Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft
File:                     ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft (raw, json)
Hash identifier:          NwnW3CymVswPy3xv0UNEpGWEl8BgctC2qCewSFCo7Eg=
Subject key identifier:   73:15:F4:5D:FB:63:CA:DE:F8:E6:6B:DC:2F:4F:90:26:42:53:74:90
Authority key identifier: 00:B8:D5:61:FC:82:62:D1:6B:74:6D:FA:A3:74:EC:47:46:6F:5B:C0
Certificate issuer:       /CN=00b8d561fc8262d16b746dfaa374ec47466f5bc0
Certificate serial:       018A4499F754006367AF97F116AAC0555FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALjVYfyCYtFrdG36o3TsR0ZvW8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft
Manifest number:          080B
Signing time:             Wed 30 Aug 2023 04:00:55 +0000
Manifest this update:     Wed 30 Aug 2023 04:00:55 +0000
Manifest next update:     Thu 31 Aug 2023 04:00:55 +0000
Files and hashes:         1: 36bPpZW6aNjlewW8wZtT3wv1_0g.roa (hash: //nF/5zMaqRg1dNblnAzcWaThDO9WYa5kIODssG/dXY=)
                          2: ALjVYfyCYtFrdG36o3TsR0ZvW8A.crl (hash: Ru5IeoiWqnFDnyKmwqEDO2Mwp1vPpQg/uAY/YZgQUUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:44:99:f7:54:00:63:67:af:97:f1:16:aa:c0:55:5f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b8d561fc8262d16b746dfaa374ec47466f5bc0
        Validity
            Not Before: Aug 30 04:00:55 2023 GMT
            Not After : Aug 31 04:00:55 2023 GMT
        Subject: CN=7315f45dfb63cadef8e66bdc2f4f902642537490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:8c:73:52:89:79:03:55:36:db:e2:ca:23:
                    ee:7f:1d:95:9b:0e:27:92:2f:65:b7:f7:4b:30:09:
                    af:7f:ba:53:26:50:16:6e:d1:1e:25:2a:f2:9f:12:
                    f5:29:1e:93:35:77:69:41:4c:03:df:31:73:ba:30:
                    ee:da:0d:0d:00:5e:92:27:08:e3:42:45:c8:a4:1e:
                    71:0d:66:45:a9:3f:e8:e6:97:ef:0a:19:b0:96:66:
                    67:c2:17:bf:96:55:ba:1a:c5:10:b7:a5:cc:45:38:
                    47:01:bd:eb:af:59:7b:3c:f2:fb:f8:72:e5:dc:3e:
                    3a:7f:0c:5d:27:2a:68:00:f3:1b:8b:45:12:f5:59:
                    aa:22:59:64:b9:22:a8:34:2d:97:99:e9:2e:2b:98:
                    f6:46:d1:be:59:70:11:46:c0:ab:18:6c:2a:51:1d:
                    2f:b9:3d:97:77:99:e7:47:d0:f8:cc:16:fe:c8:a0:
                    39:48:dc:61:69:c6:da:93:ca:51:18:c3:21:b3:62:
                    c8:77:53:29:eb:6f:58:4c:00:8c:6b:e2:a9:06:2c:
                    25:25:cd:d2:bb:08:86:5b:e6:27:a6:e6:29:cf:65:
                    7b:4c:16:74:52:6f:9f:1a:71:24:b3:34:53:c5:2f:
                    03:e2:09:49:40:bf:14:fc:92:6c:76:f0:82:13:6c:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:F4:5D:FB:63:CA:DE:F8:E6:6B:DC:2F:4F:90:26:42:53:74:90
            X509v3 Authority Key Identifier:
                keyid:00:B8:D5:61:FC:82:62:D1:6B:74:6D:FA:A3:74:EC:47:46:6F:5B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALjVYfyCYtFrdG36o3TsR0ZvW8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b6:5c:25:86:1c:97:f0:a7:1c:f4:b9:44:87:c7:91:8f:82:
         fb:a3:de:18:ff:e4:4f:fe:ee:b3:54:51:7b:43:69:83:47:1e:
         9c:17:65:9a:53:7a:ae:42:78:27:ac:d1:77:d8:88:22:46:f6:
         6f:7b:1e:52:f2:1c:80:e1:56:da:af:34:d9:ff:69:ef:1a:40:
         bb:21:85:be:5f:c7:b6:e1:8e:96:43:13:46:ab:59:24:08:5c:
         f7:f2:60:76:00:75:71:36:db:da:a2:f6:67:72:da:57:c4:73:
         87:a6:1d:53:18:92:48:04:80:1d:35:b1:86:d7:d4:e5:bc:c9:
         af:ea:c1:62:06:8a:66:4b:9b:cc:86:7a:29:8b:9e:5a:a0:3e:
         2d:a4:37:8c:a7:3c:03:d1:83:bf:35:ba:c7:76:bb:0e:1b:72:
         b2:ec:5b:61:65:96:36:1e:4e:98:9b:73:6e:23:aa:12:53:2c:
         b8:7f:53:3a:4a:c4:0a:17:9a:a6:35:3b:64:a6:a7:64:a1:f6:
         e3:47:74:df:a6:27:06:71:c9:f5:3d:19:f6:27:24:b7:43:88:
         71:0f:d0:8a:45:af:07:c3:53:c3:75:13:09:9b:bd:07:92:8f:
         eb:33:f5:24:01:7a:83:86:f1:4a:61:43:70:11:01:07:4c:c7:
         a2:5b:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----