Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/8H0Q4vZ70gfvXlfQUxRGunTKGzU.mft
File:                     8H0Q4vZ70gfvXlfQUxRGunTKGzU.mft (raw, json)
Hash identifier:          6tYS0L3gc2CCAtrUARP8qQNl/X1cSx18u2Quur796CI=
Subject key identifier:   31:18:4D:E4:58:7B:FD:EE:40:48:40:65:AA:3C:A2:EB:EF:99:27:64
Authority key identifier: F0:7D:10:E2:F6:7B:D2:07:EF:5E:57:D0:53:14:46:BA:74:CA:1B:35
Certificate issuer:       /CN=f07d10e2f67bd207ef5e57d0531446ba74ca1b35
Certificate serial:       018BDCF10758F43DE8A72B8800D104ACB0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8H0Q4vZ70gfvXlfQUxRGunTKGzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/8H0Q4vZ70gfvXlfQUxRGunTKGzU.mft
Manifest number:          0852
Signing time:             Fri 17 Nov 2023 11:01:05 +0000
Manifest this update:     Fri 17 Nov 2023 11:01:05 +0000
Manifest next update:     Sat 18 Nov 2023 11:01:05 +0000
Files and hashes:         1: 2zKukS8vbwFWR0hdZtgkYTNMA8g.roa (hash: P0ZmaXjKNL3AhjLMDRx6JxSjZ45mDKcfc/lJ/c7u/3E=)
                          2: 8H0Q4vZ70gfvXlfQUxRGunTKGzU.crl (hash: 0iyPuhs+GczkFcjDJ6VmgHTTPqGWiv1+zW07Nv2ygEw=)
                          3: rIWk3Ukt5fnjJTkWvw6f66aI_BE.roa (hash: 3j4gRjwfVY/p415v8G6hy1Q4zMCLknpvmfXasvoD5k4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:f1:07:58:f4:3d:e8:a7:2b:88:00:d1:04:ac:b0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f07d10e2f67bd207ef5e57d0531446ba74ca1b35
        Validity
            Not Before: Nov 17 11:01:05 2023 GMT
            Not After : Nov 18 11:01:05 2023 GMT
        Subject: CN=31184de4587bfdee40484065aa3ca2ebef992764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:45:81:f0:72:fa:21:6c:f5:6e:69:93:26:
                    9f:f3:29:3a:b1:98:19:db:b0:fa:7b:dc:6f:5b:d9:
                    8b:51:02:f8:5c:7d:2f:75:a8:04:8d:75:be:ee:50:
                    71:d6:a7:31:46:47:84:80:0c:eb:e7:bd:7b:2e:0e:
                    d4:7e:15:e3:23:bc:f7:45:d9:c0:19:f5:82:88:95:
                    49:e6:f0:43:44:e5:78:cc:fe:59:d5:d6:dc:3b:b4:
                    bd:4e:43:d9:c7:f0:c6:2c:59:28:0a:db:d8:37:8b:
                    7f:da:c2:3e:2c:5c:dc:e6:e9:2f:3e:88:68:fe:c1:
                    c3:02:f6:23:38:5b:d7:56:27:ca:be:f3:99:66:d6:
                    33:cc:ea:3f:bf:83:c5:ea:4f:b8:b2:83:9a:dd:2f:
                    bd:f6:aa:ad:10:8b:e3:bd:3d:86:cd:d9:26:0b:00:
                    97:01:74:b1:30:3c:16:e7:0c:cd:94:ac:f3:f0:42:
                    ff:ca:95:7d:81:aa:64:ed:67:27:0a:0e:11:85:27:
                    23:5b:fe:05:85:ed:b5:fa:6e:15:19:73:24:4a:19:
                    69:59:a2:ae:4e:87:cd:46:95:d5:29:75:52:ed:ee:
                    2f:92:78:86:eb:f5:32:d0:6d:43:dd:b6:66:bf:98:
                    b5:11:d5:20:c0:6f:55:03:9d:b9:e0:30:c3:03:3f:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:18:4D:E4:58:7B:FD:EE:40:48:40:65:AA:3C:A2:EB:EF:99:27:64
            X509v3 Authority Key Identifier:
                keyid:F0:7D:10:E2:F6:7B:D2:07:EF:5E:57:D0:53:14:46:BA:74:CA:1B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H0Q4vZ70gfvXlfQUxRGunTKGzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/8H0Q4vZ70gfvXlfQUxRGunTKGzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/8H0Q4vZ70gfvXlfQUxRGunTKGzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:93:a0:01:5d:92:29:e6:6d:48:88:c6:3f:d3:3b:47:2e:c9:
         3e:5e:3d:ca:73:78:0e:4c:11:45:fa:0f:ba:4b:a9:41:c8:0b:
         ad:0e:6e:97:95:6f:a4:e8:3a:8f:99:2b:b9:24:94:14:6e:fa:
         6d:6b:c3:ce:ba:86:b7:ac:10:56:e4:ab:03:e9:49:46:32:13:
         2e:a7:54:be:6d:e2:a8:0d:19:7f:a6:f3:56:14:53:06:4f:0b:
         87:82:e7:cb:e5:65:8d:fd:9e:ca:8c:b9:8d:a9:80:1e:02:06:
         05:50:f1:a7:00:cd:ba:1c:25:d9:05:16:6f:f4:da:9d:db:04:
         c0:59:50:10:65:ee:14:1d:be:92:65:39:63:1e:de:e5:54:fb:
         f3:de:f8:a4:2f:0f:c9:d5:49:0a:ba:55:b5:35:19:44:f9:ce:
         2f:bd:ff:7b:53:dc:c0:b3:60:0c:24:d4:25:d3:48:d0:71:b1:
         1a:08:c8:32:de:d3:a1:1a:9e:a4:07:2a:2e:3d:3b:7e:e8:41:
         11:32:4e:5c:b2:96:6a:d6:80:2b:e1:50:90:2c:99:37:29:f4:
         e1:03:8d:0a:8b:d0:0b:fb:67:5f:d1:54:8b:23:b7:da:c2:c9:
         49:24:d4:48:a6:d4:94:26:c8:1d:2c:03:a6:6c:9f:6c:7f:1b:
         e3:fa:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----