Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0b60f0-a7e9-4130-8c51-34334d81a488/1/0ljij3TZyKYc68O-AP_cUB7tHU0.mft
File:                     0ljij3TZyKYc68O-AP_cUB7tHU0.mft (raw, json)
Hash identifier:          rvAcW8gAijBxFTTiZq6voQAFrH2bvu+Jkneb0vNV4Kk=
Subject key identifier:   77:30:91:B2:46:37:E1:CC:E4:94:33:CA:B9:13:68:3A:76:F5:D0:59
Authority key identifier: D2:58:E2:8F:74:D9:C8:A6:1C:EB:C3:BE:00:FF:DC:50:1E:ED:1D:4D
Certificate issuer:       /CN=d258e28f74d9c8a61cebc3be00ffdc501eed1d4d
Certificate serial:       018B6F4A38D3C9C274354FD8AC702F95D7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ljij3TZyKYc68O-AP_cUB7tHU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0b60f0-a7e9-4130-8c51-34334d81a488/1/0ljij3TZyKYc68O-AP_cUB7tHU0.mft
Manifest number:          06A3
Signing time:             Fri 27 Oct 2023 04:00:16 +0000
Manifest this update:     Fri 27 Oct 2023 04:00:16 +0000
Manifest next update:     Sat 28 Oct 2023 04:00:16 +0000
Files and hashes:         1: 0ljij3TZyKYc68O-AP_cUB7tHU0.crl (hash: aKPY6d+IJCjgjehcF0vtMW+WwbPtTngU1yAQKfa+Ssw=)
                          2: 2SgG5dAlktmZbQUa6YGJ-qfgYvk.roa (hash: +3kGZz22iWR97xmAcj732X0o4nHJ6QWd2LwYRrj/5sE=)
                          3: AZtPDTydyqK0JHVoDRTrqcq-b5o.roa (hash: 9zIn9u9KVr03yB1WNrUBILyXM6At5YjWjUeLsql8FUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6f:4a:38:d3:c9:c2:74:35:4f:d8:ac:70:2f:95:d7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d258e28f74d9c8a61cebc3be00ffdc501eed1d4d
        Validity
            Not Before: Oct 27 04:00:16 2023 GMT
            Not After : Oct 28 04:00:16 2023 GMT
        Subject: CN=773091b24637e1cce49433cab913683a76f5d059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:29:d3:79:f0:a7:ea:7a:9e:08:64:99:3c:64:
                    83:84:ae:16:ed:b2:16:bc:44:72:47:08:10:c5:9d:
                    0d:7d:9c:7a:aa:69:32:79:cc:ce:b1:68:ca:30:7a:
                    26:c5:4a:50:9a:bb:98:55:8f:92:1b:e0:e6:61:7d:
                    35:f4:03:08:d2:ae:61:43:05:cb:41:71:54:7d:5d:
                    a2:3b:7e:51:05:2e:96:39:bb:a4:50:67:85:db:21:
                    62:bd:98:ab:b6:58:2d:17:10:75:c7:ae:1a:9e:49:
                    31:03:37:2b:49:7a:30:94:c7:4c:2f:84:14:2b:14:
                    be:ff:63:36:cb:45:17:48:96:87:18:9b:51:29:45:
                    3c:49:86:7c:cb:14:6e:91:56:72:8c:86:2e:a9:41:
                    1b:a2:dc:2c:81:1f:78:52:fa:9c:09:19:7c:8c:d6:
                    51:c7:d9:79:b1:7e:6a:c6:9f:9d:04:ee:bf:6e:1d:
                    81:53:ca:d9:83:bf:c9:b6:e2:8d:d8:73:fe:4b:e8:
                    8d:52:2b:d4:2c:b9:f9:d4:d9:1d:39:5e:65:fb:ae:
                    19:ac:53:80:03:bd:08:41:e9:22:c2:5a:a5:98:34:
                    07:2b:ad:95:b5:a3:ea:40:44:99:e4:11:23:a6:1b:
                    59:26:aa:03:a6:45:5e:c5:ee:e5:e0:27:98:50:21:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:91:B2:46:37:E1:CC:E4:94:33:CA:B9:13:68:3A:76:F5:D0:59
            X509v3 Authority Key Identifier:
                keyid:D2:58:E2:8F:74:D9:C8:A6:1C:EB:C3:BE:00:FF:DC:50:1E:ED:1D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ljij3TZyKYc68O-AP_cUB7tHU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0b60f0-a7e9-4130-8c51-34334d81a488/1/0ljij3TZyKYc68O-AP_cUB7tHU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0b60f0-a7e9-4130-8c51-34334d81a488/1/0ljij3TZyKYc68O-AP_cUB7tHU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:f1:3b:7e:46:14:e3:2f:d8:04:c1:34:1f:bf:e1:43:68:
         4f:1f:2f:8c:ea:b0:c3:52:94:81:9c:2a:e6:a2:cf:62:08:44:
         03:e1:38:1d:28:89:d9:df:37:e6:6b:02:51:ef:7d:40:4f:37:
         70:04:b4:ed:93:5c:7a:8d:2a:b2:1e:e5:35:30:8d:f0:14:66:
         fa:48:5c:00:5d:4e:77:78:09:93:72:68:85:d5:58:b7:b5:cb:
         53:a0:cc:aa:0f:74:a5:9f:f8:8e:90:26:2d:10:fd:28:67:ed:
         2d:ae:29:aa:e5:86:e3:b9:27:2d:48:72:a6:52:34:70:76:07:
         fc:82:bc:9b:ae:4f:7f:72:a1:94:69:56:71:56:4d:51:08:05:
         42:a3:fe:9f:c1:be:44:ae:f7:42:6f:e7:7a:1d:49:d0:23:f6:
         e5:04:af:a6:b4:10:c3:c2:7a:d0:c3:09:d6:cb:03:db:dc:69:
         23:d9:2b:5b:a3:d6:10:3c:80:8d:ad:e9:ac:f6:1f:03:46:50:
         16:30:05:0d:7b:26:33:91:83:f9:b2:c4:5b:c9:d1:66:34:df:
         eb:fc:a1:4c:0a:e9:72:f2:19:18:a6:10:7f:4c:d0:e3:91:a9:
         5d:fb:0e:32:b5:09:a2:1e:3f:a0:ee:7d:f6:46:de:d7:6a:ce:
         cb:30:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----