Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.mft
File:                     HSqIrMkSOMUydRKQzPgxJw-X9wg.mft (raw, json)
Hash identifier:          6lbcGTgIX9Og2QA546GmtkAbGpOnf5Sdo7cdLNnkdv0=
Subject key identifier:   C5:88:CD:1C:8D:94:0F:4A:3D:3B:CF:5F:85:37:04:A3:2D:DA:EC:DE
Authority key identifier: 1D:2A:88:AC:C9:12:38:C5:32:75:12:90:CC:F8:31:27:0F:97:F7:08
Certificate issuer:       /CN=1d2a88acc91238c532751290ccf831270f97f708
Certificate serial:       018B5B5646EFF43DE9B79440D07D2E06F1FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSqIrMkSOMUydRKQzPgxJw-X9wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.mft
Manifest number:          0F4D
Signing time:             Mon 23 Oct 2023 07:01:02 +0000
Manifest this update:     Mon 23 Oct 2023 07:01:02 +0000
Manifest next update:     Tue 24 Oct 2023 07:01:02 +0000
Files and hashes:         1: HSqIrMkSOMUydRKQzPgxJw-X9wg.crl (hash: F+fTZjrddPf0voAu4ORXBRR5S89XCKh15kRBrsuRZeM=)
                          2: lmRWZ6in_4BW7tPbU60jc2RYRQk.roa (hash: iDFN2SjwbRiCVvRdAxH2XsdP6i1VDNMexvLG4TTntmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5b:56:46:ef:f4:3d:e9:b7:94:40:d0:7d:2e:06:f1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2a88acc91238c532751290ccf831270f97f708
        Validity
            Not Before: Oct 23 07:01:02 2023 GMT
            Not After : Oct 24 07:01:02 2023 GMT
        Subject: CN=c588cd1c8d940f4a3d3bcf5f853704a32ddaecde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:c0:d0:d1:b8:a5:23:80:e2:a7:2e:7b:f2:
                    64:8b:52:0e:f1:2c:2b:b7:8c:63:0b:d7:60:1f:5e:
                    0c:7e:e0:b2:88:fd:6e:2e:93:77:e5:01:24:83:a7:
                    e8:22:c6:c9:c4:a8:6a:24:86:4d:e9:22:b4:35:76:
                    7c:3c:7e:2d:b7:d2:40:01:e1:45:f2:58:91:ef:8d:
                    c6:ea:d2:74:94:a3:4c:79:45:f8:35:67:74:21:ff:
                    e5:cc:2a:65:71:d9:82:67:8a:cb:e4:be:49:fc:62:
                    a0:32:8b:24:66:42:f1:9e:0e:6c:be:61:6d:fd:86:
                    9b:e6:6b:bd:71:9e:d8:33:11:82:c6:f5:8b:f4:7c:
                    b3:b4:73:7d:d0:7a:8b:50:53:7e:37:14:ec:0c:a5:
                    7f:82:c2:13:df:67:d8:80:e9:ee:a5:3e:fd:43:84:
                    c3:eb:4b:87:f4:f8:0b:ed:0d:34:29:91:8a:66:a6:
                    f7:76:e2:58:27:ab:24:06:17:ed:61:c4:f8:84:9e:
                    0c:1c:9c:40:0a:ee:7a:dc:cf:08:0f:2a:48:f0:c8:
                    28:0f:11:04:f9:e4:9c:df:22:86:40:bc:e4:cc:f5:
                    bd:83:70:e9:47:58:74:5d:34:6d:7e:34:c1:16:d3:
                    06:43:94:6e:c3:21:a3:aa:c1:b6:a9:92:59:f9:3e:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:CD:1C:8D:94:0F:4A:3D:3B:CF:5F:85:37:04:A3:2D:DA:EC:DE
            X509v3 Authority Key Identifier:
                keyid:1D:2A:88:AC:C9:12:38:C5:32:75:12:90:CC:F8:31:27:0F:97:F7:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSqIrMkSOMUydRKQzPgxJw-X9wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:83:24:a5:15:66:4a:8a:f5:20:49:19:f9:78:cf:26:9a:
         1d:60:7d:71:96:73:11:40:df:7a:7e:16:58:4f:5d:5e:ba:c9:
         4a:95:37:41:1b:b3:97:e9:69:27:41:7b:a7:b0:61:82:ea:9d:
         05:99:4d:c3:cd:c9:6f:70:39:52:d1:c1:88:84:b0:8b:02:a8:
         8e:bf:11:a7:4b:06:88:c5:9a:99:cf:55:ac:c1:51:19:04:0c:
         7a:25:c9:50:8e:a2:f1:37:44:a4:34:ff:d1:8d:c9:f3:89:33:
         0f:e8:ef:ba:84:ac:65:bd:8b:5f:f8:b8:73:49:9a:9d:a2:56:
         2a:86:36:5f:88:11:14:d2:11:db:91:f8:32:30:3d:4c:c6:c9:
         00:45:aa:1d:a2:f3:94:df:ae:b5:f7:24:56:8a:d3:e3:fd:be:
         2e:51:6a:f3:31:8f:a3:54:7d:b4:49:27:20:6e:d8:66:68:41:
         4a:eb:dd:26:54:f5:67:47:95:64:23:e3:be:03:e2:5a:7c:91:
         8d:8e:f5:4f:84:95:eb:b1:32:db:f9:5f:27:f7:43:c3:37:5d:
         10:70:3e:70:f9:47:ea:69:81:e2:be:4f:8a:5c:67:e1:06:d0:
         e5:cf:8e:bc:00:b6:4c:a1:4f:87:db:30:b5:50:36:2e:d9:5e:
         75:ec:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----