Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.mft
File:                     6csWh0iM9DpzNPnvpNnN9jVyTpw.mft (raw, json)
Hash identifier:          gclmLPLwHqGXFNLhneMRnNEtKLDdqQATZ+ol4dwEmKk=
Subject key identifier:   0E:65:FF:E6:7C:D2:42:33:8D:83:95:DE:47:D6:20:72:E1:99:50:F0
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Certificate issuer:       /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial:       018C8B6499F867C8CE52EA1E369C860ECF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.mft
Manifest number:          0814
Signing time:             Thu 21 Dec 2023 08:01:15 +0000
Manifest this update:     Thu 21 Dec 2023 08:01:15 +0000
Manifest next update:     Fri 22 Dec 2023 08:01:15 +0000
Files and hashes:         1: 5BMYcMaDTNz5thxP1c3U4-JTHOA.roa (hash: KaXadVBy2oKBmxDYKHe545fPIh7Bu8d3YdUtioXx1qs=)
                          2: 6csWh0iM9DpzNPnvpNnN9jVyTpw.crl (hash: RxxInhMPRWf/UE+2yxdA5lj+3QjhOg9NliNaiu1K94c=)
                          3: Inr4YuhCF9fVBsDfH8aYDZ_berc.roa (hash: qp00YEJV6ht9WQ13CLgu+uEyv+wE2g8xfC05gzYlfjE=)
                          4: KjZUO3n3Hf0XItqXh0y-GjTJJqk.roa (hash: AA8DaEpgK5iPTfqAYAn8ChReCF4MLbGegh0HPBPJ6Js=)
                          5: V08kQ8RFVeFYYDOmJsPbhrjwTyQ.roa (hash: G5ivGtneudGrg0sPR65sBrWSZ0xSEYboLjktF0BVGm4=)
                          6: X8fY8K0OzoX-twMpR8XT4sdBQQM.roa (hash: eD5lOY0SbLpqWshxImyw0tBiDQ1puCvW1llLgsnndUs=)
                          7: YsFvSJsNGqhzn0Id6-K4yF2HBsQ.roa (hash: 8UT9TRxErtR/UJMQ8Ulk0i/8vuE2+Eomp3HX6a9nqlY=)
                          8: vw7tLfUg7FS7K7WLErg453Om0xs.roa (hash: 3mM+qbFxWwoEK5ZnzaxTSvOSsJCeKZ4h7jmzf4fvbp4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:64:99:f8:67:c8:ce:52:ea:1e:36:9c:86:0e:cf:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
        Validity
            Not Before: Dec 21 08:01:15 2023 GMT
            Not After : Dec 22 08:01:15 2023 GMT
        Subject: CN=0e65ffe67cd242338d8395de47d62072e19950f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:6d:51:75:03:9d:36:d8:75:7e:c1:b2:99:
                    09:8c:d1:cf:3a:51:ff:41:1f:8c:44:27:48:3d:58:
                    27:6e:f0:ee:dc:f9:0d:d5:8c:ff:c2:33:6d:d1:82:
                    44:16:d3:ef:ae:d8:7e:bc:ef:d8:fc:72:a7:99:0c:
                    05:49:70:bc:76:0a:f7:c3:84:82:9b:75:fd:a9:4c:
                    71:92:ac:a5:fd:6b:3c:14:9f:63:bd:14:0e:ab:ca:
                    3b:e1:b9:69:5b:f4:7d:8e:ea:3b:3b:24:85:73:0f:
                    94:d5:3e:9f:2d:98:ec:d4:ee:43:c8:a6:3d:7b:f7:
                    15:f6:fa:a5:cc:43:99:93:59:d9:c6:c2:0d:92:da:
                    02:3d:2b:2c:e0:49:db:94:3d:52:0b:20:ea:27:a9:
                    fc:e2:e8:64:c5:4b:6f:33:59:7f:a7:f8:d7:a4:3c:
                    e3:42:7f:51:a1:32:22:3d:c7:00:15:de:87:93:89:
                    7a:5d:3b:a2:08:d3:5a:21:7a:89:a4:3d:80:5f:e1:
                    4f:03:7b:16:3d:26:53:9a:68:05:e8:0b:e8:b3:9b:
                    9b:48:0c:7e:a0:e5:e4:4d:c8:b0:89:b6:2b:af:e3:
                    dc:05:5f:fb:f0:27:82:45:fa:a6:18:d6:51:e7:fa:
                    b2:ad:7e:21:29:d6:67:ed:b0:a8:b4:50:b8:50:f2:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:65:FF:E6:7C:D2:42:33:8D:83:95:DE:47:D6:20:72:E1:99:50:F0
            X509v3 Authority Key Identifier:
                keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:80:4c:ef:5f:33:3e:47:8b:50:e4:a9:e1:a6:fc:bd:ae:2d:
         0a:e6:cf:a8:eb:fc:2c:80:21:0b:16:d3:58:cc:3d:ab:0b:36:
         f8:39:a0:81:0c:8c:96:c8:13:25:0b:e4:2a:14:ff:9b:80:c7:
         07:60:24:61:81:65:56:ba:1a:6e:72:31:69:41:8b:7f:12:94:
         97:18:6a:31:db:48:27:67:22:90:08:35:e9:75:f0:2f:aa:ea:
         f1:a6:98:5d:23:f9:af:95:e6:2f:fb:a9:b2:53:e9:0d:82:f0:
         60:7d:ec:c4:fb:99:ac:5c:44:8c:05:af:b8:ee:19:21:a5:b0:
         c4:7a:54:32:69:67:0a:fe:26:7a:58:aa:3f:37:ec:8c:35:28:
         38:fe:44:a5:52:e8:d0:5d:25:9d:4d:a9:3e:b5:f8:18:41:3f:
         19:b0:b3:6c:03:19:2c:4d:ab:3f:30:68:f8:f5:df:db:81:eb:
         18:6a:ac:aa:5a:07:1a:cc:3c:c7:db:d0:17:cf:10:aa:58:50:
         7e:13:33:a6:6e:9a:72:16:c8:b4:45:91:2f:62:ca:c0:eb:a6:
         39:6a:a9:ee:33:e5:5d:9a:cc:a1:74:07:c2:f6:81:4c:ec:51:
         7a:22:0f:81:02:bc:ee:64:86:e7:90:de:9c:59:57:2e:f3:3b:
         e6:77:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----