Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
File:                     ByF8BjTBAscbo-RE8GiKvdGvTOg.mft (raw, json)
Hash identifier:          CALRfThhpmgoB+AHSTJWJkB0jgLFG+KmxiqG4DPGixs=
Subject key identifier:   94:64:04:7C:AC:54:58:D1:B3:19:55:4C:E4:3F:73:09:66:53:FB:48
Authority key identifier: 07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8
Certificate issuer:       /CN=07217c0634c102c71ba3e444f0688abdd1af4ce8
Certificate serial:       018CCA0CF8918893892BD715D8C5B13E93CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByF8BjTBAscbo-RE8GiKvdGvTOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
Manifest number:          1012
Signing time:             Tue 02 Jan 2024 12:01:36 +0000
Manifest this update:     Tue 02 Jan 2024 12:01:36 +0000
Manifest next update:     Wed 03 Jan 2024 12:01:36 +0000
Files and hashes:         1: ByF8BjTBAscbo-RE8GiKvdGvTOg.crl (hash: LryTPtrAagGpOpDu0uctvPzIzR/uC6HGak/tIhBKjzg=)
                          2: FRZAkwaBFN4eCMivFm1ndTqH7i8.roa (hash: uW+W8NN4YXjHoJvHddhlWNoM8/vHm9XWFaPD6lEqRo0=)
                          3: GRAcCw7u7aFKixVetJ4_ry0M47U.roa (hash: BfidvZbBpkz+5E9XcvbDoH/8UzBxwTljoU29CRprfWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:0c:f8:91:88:93:89:2b:d7:15:d8:c5:b1:3e:93:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07217c0634c102c71ba3e444f0688abdd1af4ce8
        Validity
            Not Before: Jan  2 12:01:36 2024 GMT
            Not After : Jan  3 12:01:36 2024 GMT
        Subject: CN=9464047cac5458d1b319554ce43f73096653fb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:32:35:ce:74:ef:e3:c1:ae:6e:21:5d:83:
                    49:23:9d:1e:6a:67:2c:31:45:9c:6e:0c:f6:9b:cf:
                    65:f2:e5:81:7b:5b:91:b0:bf:fd:e2:39:78:82:a5:
                    1e:d2:9c:75:14:51:28:c7:bf:12:72:44:9b:3b:29:
                    f4:75:77:3d:41:98:83:60:e9:00:8b:b7:5e:3e:9f:
                    8e:0c:a9:a7:43:d2:69:fd:12:f3:f5:8d:e2:56:c4:
                    90:8e:85:ac:96:5f:7a:67:68:c2:75:d5:75:e7:e1:
                    dd:cb:21:eb:6b:e9:8a:2d:c2:8a:1e:6b:85:6e:20:
                    89:4e:c0:8a:c3:82:cb:32:1f:e2:6b:77:c3:31:a6:
                    08:f5:6d:b9:33:4e:39:9f:00:60:1a:74:d1:fe:12:
                    79:88:5c:94:97:c6:9b:34:ea:9e:03:44:ad:6a:80:
                    ea:c0:2b:20:cd:e5:0a:6c:69:06:bc:1d:bd:27:87:
                    5e:8b:aa:c2:f4:59:fc:73:8b:24:cf:0b:7c:87:9c:
                    42:b6:c2:0f:0e:9f:3e:3b:03:51:76:e7:c9:c6:f7:
                    68:7a:f8:61:c2:79:42:94:4c:7f:73:17:94:34:f3:
                    ca:fa:42:91:07:81:5f:cc:3b:c3:e6:1f:6c:ce:83:
                    a7:31:40:f6:61:90:94:14:e4:08:35:f9:47:b4:27:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:64:04:7C:AC:54:58:D1:B3:19:55:4C:E4:3F:73:09:66:53:FB:48
            X509v3 Authority Key Identifier:
                keyid:07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByF8BjTBAscbo-RE8GiKvdGvTOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:58:69:51:15:49:f2:e3:b1:e7:44:33:53:6e:a7:0f:43:
         bf:db:e0:73:4a:60:e7:e5:ae:d5:b9:fd:72:77:32:7e:51:87:
         1d:f3:9a:fd:47:6e:b0:29:8e:a8:bf:28:97:4f:72:f3:39:af:
         a0:b8:01:15:6f:42:ac:34:ab:b5:db:9b:4c:93:0d:5a:01:69:
         a5:3a:0e:6a:8c:e2:8d:ec:5e:03:0f:f3:0f:6f:33:0a:77:15:
         1a:cb:0a:44:2a:56:bf:3d:2d:d8:8a:57:d4:5f:37:00:ff:70:
         02:65:05:5c:4b:d7:79:80:57:da:b6:7d:56:62:ba:bd:47:c6:
         bd:48:4f:f8:0e:80:ae:9e:6c:01:3f:0d:b1:64:a6:cc:d1:5d:
         03:6e:90:4b:c0:0a:2f:29:bc:52:18:f8:1c:aa:32:85:a6:1f:
         45:3a:cc:98:41:8e:d9:1f:c4:cc:e5:07:58:e1:55:61:dd:ad:
         d2:b5:e2:2a:11:5a:53:27:fa:8f:5c:a5:f5:ae:5a:fa:60:30:
         45:ba:a8:d9:0b:27:e8:ac:d9:06:0c:27:84:aa:2a:b8:84:a3:
         b3:a9:37:62:f2:74:d3:01:a9:6c:8e:25:e3:3b:51:c1:d7:e6:
         af:51:50:3b:9f:35:06:30:54:ee:01:4f:67:aa:4b:06:61:54:
         94:fe:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----