Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c2f028-4643-4fa4-bbb2-28924b056c59/1/pYYMx3zUi1IZfPW_e5SSDAIUS9U.mft
File:                     pYYMx3zUi1IZfPW_e5SSDAIUS9U.mft (raw, json)
Hash identifier:          lTBLRg9KCWyIayznSzn99j+BeGaaXAGQ8tDAXQjbN8o=
Subject key identifier:   8A:F5:DA:E5:D1:DF:97:91:E0:17:70:70:A4:2C:AB:2E:82:93:3F:29
Authority key identifier: A5:86:0C:C7:7C:D4:8B:52:19:7C:F5:BF:7B:94:92:0C:02:14:4B:D5
Certificate issuer:       /CN=a5860cc77cd48b52197cf5bf7b94920c02144bd5
Certificate serial:       018B8564B92891FE8ADD2EB91CFAE8787FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pYYMx3zUi1IZfPW_e5SSDAIUS9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/c2f028-4643-4fa4-bbb2-28924b056c59/1/pYYMx3zUi1IZfPW_e5SSDAIUS9U.mft
Manifest number:          08CC
Signing time:             Tue 31 Oct 2023 11:00:52 +0000
Manifest this update:     Tue 31 Oct 2023 11:00:52 +0000
Manifest next update:     Wed 01 Nov 2023 11:00:52 +0000
Files and hashes:         1: pYYMx3zUi1IZfPW_e5SSDAIUS9U.crl (hash: 5pucDyx5FdpQqXUn39q9WOnCFyEiHS+G6iTjji/rvKw=)
                          2: w2jR5jYY15FuQVtweAfvm-UtRds.roa (hash: ZjjMV14e3xf0y8AbjrzJNee4vUL3r0B+l1gSUH04EXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:85:64:b9:28:91:fe:8a:dd:2e:b9:1c:fa:e8:78:7f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5860cc77cd48b52197cf5bf7b94920c02144bd5
        Validity
            Not Before: Oct 31 11:00:52 2023 GMT
            Not After : Nov  1 11:00:52 2023 GMT
        Subject: CN=8af5dae5d1df9791e0177070a42cab2e82933f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:70:69:78:a5:82:c5:6a:d6:9e:b1:92:a1:
                    32:19:4e:57:13:8e:ea:28:15:22:34:31:ef:86:50:
                    de:2b:ba:a2:31:de:e2:4e:84:a8:d1:b4:04:f9:28:
                    fa:68:c1:ed:22:96:c6:26:05:c6:a0:5d:7b:42:0e:
                    ba:01:1d:d3:c5:ea:80:f2:48:91:b0:39:44:07:30:
                    67:8c:a4:dd:96:5a:24:7e:3f:b0:0a:7c:5d:75:f8:
                    9b:9c:3b:8a:02:00:30:7a:e0:0c:8b:db:7b:d7:e6:
                    7d:34:40:da:d3:fa:c0:3f:85:57:a0:65:5d:71:c5:
                    b5:36:d8:d0:e6:fc:df:e5:31:84:62:c6:52:85:f2:
                    5c:31:7f:45:f5:89:aa:71:8e:6e:0b:c1:20:38:c3:
                    97:ee:35:8a:ff:96:d5:b3:17:f8:7c:b5:4f:87:e6:
                    c7:07:c2:5a:63:31:31:88:ae:c5:79:a1:7b:0c:5c:
                    ce:3e:48:db:0d:5f:ae:83:ec:ef:c5:e8:54:1c:f7:
                    80:3d:4f:45:3a:e8:75:ee:e2:ac:28:9f:fd:bf:f7:
                    bd:e8:51:03:db:ba:36:90:92:17:1a:4f:38:5b:bf:
                    b6:d2:d3:e2:fe:a1:4d:d4:ce:dc:32:ee:0c:52:43:
                    b1:8c:c2:ff:81:91:1a:1f:65:b9:7c:ae:c2:1b:3b:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F5:DA:E5:D1:DF:97:91:E0:17:70:70:A4:2C:AB:2E:82:93:3F:29
            X509v3 Authority Key Identifier:
                keyid:A5:86:0C:C7:7C:D4:8B:52:19:7C:F5:BF:7B:94:92:0C:02:14:4B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYYMx3zUi1IZfPW_e5SSDAIUS9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c2f028-4643-4fa4-bbb2-28924b056c59/1/pYYMx3zUi1IZfPW_e5SSDAIUS9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c2f028-4643-4fa4-bbb2-28924b056c59/1/pYYMx3zUi1IZfPW_e5SSDAIUS9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:0e:6a:c8:4f:10:b0:1a:bf:59:65:56:d6:ce:9e:b9:30:
         a8:f0:e3:9d:1e:e3:ea:c1:ed:7c:26:2d:4d:1d:e2:63:53:97:
         f8:67:d3:46:40:4d:fd:32:61:b2:90:5d:e6:cc:7b:df:05:b5:
         a8:af:f8:ba:f2:ae:60:00:d0:61:d6:4c:df:7a:c5:81:b2:33:
         06:50:af:6d:50:2e:09:40:54:38:a1:0f:cc:5b:76:b5:e0:39:
         74:08:e8:27:6f:37:72:90:32:54:f3:cb:fe:d8:5a:b8:a2:42:
         53:de:6f:91:8b:f7:fd:f5:78:da:ec:3c:35:8a:8c:6c:90:4f:
         dd:f9:09:6b:2f:1a:d4:c0:57:a4:15:a2:17:ed:d1:9e:7a:36:
         89:4a:47:5f:95:1e:f4:2e:08:b1:18:9e:84:d8:a4:e6:56:78:
         6f:f8:7e:4a:c2:42:30:88:26:48:05:14:e2:ea:3e:62:fa:20:
         d9:f7:9c:21:27:ca:2f:9d:3e:9c:52:45:6d:3f:0d:28:81:a0:
         5a:3a:8c:e3:1e:f0:33:47:46:d3:bf:37:74:ff:59:74:3a:0b:
         28:d6:9f:dd:33:68:14:47:45:49:e9:fc:3c:32:fe:cb:5c:67:
         9c:c9:84:1e:01:8b:a6:ef:be:00:5b:73:0c:1c:9e:d2:6f:f8:
         17:54:9a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----