Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.mft
File:                     Pw5J60UHCM9kdAuqjOLRmH0iyRU.mft (raw, json)
Hash identifier:          nPzCvvQGNpB9RTPP2Cxg9+RLzJWMPl5ebAb+tY7gNsE=
Subject key identifier:   E5:38:8C:6A:CC:F9:3B:CF:4D:FD:E1:8B:52:B4:65:AB:6B:36:21:9D
Authority key identifier: 3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
Certificate issuer:       /CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
Certificate serial:       018C246561F1AFB65E2B017AC825AE5ED28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.mft
Manifest number:          08CB
Signing time:             Fri 01 Dec 2023 08:01:12 +0000
Manifest this update:     Fri 01 Dec 2023 08:01:12 +0000
Manifest next update:     Sat 02 Dec 2023 08:01:12 +0000
Files and hashes:         1: Dh-GJThnZBUmBEAU_C7QHPIkUns.roa (hash: N5TB5SHqn6PnRiHPdKmPvNKMvp9cu2Z9wsKZM+sBU0k=)
                          2: Pw5J60UHCM9kdAuqjOLRmH0iyRU.crl (hash: V1DHLWGLbHWJt3Zox4IyN1mVOy2ltBfoVYPpUwuJi9I=)
                          3: VhB8q2tv7yhMS7JiFWfim6xCu-Q.roa (hash: VKeWoqglde9ANn6DEy4xar3RVOlzo8metQh8fOMUyo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:24:65:61:f1:af:b6:5e:2b:01:7a:c8:25:ae:5e:d2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
        Validity
            Not Before: Dec  1 08:01:12 2023 GMT
            Not After : Dec  2 08:01:12 2023 GMT
        Subject: CN=e5388c6accf93bcf4dfde18b52b465ab6b36219d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:3f:2c:ae:8a:c6:ab:8a:d7:ce:66:92:89:
                    16:d9:27:b1:a2:c2:2c:bb:0d:11:b1:fb:0c:23:7f:
                    98:16:b5:ca:07:c3:c7:b3:1e:57:07:ed:42:88:bc:
                    f9:79:2a:d8:35:61:59:e8:13:0d:08:c6:60:5a:26:
                    7e:d1:95:81:ed:23:72:48:cc:95:22:b1:7d:e4:26:
                    08:af:79:2c:c8:c1:c8:2f:72:06:7b:5e:56:f3:a5:
                    4f:f7:92:4d:17:88:74:27:f1:03:c1:a9:77:ac:8e:
                    6f:e8:95:e2:96:00:7a:8a:15:7c:56:5d:8a:27:45:
                    83:db:4b:0d:db:33:fa:10:89:50:44:2f:74:ab:b7:
                    74:d4:7e:d1:d8:8f:35:d0:2d:35:11:bb:e2:62:77:
                    f8:c0:c7:f7:79:7d:22:fe:92:ff:4c:a4:e5:71:e8:
                    20:5b:04:6a:9c:73:e3:f3:0b:8c:7d:41:7f:e6:7e:
                    40:b1:ac:f3:1d:ac:be:15:06:47:7c:6f:a5:80:97:
                    3b:8e:6e:c5:ed:32:8c:31:c8:62:9a:9d:f6:18:84:
                    f1:4a:e2:6d:d7:e3:81:40:f1:4d:8e:3a:4b:64:59:
                    ad:10:26:81:9b:eb:80:aa:c9:92:ca:b9:3a:44:54:
                    7e:63:55:6c:fb:28:0e:af:38:ab:bb:c4:87:cd:0e:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:38:8C:6A:CC:F9:3B:CF:4D:FD:E1:8B:52:B4:65:AB:6B:36:21:9D
            X509v3 Authority Key Identifier:
                keyid:3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:e4:06:71:15:15:54:74:eb:84:fa:6f:93:62:cc:39:73:
         0b:e1:1d:6e:fb:06:92:f4:b4:b6:4b:e6:fd:12:2a:b0:d7:2c:
         7a:7c:07:c3:a8:74:18:6b:98:8e:ce:7f:02:f9:fe:92:0e:65:
         f6:dd:51:55:71:38:3b:ee:80:0b:61:df:2f:5b:a2:83:50:d0:
         ba:a5:ef:7e:8f:fb:5a:2c:0e:37:1f:14:8a:22:e2:01:78:09:
         76:6e:64:a5:72:35:9b:f2:07:b9:e0:63:d1:3f:b4:1b:e4:74:
         c5:b8:0e:87:f6:b4:fb:37:0f:ce:28:c1:b1:95:fb:0e:27:5f:
         c2:4a:11:3a:32:2d:49:d4:23:83:aa:38:f7:3c:6a:f9:69:a8:
         dd:f6:83:a7:32:49:1d:3f:7b:21:5c:0e:f5:62:77:2a:ce:a1:
         ed:58:d2:05:22:1a:ed:a3:5b:cd:ba:60:a7:69:c9:e1:ac:4a:
         58:f5:f6:35:96:9f:07:5f:e8:77:9d:31:4c:84:f8:56:b4:2e:
         c4:ec:c0:32:dd:d0:99:94:64:40:97:2a:0b:b1:e8:3a:e9:0e:
         d5:0b:00:40:51:ca:3f:c3:46:80:2b:67:e2:bf:5b:01:8d:04:
         11:76:5a:18:c9:11:36:6e:78:de:df:04:01:e1:15:5f:16:68:
         da:87:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----