Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/1-YDJHr8QlkYqK3RGncYctKOsPTI.mft
File:                     1-YDJHr8QlkYqK3RGncYctKOsPTI.mft (raw, json)
Hash identifier:          joaU6Zia4Tqzw3CBYukfUqxTe6tZWvgsCgi3FmarvBs=
Subject key identifier:   17:AA:75:B7:E5:36:A6:AF:2D:94:EE:2E:8E:0F:F9:F9:8D:76:26:F7
Authority key identifier: F9:80:C9:1E:BF:10:96:46:2A:2B:74:46:9D:C6:1C:B4:A3:AC:3D:32
Certificate issuer:       /CN=f980c91ebf1096462a2b74469dc61cb4a3ac3d32
Certificate serial:       018BFA8D7A32868F8453B9246BD01AB2D5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YDJHr8QlkYqK3RGncYctKOsPTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/1-YDJHr8QlkYqK3RGncYctKOsPTI.mft
Manifest number:          0879
Signing time:             Thu 23 Nov 2023 05:00:57 +0000
Manifest this update:     Thu 23 Nov 2023 05:00:57 +0000
Manifest next update:     Fri 24 Nov 2023 05:00:57 +0000
Files and hashes:         1: 1-YDJHr8QlkYqK3RGncYctKOsPTI.crl (hash: 9Ahf+NV6Pe4oiPlFdZ4oLkvQggPtkNlWd8FUrhbM4UM=)
                          2: N8yIGkN8PK69TIPgyl7q6dUSEbQ.roa (hash: uHM3AGLsAWKQ/bsGnhDYPWpNZT6RAXVGtxJeOa4qSco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fa:8d:7a:32:86:8f:84:53:b9:24:6b:d0:1a:b2:d5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f980c91ebf1096462a2b74469dc61cb4a3ac3d32
        Validity
            Not Before: Nov 23 05:00:57 2023 GMT
            Not After : Nov 24 05:00:57 2023 GMT
        Subject: CN=17aa75b7e536a6af2d94ee2e8e0ff9f98d7626f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:2a:5e:f4:03:74:bf:ba:de:6a:04:e4:89:
                    be:66:68:2b:cf:19:15:7a:2c:68:ab:3d:b3:88:cb:
                    01:f9:1d:9d:36:9a:ae:35:90:67:00:cb:60:71:a6:
                    35:b7:48:62:32:e8:23:88:e3:bf:7c:be:f8:88:08:
                    c1:23:dd:30:ff:d3:27:53:90:9a:e4:4e:eb:f6:57:
                    a1:23:f4:15:0d:71:20:b0:23:5c:34:ab:be:b4:ac:
                    0b:20:0c:cf:c2:f9:e2:b8:3c:d5:11:0d:06:48:ef:
                    1a:7d:85:8b:35:bf:66:05:fd:75:6f:d6:2b:04:3d:
                    39:ed:df:bc:ed:78:d7:63:7b:b4:54:03:73:2c:47:
                    f0:46:65:eb:fe:24:56:d9:82:18:c2:35:a4:e1:8c:
                    50:31:38:4f:3d:ac:17:f1:15:03:3f:c9:2d:f1:ae:
                    f9:d1:51:5c:6f:6c:ce:99:2b:10:88:4b:3b:0b:0a:
                    db:86:23:f6:86:22:5d:7a:32:63:f8:92:30:69:0a:
                    00:9f:57:5a:b0:a4:1d:90:23:c4:30:2d:08:1c:06:
                    68:bf:7d:80:c0:68:20:40:78:94:f0:8a:d8:c8:ad:
                    34:44:32:5a:b0:44:62:d8:86:90:ba:cd:d7:8a:a9:
                    1b:b9:90:e6:fc:99:34:83:29:d7:49:c3:ee:2c:77:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AA:75:B7:E5:36:A6:AF:2D:94:EE:2E:8E:0F:F9:F9:8D:76:26:F7
            X509v3 Authority Key Identifier:
                keyid:F9:80:C9:1E:BF:10:96:46:2A:2B:74:46:9D:C6:1C:B4:A3:AC:3D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YDJHr8QlkYqK3RGncYctKOsPTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/1-YDJHr8QlkYqK3RGncYctKOsPTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/1-YDJHr8QlkYqK3RGncYctKOsPTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:a4:32:a2:b3:b1:47:46:35:30:b1:9a:2d:8b:8f:af:f3:
         99:3b:77:42:c3:cb:da:4c:fc:33:cd:9c:55:17:e4:ab:21:e7:
         d9:e5:18:d8:d7:87:70:5e:5f:27:f8:97:f2:83:c0:84:0c:34:
         3f:31:ec:a7:14:80:cf:45:90:26:4c:df:98:8b:df:19:33:94:
         26:f9:19:c1:fb:a2:d2:95:46:9c:6d:ed:c9:4c:50:98:2b:2f:
         9b:db:fd:7d:43:68:a3:17:31:ae:b1:67:d5:2a:64:1b:95:02:
         a5:c3:67:79:0d:5d:b7:11:59:0a:57:38:20:f2:91:17:c8:ef:
         99:dc:04:c9:a2:99:94:ac:05:7d:10:9d:1e:92:d6:05:85:4c:
         1f:08:32:53:0a:21:1c:e7:b1:4a:b0:21:66:56:0a:e4:8b:9e:
         f6:44:e8:75:6e:3d:81:43:cb:e6:d3:5b:7c:22:04:a4:aa:5b:
         ba:a3:33:8f:2b:4b:4a:c0:19:4c:5f:0e:92:ae:a4:30:7d:4c:
         94:ce:5e:4a:41:87:c6:c9:97:2e:95:a2:f0:34:c7:ba:ec:d3:
         e5:0e:8a:f6:6b:3b:5a:b1:36:65:fc:b9:d8:11:df:a6:e9:f1:
         27:06:80:0e:40:a1:44:60:65:2f:ce:67:8c:e5:7f:4b:1a:52:
         95:6c:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----