Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/8G0UyDUd2El4G3ZbTh7xiXsDiR0.mft
File:                     8G0UyDUd2El4G3ZbTh7xiXsDiR0.mft (raw, json)
Hash identifier:          /TWhGnVG/e2dWiMm6sKzv3fevI90A1pNG3JD8m32zko=
Subject key identifier:   40:DF:BB:D6:DC:E7:B5:84:DD:4F:91:DC:44:84:20:EA:A9:7C:88:2E
Authority key identifier: F0:6D:14:C8:35:1D:D8:49:78:1B:76:5B:4E:1E:F1:89:7B:03:89:1D
Certificate issuer:       /CN=f06d14c8351dd849781b765b4e1ef1897b03891d
Certificate serial:       01866D2056B04034887626C01A6CB132F499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8G0UyDUd2El4G3ZbTh7xiXsDiR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/8G0UyDUd2El4G3ZbTh7xiXsDiR0.mft
Manifest number:          0904
Signing time:             Mon 20 Feb 2023 04:41:21 +0000
Manifest this update:     Mon 20 Feb 2023 04:41:21 +0000
Manifest next update:     Tue 21 Feb 2023 04:41:21 +0000
Files and hashes:         1: 8G0UyDUd2El4G3ZbTh7xiXsDiR0.crl (hash: 1+pX3ZSPKCs9cxdadmD5z8ovzZUu9jZ+oZTubHoTt2k=)
                          2: f4L5i_p3RaZnLghOGzGoJ4W5e6A.roa (hash: tVuxlnKXf1WBk/J39quksni1K0tcxWRKInGzVWNp8g8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6d:20:56:b0:40:34:88:76:26:c0:1a:6c:b1:32:f4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06d14c8351dd849781b765b4e1ef1897b03891d
        Validity
            Not Before: Feb 20 04:41:21 2023 GMT
            Not After : Feb 21 04:41:21 2023 GMT
        Subject: CN=40dfbbd6dce7b584dd4f91dc448420eaa97c882e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:fd:b9:82:f7:c8:8e:9e:10:75:d6:42:b6:
                    4e:c0:29:14:7c:d4:87:af:53:ef:d3:e6:32:cf:e2:
                    ba:7c:dd:d7:47:fb:91:7a:5d:0a:05:4d:41:cf:20:
                    43:e1:30:61:29:db:e1:c1:82:72:54:8f:7e:e4:9a:
                    4b:e0:a8:38:5f:35:94:b6:fa:01:27:a1:a4:f1:33:
                    d7:6f:38:d4:6f:01:d7:ea:5f:4f:e6:bd:4b:3c:3b:
                    c5:86:56:02:8a:34:9a:54:93:be:5b:a2:42:aa:fe:
                    d2:ff:e3:7b:e1:71:6f:7e:f7:0c:f6:0a:8c:13:79:
                    7f:98:91:2c:90:0f:4f:53:ea:d3:77:fb:0c:e7:8c:
                    78:23:12:7a:79:14:e7:4d:2e:4c:43:b5:de:93:34:
                    d5:29:36:b2:38:2a:64:3c:24:62:0e:8e:17:44:79:
                    86:2b:5a:a6:f5:8d:00:f5:8d:51:cb:b5:2a:e2:43:
                    20:ad:f4:58:16:65:de:4e:45:b3:68:f7:c8:28:7e:
                    9b:bb:6d:4a:f9:e2:5f:23:b7:36:5b:cd:b6:1c:b5:
                    11:c4:49:0e:13:e3:b4:f6:95:4c:63:d6:6d:a7:8f:
                    00:7a:2c:ac:e0:cf:16:97:db:87:4e:73:ca:fd:36:
                    af:fe:31:02:f4:e9:9f:5f:f5:2a:48:fd:ac:b2:c7:
                    97:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DF:BB:D6:DC:E7:B5:84:DD:4F:91:DC:44:84:20:EA:A9:7C:88:2E
            X509v3 Authority Key Identifier:
                keyid:F0:6D:14:C8:35:1D:D8:49:78:1B:76:5B:4E:1E:F1:89:7B:03:89:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G0UyDUd2El4G3ZbTh7xiXsDiR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/8G0UyDUd2El4G3ZbTh7xiXsDiR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/0d3ca1-acc4-43eb-803f-74abc79248bd/1/8G0UyDUd2El4G3ZbTh7xiXsDiR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:87:ce:08:c9:96:0b:c2:7b:17:35:0b:68:29:0b:b5:d2:c9:
         a6:73:9c:1f:b9:3e:55:41:ee:ea:bb:0b:7a:81:e5:be:96:95:
         7b:db:76:58:32:35:5d:9e:f8:bf:f6:c8:ed:56:ee:ba:5b:a2:
         a9:79:db:79:71:65:81:59:0e:1e:f6:52:51:42:96:f5:39:b9:
         cc:76:fa:eb:c3:9b:74:a0:40:5e:ce:ac:72:61:b9:50:6c:d5:
         51:6d:96:cf:77:9a:7c:67:11:c1:13:87:a3:e2:fd:35:56:59:
         07:6a:cc:f6:7c:27:9e:a3:45:e1:c9:8e:ee:0d:5d:b4:cc:86:
         6e:89:61:7a:2a:9d:64:d9:b8:7f:16:41:94:7a:07:cc:e3:16:
         71:47:3c:04:d4:c4:e1:5b:0c:13:5c:bc:fd:ad:a9:d4:e2:cd:
         88:af:9d:9f:07:79:10:6a:92:be:a0:82:47:14:41:09:53:31:
         d5:a3:67:f8:63:68:e2:10:fe:80:d8:ad:d0:1d:68:c1:f2:0e:
         38:9c:b3:c6:ea:3b:20:c6:94:c2:06:42:80:cf:d6:36:e0:d6:
         f4:08:f5:82:4b:12:80:d7:9c:65:a8:73:1b:5b:b0:ed:7b:1f:
         92:42:1d:0c:a4:4d:e5:59:ee:35:e3:a7:aa:2b:f2:61:95:57:
         14:d8:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----