
                    7d:d2:21:8f:8d:e9:84:72:57:7e:51:61:12:93:64:
                    1b:5d:89:9c:22:a7:4c:86:35:ca:2d:08:94:38:8e:
                    c8:87:2b:24:eb:ca:e4:39:23:47:46:ac:dc:33:75:
                    fb:af:62:af:06:dc:64:e0:28:16:5c:15:23:70:1f:
                    c9:09:4e:da:33:a9:5f:93:46:f7:16:36:6f:b1:fd:
                    b2:76:54:62:47:eb:43:f0:13:c5:c1:9e:f3:cd:d3:
                    44:b8:e1:f8:18:74:fb:2e:23:3a:a4:3c:67:eb:84:
                    da:3f:a2:00:c7:2b:98:ec:f0:ea:82:41:a5:3e:03:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:67:C3:5D:5D:3F:F3:A7:16:FA:3E:2C:E4:AA:33:B5:A1:8F:5D:AD
            X509v3 Authority Key Identifier:
                keyid:0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:4c:f5:1f:7a:56:a1:08:00:0f:8d:6f:e2:17:25:7c:6b:
         98:a7:a0:38:14:ee:36:e9:46:df:02:23:c6:14:27:25:39:75:
         78:c1:2d:c4:2c:42:7e:57:75:ef:3a:9f:fa:ec:b0:f2:80:78:
         f3:5a:c2:5a:67:88:56:93:ad:47:d6:fa:97:c5:0a:72:69:43:
         ee:ae:7c:9c:29:88:bd:5d:34:84:f9:44:d7:c0:b9:67:ec:6d:
         6a:aa:a9:99:11:1e:63:1a:6e:de:2d:cf:1a:96:a9:5c:6e:63:
         2b:c3:8d:80:55:98:e5:64:ad:09:d7:cf:8a:1f:b1:53:6d:2e:
         ba:05:5c:a7:76:cf:1b:51:2e:6b:39:10:87:92:2b:3e:39:f6:
         2a:57:7c:b6:3f:7f:f6:78:17:3e:b5:42:ea:6b:c9:8d:82:60:
         af:f5:3f:a7:f2:0b:19:f1:68:2f:16:96:2b:3a:c9:89:a2:a6:
         30:ac:18:3b:80:f4:93:08:79:ea:8e:be:32:2c:58:b0:fc:b8:
         4b:82:1e:09:66:4b:0e:8e:17:d6:d1:13:89:b0:1f:e8:9e:e4:
         f4:21:72:5a:10:5d:64:53:7a:a7:d9:38:75:37:d8:09:34:49:
         b2:ca:1c:f9:76:8f:b7:19:37:d9:4b:18:5f:4f:1e:c0:28:a9:
         6e:a0:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----