Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.mft
File:                     ixCsM-IDbSq2M0FxcP1UaobesUI.mft (raw, json)
Hash identifier:          Hcbr3O07xq0oury+8EBsFRtBYT3XU/s2YhplefkW5J0=
Subject key identifier:   9B:BC:21:28:43:B0:08:FE:46:69:AB:7C:4D:17:98:C9:01:DC:1F:D2
Authority key identifier: 8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42
Certificate issuer:       /CN=8b10ac33e2036d2ab633417170fd546a86deb142
Certificate serial:       018BEBBF5997E98007866058E98DC6D6C410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.mft
Manifest number:          085B
Signing time:             Mon 20 Nov 2023 08:01:07 +0000
Manifest this update:     Mon 20 Nov 2023 08:01:07 +0000
Manifest next update:     Tue 21 Nov 2023 08:01:07 +0000
Files and hashes:         1: LwWL8e8XgEy-AiIRV3zaCPajzx0.roa (hash: TOihOpyee3H8JNBwExLO1mYFZLO6Vw8mv8dS5lt532c=)
                          2: ixCsM-IDbSq2M0FxcP1UaobesUI.crl (hash: uZKg3PuEYbBKA4N3gwkX3qNaidcpNh6jQQBbP1KJspw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:bf:59:97:e9:80:07:86:60:58:e9:8d:c6:d6:c4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b10ac33e2036d2ab633417170fd546a86deb142
        Validity
            Not Before: Nov 20 08:01:07 2023 GMT
            Not After : Nov 21 08:01:07 2023 GMT
        Subject: CN=9bbc212843b008fe4669ab7c4d1798c901dc1fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:47:f7:86:c1:8f:53:4a:12:2b:68:bb:fd:
                    cb:51:e7:22:a4:40:7e:29:81:29:bd:8a:4b:7b:08:
                    1c:bb:ae:6b:7b:34:46:eb:bd:8d:52:dc:f1:89:e4:
                    3e:8a:88:11:62:cf:a9:6f:41:24:ef:bd:48:5d:b1:
                    da:c0:da:1c:33:c2:a4:e6:d7:ba:62:4f:bc:db:c0:
                    df:b6:f0:39:15:f2:61:62:e5:64:8e:95:1d:e3:17:
                    37:6b:40:82:af:22:e4:e8:05:f0:57:5a:fa:9e:12:
                    ad:e9:6d:cc:26:fe:d5:fe:c2:22:f4:54:4f:f6:c8:
                    d4:b1:7c:fe:8d:da:ee:d3:56:22:39:07:e5:66:b9:
                    9d:44:15:05:5e:7c:39:50:19:00:50:b5:93:e6:37:
                    01:0c:89:5f:cc:f6:da:b6:19:d6:b1:8b:5d:3f:e5:
                    01:ba:a9:64:b0:10:e1:c4:42:4f:19:24:e3:e9:77:
                    a0:85:94:dc:9e:84:dd:dc:6e:92:38:91:ff:66:0c:
                    f5:3a:7e:c3:57:30:17:95:14:12:e2:9a:3c:fa:96:
                    43:bc:cb:45:7c:9b:e9:fe:48:e3:2d:58:ba:97:49:
                    8b:4e:ac:cf:d4:51:94:30:50:25:81:31:05:10:cd:
                    25:bd:cd:c0:b3:86:fc:ae:9c:51:25:60:a2:73:29:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:21:28:43:B0:08:FE:46:69:AB:7C:4D:17:98:C9:01:DC:1F:D2
            X509v3 Authority Key Identifier:
                keyid:8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:a1:73:f4:f8:eb:05:e9:76:04:d2:19:b9:0a:e1:65:1c:
         c5:80:bf:0b:b4:be:08:e1:45:ba:57:c7:07:15:ed:e4:e1:44:
         da:ae:9c:91:dd:a8:4d:24:e6:65:5f:31:82:54:28:68:2d:61:
         a3:3a:63:e5:e2:7f:d6:e1:1c:01:6e:63:e3:7a:9e:c5:ef:aa:
         20:28:b3:0d:b5:92:82:52:f1:be:ca:7b:6b:4d:bd:b9:ab:84:
         76:59:75:9b:41:00:b5:28:6c:8e:f0:48:bb:4d:0e:d1:e6:51:
         46:3b:ad:6b:1b:55:67:71:62:dd:f8:d7:e3:5c:90:50:6f:c8:
         68:5a:ef:7c:9b:c1:af:fe:e0:24:67:e8:4d:53:2d:bf:70:6a:
         e7:0e:6b:86:0a:8b:ae:39:7f:81:d4:59:53:96:64:b4:ac:01:
         65:a9:b4:cd:ce:80:66:ad:39:a2:0e:a9:20:e9:6d:27:9e:9e:
         28:29:f5:b6:d8:64:bc:20:9b:54:83:80:ea:4c:c8:38:cc:19:
         7e:fe:ab:3e:a5:18:fd:ca:26:ff:d1:1c:be:0d:6c:2c:3e:cc:
         81:f3:b4:18:93:e3:27:81:51:83:b8:9f:15:0a:f8:79:7f:c1:
         d2:a1:2d:bc:16:81:68:92:6a:57:49:ac:1d:b4:3d:b1:5a:bb:
         a3:bf:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----