Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/mTlsHrWblma3SH5YyEqzREziMRM.mft
File:                     mTlsHrWblma3SH5YyEqzREziMRM.mft (raw, json)
Hash identifier:          0E6Zzd6P8sbtn2DsP+t8iGZNfpzRep3eQSTjDVPoYao=
Subject key identifier:   07:C1:91:AE:F6:0A:94:3C:9B:1A:02:3C:56:86:37:E2:AA:60:D4:05
Authority key identifier: 99:39:6C:1E:B5:9B:96:66:B7:48:7E:58:C8:4A:B3:44:4C:E2:31:13
Certificate issuer:       /CN=99396c1eb59b9666b7487e58c84ab3444ce23113
Certificate serial:       018B5AE845853037AE616FA5BF3B88BDE7DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTlsHrWblma3SH5YyEqzREziMRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/mTlsHrWblma3SH5YyEqzREziMRM.mft
Manifest number:          0533
Signing time:             Mon 23 Oct 2023 05:00:53 +0000
Manifest this update:     Mon 23 Oct 2023 05:00:53 +0000
Manifest next update:     Tue 24 Oct 2023 05:00:53 +0000
Files and hashes:         1: EG7DIV6sJzJ0VyQzRiwa5E9QGyc.roa (hash: zEoHCjkQl+asaRbqkYRFz5d5zkkQWgiyXCMLh8qncmE=)
                          2: mTlsHrWblma3SH5YyEqzREziMRM.crl (hash: Cbjs9JafX6pL1grwHCEhUYf8zHesOvo19iNFFDV56UI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5a:e8:45:85:30:37:ae:61:6f:a5:bf:3b:88:bd:e7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99396c1eb59b9666b7487e58c84ab3444ce23113
        Validity
            Not Before: Oct 23 05:00:53 2023 GMT
            Not After : Oct 24 05:00:53 2023 GMT
        Subject: CN=07c191aef60a943c9b1a023c568637e2aa60d405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:00:51:c2:d1:31:a3:17:a1:41:3e:46:83:46:
                    c4:a0:ac:ad:c7:e2:91:5d:6e:63:06:03:1d:38:33:
                    9e:df:1f:3e:d1:9b:71:45:7c:6e:42:6c:29:06:bc:
                    31:1f:e3:3c:ef:bb:6b:5e:eb:35:38:05:04:c6:22:
                    04:4b:05:b0:3d:57:09:a1:23:65:1d:63:e3:70:b4:
                    b2:c7:0c:b2:3b:f1:ae:bd:72:bf:1c:d7:ef:4d:3f:
                    ce:d0:d1:af:2c:6b:56:91:27:aa:a0:eb:24:9b:ab:
                    b7:f5:59:ca:ee:76:03:df:00:07:54:97:58:17:af:
                    88:46:1a:25:d5:90:05:5a:ff:67:46:68:4f:7c:53:
                    2b:0d:ce:20:a8:de:04:b4:d5:27:c8:48:f9:72:8c:
                    2a:3d:d0:c2:5f:8f:8e:7d:21:05:f8:bc:3e:d7:2c:
                    9e:e8:ed:aa:3f:5c:4e:ef:e5:a4:60:41:86:3b:b7:
                    ec:1d:29:03:ee:2e:15:4c:a9:2b:6d:cd:40:47:22:
                    08:15:e7:a5:e6:1a:b7:97:32:21:ee:37:d3:01:26:
                    66:43:ca:3a:b4:b0:76:3f:6f:f2:4f:ed:0a:f6:52:
                    c5:a8:e3:8f:c7:d1:d9:77:cc:28:b8:fc:4d:91:07:
                    16:22:fd:1a:22:5a:22:4a:69:94:d3:db:6e:f7:a9:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C1:91:AE:F6:0A:94:3C:9B:1A:02:3C:56:86:37:E2:AA:60:D4:05
            X509v3 Authority Key Identifier:
                keyid:99:39:6C:1E:B5:9B:96:66:B7:48:7E:58:C8:4A:B3:44:4C:E2:31:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTlsHrWblma3SH5YyEqzREziMRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/mTlsHrWblma3SH5YyEqzREziMRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/mTlsHrWblma3SH5YyEqzREziMRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b5:3d:4a:73:34:8f:10:42:e8:f3:a0:af:d6:28:bd:8b:23:
         d4:20:d2:13:28:ff:49:df:e4:1c:75:ab:b1:be:92:b9:38:ff:
         bd:9d:b2:1b:bd:a4:3d:37:e6:df:11:ec:ab:84:1a:d3:0e:5a:
         a1:c3:b3:27:75:ad:86:b4:11:89:b1:18:4c:de:f4:af:30:dc:
         8a:7b:5c:44:2d:f7:99:f2:3e:3d:7a:34:fe:4f:2c:ed:33:a8:
         63:c6:05:64:5b:19:3d:ff:9f:34:23:98:1d:6d:51:da:a5:6c:
         61:1c:84:9d:e7:41:f1:b8:a1:75:43:7f:95:d2:21:1c:57:f7:
         60:16:97:eb:2d:f4:1f:ba:be:3d:9b:80:ba:19:d8:04:9b:d7:
         1c:25:cf:23:7e:23:ad:1f:90:06:71:f1:10:62:05:ed:4b:68:
         40:23:1e:3f:51:0a:07:e3:63:9a:49:ff:cf:62:c6:33:fa:99:
         90:1b:ca:92:1d:66:7e:be:13:d2:02:e3:5a:36:5b:01:5e:92:
         0d:54:df:ef:2a:00:62:6e:c0:01:a8:d3:ce:21:4f:85:8d:90:
         3d:7a:7c:92:4b:55:ed:32:85:5e:44:8c:34:66:85:f5:89:f9:
         61:14:c1:9a:c7:ef:52:ab:06:9d:01:c2:46:fb:72:35:b4:35:
         30:4b:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----