Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft
File:                     aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft (raw, json)
Hash identifier:          d83pPWVM6rySHfeRF/bAyD5lTF5ZXRpngYbtDA+Z0ZA=
Subject key identifier:   5B:1F:72:58:15:75:65:6B:3C:92:EC:2F:AA:82:36:4E:3D:65:B4:9A
Authority key identifier: 68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC
Certificate issuer:       /CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
Certificate serial:       018AD081F8550B202E8E1A42A9170CD7C7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft
Manifest number:          0868
Signing time:             Tue 26 Sep 2023 08:01:33 +0000
Manifest this update:     Tue 26 Sep 2023 08:01:33 +0000
Manifest next update:     Wed 27 Sep 2023 08:01:33 +0000
Files and hashes:         1: 7J2coi8yjwZkMqksfQxoD2pyv28.roa (hash: FExrhrjYpiKwZMXkEi+7eC1iv1IKNKByaZN9Qo7L4bI=)
                          2: aMEv-mJ_DRuDTBvJHkdtzlqVXbw.crl (hash: 1JB0Kr5GBjVz/ALkNKGover4WBraFfNA5LPV4AMkDLs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d0:81:f8:55:0b:20:2e:8e:1a:42:a9:17:0c:d7:c7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
        Validity
            Not Before: Sep 26 08:01:33 2023 GMT
            Not After : Sep 27 08:01:33 2023 GMT
        Subject: CN=5b1f72581575656b3c92ec2faa82364e3d65b49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:26:67:67:23:cd:96:68:c6:75:a5:0c:0a:
                    b3:74:d5:98:7d:74:49:b5:f7:49:56:2a:14:64:d5:
                    21:c6:43:db:33:7b:b2:2e:a9:a1:2f:06:fe:ef:83:
                    be:8a:e9:89:1e:d7:bd:58:64:2d:ab:6f:9f:e1:63:
                    10:af:80:c1:81:42:0b:84:ca:77:f0:c2:c8:48:05:
                    fd:52:39:a9:09:cc:8c:f7:46:26:0c:99:16:0f:c8:
                    c0:83:e6:6a:3e:07:d3:3e:38:b2:0e:23:94:c5:67:
                    56:eb:09:0a:2f:9e:90:7f:e9:08:9d:8a:96:45:ee:
                    8e:80:bc:fd:b2:13:ea:fd:5d:15:3c:61:e8:fe:5e:
                    d3:df:eb:e6:70:90:7f:54:2c:ca:27:9e:ce:52:29:
                    4b:de:a7:9a:bc:17:e5:9a:bf:bf:ef:14:fc:ab:c6:
                    ad:d2:fb:d9:da:25:17:cb:ae:91:fb:44:12:ed:0c:
                    79:64:02:d9:48:38:2e:95:3d:84:62:cd:c4:74:03:
                    ee:97:9c:91:79:71:e8:32:5b:9d:ae:f0:eb:a4:17:
                    98:22:30:de:eb:cf:e4:b6:6a:dc:bb:b1:12:9c:c3:
                    5d:6c:a1:66:fc:b1:e6:84:41:ff:24:45:5c:29:13:
                    75:78:0d:4e:b1:91:c4:f1:97:0a:e0:ec:5b:f1:f8:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:72:58:15:75:65:6B:3C:92:EC:2F:AA:82:36:4E:3D:65:B4:9A
            X509v3 Authority Key Identifier:
                keyid:68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a3:f4:ef:e1:de:ce:38:de:86:e4:07:4c:93:94:88:20:8f:
         e8:3b:87:7c:cb:88:0d:98:65:0f:28:4a:20:af:96:92:c1:5a:
         66:8c:2a:79:50:05:db:a5:ef:31:c1:29:ac:ad:b1:41:94:ab:
         45:a8:4a:d4:12:03:df:08:6f:8d:11:18:7b:d0:6f:20:01:65:
         5e:42:07:33:78:78:00:22:da:cf:e6:6e:ba:35:9e:ca:c3:76:
         32:99:75:b8:54:20:d2:52:9b:d4:5d:cc:8e:e5:6e:65:c6:0d:
         5b:c7:21:39:e6:ec:16:d4:f0:2b:e8:23:af:41:5c:56:3e:17:
         97:3d:e4:d3:ac:7b:3c:11:4c:87:ce:f3:9c:43:04:31:31:4c:
         2e:d6:4e:39:88:bb:c7:cf:cf:dd:04:75:50:69:8f:d3:5c:5f:
         41:89:e9:3c:c7:59:4c:32:37:33:fc:ac:33:7a:90:60:27:26:
         dd:1c:92:17:f7:79:6c:5d:e5:e7:00:23:e5:33:55:b5:cf:a2:
         92:a8:3c:24:d8:e5:aa:23:af:05:b0:a9:db:6b:ed:8a:0c:c6:
         78:6f:c0:58:34:cd:27:83:30:e7:ba:e2:d0:d0:31:28:2c:f0:
         fc:a4:7f:97:ef:b0:61:0d:fe:fa:86:eb:36:0f:fb:38:49:0a:
         c2:6c:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----