Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft
File:                     Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft (raw, json)
Hash identifier:          U0T8YHESaEE5PTToREmmH1T48yhVy/FyNdPJ5VD0Xd4=
Subject key identifier:   B1:2C:AB:B1:91:05:07:02:F9:26:A5:90:97:6E:09:C1:E6:83:87:EA
Authority key identifier: 02:0E:19:56:85:D6:23:12:B8:60:3C:CC:74:86:4C:FE:8C:D3:64:8E
Certificate issuer:       /CN=020e195685d62312b8603ccc74864cfe8cd3648e
Certificate serial:       018B5C9FB0D43B0CE24F6F78B9C9D53418D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft
Manifest number:          0830
Signing time:             Mon 23 Oct 2023 13:00:51 +0000
Manifest this update:     Mon 23 Oct 2023 13:00:51 +0000
Manifest next update:     Tue 24 Oct 2023 13:00:51 +0000
Files and hashes:         1: Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.crl (hash: WDBsqRsrYRH9YXeS4ommv90Q25briq4EZOC9eoN9RAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5c:9f:b0:d4:3b:0c:e2:4f:6f:78:b9:c9:d5:34:18:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020e195685d62312b8603ccc74864cfe8cd3648e
        Validity
            Not Before: Oct 23 13:00:51 2023 GMT
            Not After : Oct 24 13:00:51 2023 GMT
        Subject: CN=b12cabb191050702f926a590976e09c1e68387ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:4a:cf:90:e0:1b:01:2c:5b:41:70:ea:33:
                    19:41:85:31:90:af:2e:e9:a3:75:d6:a0:06:2c:c1:
                    72:ba:4e:32:92:22:d7:e6:99:0e:02:6a:df:ef:be:
                    56:0d:0a:28:75:a8:6d:71:90:9e:f2:23:7d:8a:56:
                    20:63:15:c2:ea:e3:c2:9a:35:e7:0b:e6:57:f2:6d:
                    23:fc:c2:c2:d7:0d:19:59:a4:fc:1c:2e:dd:72:03:
                    8f:ea:77:af:64:ea:47:69:ff:a2:cc:4c:b2:13:39:
                    43:53:1a:32:e0:9d:77:c1:0d:78:c8:5a:86:cf:b6:
                    7d:7c:3e:86:94:10:e1:19:5a:0e:67:2c:1b:cd:38:
                    24:59:18:ee:32:1d:cc:5e:35:57:03:d3:6a:36:46:
                    56:e3:cf:0f:28:91:46:3d:e8:33:5f:eb:d1:ca:25:
                    8f:a5:b8:a4:04:cb:5f:8c:4c:55:e6:94:84:bb:29:
                    3b:7b:28:18:87:8c:d0:64:45:e8:f3:83:c7:cb:8e:
                    bd:1a:b2:93:b7:dc:02:6a:d0:0e:ab:bb:c2:c5:e0:
                    13:90:57:3a:fd:46:43:ea:d6:21:bb:e2:a3:44:67:
                    4f:c9:7f:a8:52:a7:5a:7d:e5:2e:97:be:a4:35:bc:
                    ef:ff:cf:e9:56:98:9e:77:c7:49:f1:22:d1:05:44:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:AB:B1:91:05:07:02:F9:26:A5:90:97:6E:09:C1:E6:83:87:EA
            X509v3 Authority Key Identifier:
                keyid:02:0E:19:56:85:D6:23:12:B8:60:3C:CC:74:86:4C:FE:8C:D3:64:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:ac:e6:1d:2e:61:dc:9a:98:d3:65:86:ae:5c:c7:dc:06:
         6e:6e:81:32:7a:8f:56:74:43:0f:17:99:10:62:34:23:38:08:
         c6:5e:e3:f6:84:4f:bc:92:8d:f1:c3:d0:5a:ae:d2:39:b5:5a:
         98:a8:da:35:26:52:58:0c:68:f3:85:2d:ff:82:22:be:84:c2:
         29:be:ea:b3:c7:5f:e0:e4:86:ff:48:62:4e:71:97:6a:fb:62:
         e7:5d:31:48:ff:08:4e:34:2c:db:4a:27:45:6d:2e:ee:82:d6:
         42:53:4a:42:25:93:81:75:ef:7b:cd:62:0c:a2:27:45:40:40:
         1d:d6:97:aa:a5:bb:3d:8c:ea:21:43:e8:9c:1f:7d:17:8f:b5:
         0f:1c:84:3d:61:2b:90:63:b5:2b:af:c6:92:d7:f9:80:ec:34:
         25:1e:5a:3d:5c:49:34:9c:dd:37:5a:b8:3b:b7:82:33:9a:a9:
         d3:17:18:8f:b1:21:a6:c7:8b:cb:cd:5d:9a:a9:17:75:36:9c:
         90:50:6d:f2:c4:8f:7c:8c:25:c8:ab:44:81:75:c8:c0:1b:14:
         ff:4e:71:20:f2:8f:bf:b0:39:64:4e:92:fa:15:93:cf:14:85:
         e8:74:c2:ba:73:b8:a1:d2:65:86:06:73:04:90:0e:0d:0f:a2:
         5b:b3:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----