Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1e5d67-f626-4925-98f3-20dc7e0572f4/1/halvDTq-apwU55KnEVbTxu_P1M0.mft
File:                     halvDTq-apwU55KnEVbTxu_P1M0.mft (raw, json)
Hash identifier:          UUIEmlmvfUQ58AvLXtuZpP58bQho6P8An5RtvcH0BCQ=
Subject key identifier:   CD:AF:5A:0B:6E:F5:EA:30:53:D5:ED:E4:9F:A7:B0:4D:91:9C:32:A8
Authority key identifier: 85:A9:6F:0D:3A:BE:6A:9C:14:E7:92:A7:11:56:D3:C6:EF:CF:D4:CD
Certificate issuer:       /CN=85a96f0d3abe6a9c14e792a71156d3c6efcfd4cd
Certificate serial:       0189B05EE18D1191CD8E963FCC5282A5AAF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/halvDTq-apwU55KnEVbTxu_P1M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/1e5d67-f626-4925-98f3-20dc7e0572f4/1/halvDTq-apwU55KnEVbTxu_P1M0.mft
Manifest number:          075B
Signing time:             Tue 01 Aug 2023 09:12:35 +0000
Manifest this update:     Tue 01 Aug 2023 09:12:35 +0000
Manifest next update:     Wed 02 Aug 2023 09:12:35 +0000
Files and hashes:         1: hGKqUtKbDz2mnEhyEN9N4GcW4OM.roa (hash: lG8PjnHSxMdA6gcp70qCAr2W7ybUJDxcf7sunrvM1ew=)
                          2: halvDTq-apwU55KnEVbTxu_P1M0.crl (hash: IgerhOyRQZTdhkSLKFLOyJW9SlgprBj2jFcgmOQVRXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b0:5e:e1:8d:11:91:cd:8e:96:3f:cc:52:82:a5:aa:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85a96f0d3abe6a9c14e792a71156d3c6efcfd4cd
        Validity
            Not Before: Aug  1 09:12:35 2023 GMT
            Not After : Aug  2 09:12:35 2023 GMT
        Subject: CN=cdaf5a0b6ef5ea3053d5ede49fa7b04d919c32a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:e5:47:83:1c:ad:bf:a1:74:41:27:7a:f6:
                    96:ad:a9:f4:3b:32:4e:37:05:e1:d1:f8:69:44:3e:
                    11:1c:a4:6d:7b:92:ee:90:66:ae:1f:ea:93:2c:af:
                    c5:6e:2a:0f:40:ea:e2:00:c3:6a:bd:da:0e:f0:d1:
                    8a:40:18:e1:8c:b1:15:0e:13:d6:b8:12:65:ac:32:
                    d7:b0:86:6c:93:bb:51:09:a8:26:72:c4:32:43:0b:
                    2a:60:80:05:03:f2:cd:1d:56:47:36:e2:df:78:00:
                    da:09:c8:e1:16:41:37:19:e4:66:74:a6:2f:ba:54:
                    91:10:69:63:b9:58:0c:c4:3d:b8:3e:38:d4:f3:79:
                    06:0a:a3:fc:01:98:32:b5:5b:02:91:4d:f3:ab:55:
                    fa:a0:f6:c4:b9:fd:f9:89:75:31:73:57:13:0f:11:
                    ff:55:13:61:4f:f4:c8:67:67:00:d5:1a:7c:b9:ea:
                    a9:02:cc:84:44:9f:9c:02:83:cf:1f:07:8d:4a:75:
                    9f:a7:38:98:b8:2e:ef:3b:7b:e9:86:b5:ae:98:2e:
                    af:ae:ed:f2:e3:3b:53:6e:2b:7b:e3:16:82:aa:b6:
                    16:93:fc:74:c4:45:1c:34:0d:9a:6a:b1:52:72:54:
                    7f:1a:1d:16:9d:94:11:fc:87:06:99:b7:88:1a:5e:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:5A:0B:6E:F5:EA:30:53:D5:ED:E4:9F:A7:B0:4D:91:9C:32:A8
            X509v3 Authority Key Identifier:
                keyid:85:A9:6F:0D:3A:BE:6A:9C:14:E7:92:A7:11:56:D3:C6:EF:CF:D4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/halvDTq-apwU55KnEVbTxu_P1M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1e5d67-f626-4925-98f3-20dc7e0572f4/1/halvDTq-apwU55KnEVbTxu_P1M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1e5d67-f626-4925-98f3-20dc7e0572f4/1/halvDTq-apwU55KnEVbTxu_P1M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:75:1e:27:dd:dc:0e:cc:7e:68:4a:51:89:cd:9e:2d:99:4e:
         ed:6d:7a:38:e6:1c:fc:4e:15:36:f3:c8:19:26:53:c9:b0:2e:
         04:a3:57:c4:70:5f:c7:da:ed:d1:d3:f7:ac:99:d4:7f:2b:ad:
         f9:7f:eb:6c:f2:a6:77:2b:95:ba:9d:be:e2:2d:a4:0e:c8:54:
         22:dd:74:40:7f:b3:e6:46:f2:42:13:64:2f:98:6a:58:24:25:
         f4:61:73:e1:bc:ff:99:1c:e0:7f:13:a3:38:83:9c:bc:53:76:
         68:72:6e:a6:b4:30:f1:11:48:81:30:e4:43:bd:e5:68:be:42:
         8b:3f:49:f8:d7:59:56:8b:a9:34:3f:b0:5e:df:b9:f8:ae:a8:
         6e:b3:8a:86:40:68:d9:e8:20:ce:54:29:ff:ba:f2:66:04:3d:
         67:02:f8:61:09:10:af:04:09:6a:a4:9b:63:56:b4:6b:ff:38:
         f7:e9:9e:23:70:15:c6:cf:3b:e4:3f:6d:9c:e2:b0:47:60:25:
         89:31:ff:c8:4d:9a:36:98:b0:0a:02:30:fb:26:5e:58:65:b4:
         10:ef:67:a5:6a:42:72:d0:48:d6:d3:d6:4b:71:63:32:cd:e7:
         fd:e9:18:0f:3d:db:9d:76:c8:19:6d:5a:c0:52:62:f0:a3:7d:
         bd:75:d7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----