Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.mft
File:                     otvz3s6IL62KI3Ro4I_XvrHK-jk.mft (raw, json)
Hash identifier:          sD4IHD4Hj+D74RyrxrWBMRi/jtOqf1ytNVEUNYW8UKg=
Subject key identifier:   9A:1E:12:E2:6A:13:F7:04:FA:DB:2E:C2:74:88:86:D8:E4:4A:BA:3D
Authority key identifier: A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
Certificate issuer:       /CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Certificate serial:       018BEB19E62C428B4DE9EA59272E8B9349B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.mft
Manifest number:          0872
Signing time:             Mon 20 Nov 2023 05:00:24 +0000
Manifest this update:     Mon 20 Nov 2023 05:00:24 +0000
Manifest next update:     Tue 21 Nov 2023 05:00:24 +0000
Files and hashes:         1: SOiTtQ6iQJ8X7ro1QNXPF9iD_ag.roa (hash: JFRjJxy/wIOupzpGhi7ac4xNwrqTujtJIZ/rqPLhl/A=)
                          2: otvz3s6IL62KI3Ro4I_XvrHK-jk.crl (hash: M6lMTszEIlinRoFE0Hz0w2pFUcU2yK5UJmnYbazPLXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:19:e6:2c:42:8b:4d:e9:ea:59:27:2e:8b:93:49:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
        Validity
            Not Before: Nov 20 05:00:24 2023 GMT
            Not After : Nov 21 05:00:24 2023 GMT
        Subject: CN=9a1e12e26a13f704fadb2ec2748886d8e44aba3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:8e:2b:2b:85:39:15:f4:ce:7e:1e:dd:d3:
                    b7:06:cd:ec:34:49:84:d0:3d:3c:9c:11:ba:3a:74:
                    f9:6c:6e:55:d7:dd:f5:57:4f:a4:bf:fb:35:a4:b2:
                    58:91:b0:40:82:16:0c:71:4d:4b:2e:34:80:13:fa:
                    be:0f:61:e1:7e:9a:47:35:46:eb:df:f8:7e:8e:54:
                    4b:47:af:5e:03:8b:7e:e0:fe:8c:44:cf:3d:34:b0:
                    3c:17:bc:88:0b:78:d0:61:5d:06:e5:db:f5:4e:8c:
                    29:39:5c:6d:b1:69:c4:ca:7d:b0:3d:41:7e:04:46:
                    1b:f6:f3:e3:f5:03:ba:a7:dd:82:ac:66:f5:02:5a:
                    c4:c1:e6:58:87:c5:f4:8c:67:ed:03:a8:72:8a:15:
                    2f:e1:7a:9b:1d:b1:05:ae:89:3d:8f:7d:53:43:59:
                    6c:d8:c0:43:04:be:de:5f:38:4d:47:45:0c:4b:86:
                    73:b8:b9:47:4c:13:2e:bc:c1:8d:fd:ef:59:a7:b4:
                    99:dd:63:2d:65:90:a4:fa:01:5e:8f:da:e8:ca:d0:
                    07:b6:15:ee:ea:64:f4:8f:ef:b0:e9:3e:dd:61:c1:
                    97:3e:5e:fc:70:1f:65:60:fa:d1:53:ba:26:11:dc:
                    1e:5f:ba:b9:e0:60:79:f0:2b:1c:a8:9c:18:2a:b9:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1E:12:E2:6A:13:F7:04:FA:DB:2E:C2:74:88:86:D8:E4:4A:BA:3D
            X509v3 Authority Key Identifier:
                keyid:A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cc:f9:27:b3:79:98:e8:69:0a:bf:f6:41:97:7c:b9:4c:a4:
         4a:cf:4a:c0:53:d4:c7:e5:bd:cd:44:0c:bf:e7:20:8d:6a:e9:
         9f:cc:71:7a:87:45:e0:b8:34:f6:b6:16:db:d6:4f:52:d9:98:
         65:f1:dd:e2:96:9d:11:b1:4d:36:d9:0b:67:8c:ea:5c:f0:b9:
         5a:25:b6:2d:bd:61:a9:4b:96:99:27:73:0c:70:43:23:0e:5c:
         2a:3d:b6:0b:e0:f3:33:3e:01:cf:3d:00:22:d6:0f:df:39:e9:
         57:0c:1c:ff:72:be:07:51:55:90:73:02:8f:a9:8d:ea:4f:b4:
         4f:05:77:80:f2:a6:60:56:7d:f6:10:20:3f:e2:aa:c5:09:b2:
         3c:dc:13:ca:5d:3b:2d:b2:c5:be:a4:27:87:d3:ac:cc:df:1c:
         a3:ac:b4:97:82:98:41:de:25:be:f2:92:c6:06:e1:b7:91:c7:
         8d:2f:6f:48:4f:a1:0b:21:72:fe:1e:82:df:96:78:34:c2:20:
         38:d4:b5:43:4a:ca:4c:2d:ed:f7:7a:12:43:ae:bf:ba:7a:25:
         53:7d:54:a7:bb:5b:eb:2a:af:47:82:c8:14:33:bc:23:4c:52:
         4f:78:0e:63:fa:ea:ed:3f:3d:f2:32:43:e6:02:b3:b8:83:53:
         05:e1:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----