Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/87WhfhIFXVSiKlziWG797NDb6uc.mft
File:                     87WhfhIFXVSiKlziWG797NDb6uc.mft (raw, json)
Hash identifier:          YNmK/aZyQ7zVKkYZ2F4fP2yj+wQRfjQesPBICNboUhA=
Subject key identifier:   A2:A2:57:DC:CF:18:C2:61:CE:74:65:5E:AF:FB:7F:11:E8:29:38:C0
Authority key identifier: F3:B5:A1:7E:12:05:5D:54:A2:2A:5C:E2:58:6E:FD:EC:D0:DB:EA:E7
Certificate issuer:       /CN=f3b5a17e12055d54a22a5ce2586efdecd0dbeae7
Certificate serial:       018C8B2DE36242CEEC93756EBF277F70F631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WhfhIFXVSiKlziWG797NDb6uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/87WhfhIFXVSiKlziWG797NDb6uc.mft
Manifest number:          0544
Signing time:             Thu 21 Dec 2023 07:01:29 +0000
Manifest this update:     Thu 21 Dec 2023 07:01:29 +0000
Manifest next update:     Fri 22 Dec 2023 07:01:29 +0000
Files and hashes:         1: 87WhfhIFXVSiKlziWG797NDb6uc.crl (hash: Y7/n7zjZ+AG8yDdOwyzc1ftNO7TrbvYPk0dhtx7rpn4=)
                          2: wUYeKRuJ7oco7uvuMNTqjY6ncTk.roa (hash: dAZCDqAG0bcDbu2xNEe08nH/+HkGGGla08V2hx4B25w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:2d:e3:62:42:ce:ec:93:75:6e:bf:27:7f:70:f6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a17e12055d54a22a5ce2586efdecd0dbeae7
        Validity
            Not Before: Dec 21 07:01:29 2023 GMT
            Not After : Dec 22 07:01:29 2023 GMT
        Subject: CN=a2a257dccf18c261ce74655eaffb7f11e82938c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:32:03:ef:12:a0:f3:a9:88:3b:97:df:3b:
                    ca:4c:4b:9d:de:08:b3:00:fd:1a:69:7a:7c:ed:42:
                    ba:56:c7:de:7f:1e:b1:a7:63:26:97:40:e3:1d:00:
                    ec:c6:f4:61:b2:ef:77:8c:37:d7:33:3f:a7:f8:64:
                    22:4f:11:ec:4c:4a:76:70:1d:75:91:a8:dc:f8:44:
                    34:83:b9:7d:81:45:ff:a3:89:af:66:ad:1f:e4:36:
                    7f:28:2e:16:e2:34:3a:b2:2f:b6:74:84:27:4c:a4:
                    1b:7d:ec:06:34:75:a6:2c:4e:85:e3:3c:f4:58:c2:
                    8f:56:99:f9:d0:a0:a7:56:df:fe:38:fc:a2:5e:f1:
                    22:50:e0:25:87:97:10:79:84:17:eb:fd:20:2a:80:
                    b9:d0:67:08:80:57:7b:6c:2f:72:c0:6c:ba:8b:d7:
                    cb:18:f6:22:21:21:71:6d:4f:5d:04:6f:f8:dd:ed:
                    ef:64:9a:d1:0f:e9:b7:88:c8:16:17:8f:14:c1:23:
                    60:bf:4e:a7:10:76:36:18:63:7e:c9:55:45:38:fd:
                    bc:d1:b4:08:56:3c:96:dc:8d:d4:8b:c8:a8:97:c1:
                    5a:a2:20:b4:60:96:6a:27:30:cc:61:b9:ff:62:fc:
                    99:e7:b0:c9:86:c5:3e:85:6d:52:86:c2:ed:61:cb:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:57:DC:CF:18:C2:61:CE:74:65:5E:AF:FB:7F:11:E8:29:38:C0
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A1:7E:12:05:5D:54:A2:2A:5C:E2:58:6E:FD:EC:D0:DB:EA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WhfhIFXVSiKlziWG797NDb6uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/87WhfhIFXVSiKlziWG797NDb6uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/87WhfhIFXVSiKlziWG797NDb6uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:96:00:fb:b0:e3:6a:5e:33:d7:ff:0e:76:06:b9:fa:23:76:
         c1:1e:26:d0:02:51:2b:0b:e0:da:c4:92:46:dc:7e:1e:1b:c1:
         36:f1:1c:20:f4:59:50:1f:62:07:7d:28:68:c3:23:16:92:dd:
         09:40:a3:86:04:ec:97:09:63:42:2c:b3:c4:10:b7:61:3a:08:
         2f:cc:a8:03:82:f6:d9:a1:8c:7d:11:57:bf:f6:9c:f6:7e:92:
         cd:39:f3:28:75:16:ee:55:9b:47:04:61:3f:df:dd:70:57:7c:
         e4:5d:10:9a:ce:b0:f2:27:8a:ba:44:d7:d5:85:3d:80:29:6f:
         31:e2:50:d1:a5:9a:f3:99:b8:42:c2:f4:66:c8:04:9b:41:ac:
         99:48:ab:9f:50:4c:cb:9b:66:e3:b1:62:f8:21:8e:b1:f2:9b:
         34:ad:ba:1a:d5:e5:e7:ca:f3:ff:5d:fd:6e:2f:d2:da:bf:e1:
         8c:3c:8f:30:9d:1e:9e:87:12:ac:79:05:65:3e:87:c0:74:ca:
         ff:40:db:f8:8c:0d:cd:4d:83:f3:86:03:36:45:37:b1:ad:aa:
         37:64:20:59:9f:a5:9a:7b:17:e0:56:03:48:88:02:da:4f:ae:
         b9:94:45:3a:16:33:10:5b:22:93:68:ff:54:3e:44:c7:b0:45:
         98:7f:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----