Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.mft
File:                     gNBh_jYoEdznZOaaepm49r5fKgM.mft (raw, json)
Hash identifier:          +NiNGRljilBHJ6I36xvF0I0snt4nT4adM5z3+IIAN/E=
Subject key identifier:   4C:20:8E:4F:9A:CD:55:7D:19:EF:FB:FB:3A:75:6A:A6:45:59:D4:FF
Authority key identifier: 80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Certificate issuer:       /CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Certificate serial:       018BB876F9930C44E39656877FFA2932B8A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.mft
Manifest number:          0849
Signing time:             Fri 10 Nov 2023 09:01:26 +0000
Manifest this update:     Fri 10 Nov 2023 09:01:26 +0000
Manifest next update:     Sat 11 Nov 2023 09:01:26 +0000
Files and hashes:         1: 1R_ysMxOZ6jyy9xm5fhDVtkROmo.roa (hash: 2zxxgTGVxjkKBA14AkkTpNUppVDBkZDHPdsLo6/4f+Q=)
                          2: gNBh_jYoEdznZOaaepm49r5fKgM.crl (hash: u3y27mUYYURPuNEwqM5qzl4OCHbD+sQn+eCKAqip/Ko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:76:f9:93:0c:44:e3:96:56:87:7f:fa:29:32:b8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
        Validity
            Not Before: Nov 10 09:01:26 2023 GMT
            Not After : Nov 11 09:01:26 2023 GMT
        Subject: CN=4c208e4f9acd557d19effbfb3a756aa64559d4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:97:bf:c8:5e:6b:26:3e:13:e7:02:3e:51:
                    52:1e:c9:9a:5d:3b:17:fb:0f:0c:cd:33:b7:69:99:
                    6d:4f:6e:29:ab:89:25:89:20:6c:96:f7:0b:08:1b:
                    88:92:0f:85:16:ed:4e:98:f0:7e:24:2f:e4:ec:76:
                    c8:8c:58:b4:92:c0:fb:03:85:6a:76:72:ab:32:66:
                    57:92:a1:f8:b3:68:15:69:ad:e7:c5:ac:3a:fe:51:
                    bb:e9:5a:0b:00:77:ba:36:8a:56:09:b8:13:cc:a6:
                    30:3f:68:d2:5d:49:1e:30:62:cf:ef:60:c6:d5:ae:
                    e6:27:ed:9f:d8:e9:12:47:53:89:ad:66:de:d5:83:
                    a6:70:7a:ef:99:c5:3a:17:2b:91:46:39:23:81:1c:
                    25:33:b1:c7:58:03:4e:12:1b:fc:45:bf:73:52:c7:
                    da:88:0f:6f:a1:6f:6b:6d:9e:a9:2f:60:30:b7:e1:
                    1d:0b:83:84:75:7c:eb:83:70:d5:03:df:a3:bc:cd:
                    c6:db:fe:0e:13:66:7d:96:4d:04:34:21:91:a1:77:
                    bf:c9:60:94:71:05:90:36:85:69:33:0c:10:6a:ce:
                    30:d9:92:ce:5d:ef:c9:ba:aa:d8:0c:93:39:49:f5:
                    89:dd:23:fa:ee:fa:ad:9f:08:46:1c:ae:10:f5:92:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:20:8E:4F:9A:CD:55:7D:19:EF:FB:FB:3A:75:6A:A6:45:59:D4:FF
            X509v3 Authority Key Identifier:
                keyid:80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:fb:2f:76:4d:05:f6:63:43:76:90:ac:1b:9d:af:f8:b6:
         eb:fc:42:a7:6f:42:2d:65:43:01:0a:22:66:bd:1f:68:20:36:
         bf:41:ed:51:0b:2e:ce:b4:08:36:df:64:9b:b7:02:ab:dc:43:
         24:84:54:1f:45:27:2a:a9:c5:57:98:71:a3:b2:aa:c6:9c:53:
         76:9e:b0:f8:90:fc:2a:ee:38:b9:2e:78:db:66:48:c1:8c:7b:
         30:c0:32:db:25:de:17:cc:48:ac:81:47:27:86:ba:3e:b0:a1:
         49:8c:6f:02:3f:0c:18:2d:b8:bd:5a:ea:1a:4f:3c:bb:20:42:
         25:83:79:e0:0b:36:e7:cc:e5:36:fb:6a:8e:0c:d5:9c:4e:7d:
         18:27:51:33:b4:c5:e6:00:9e:62:16:9c:14:33:0c:6e:c0:8c:
         0f:07:c5:ed:16:f4:c9:cc:1e:35:fd:21:13:a1:23:0c:35:74:
         e3:9e:50:88:9c:f5:02:b5:b3:70:06:0b:7e:ce:a0:f4:91:02:
         3a:1f:70:a4:36:cf:b7:ca:0e:be:6d:e0:93:a5:88:5d:86:d4:
         b2:f8:54:69:dd:83:62:39:f8:1b:40:1c:d7:37:f2:ee:28:d8:
         5b:51:d4:ab:ad:88:52:f6:85:73:ee:94:43:40:a6:74:9c:ce:
         5d:a5:9f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----