Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/0MoVMIDkqZ6oWJURUiCYKe9tO3I.mft
File:                     0MoVMIDkqZ6oWJURUiCYKe9tO3I.mft (raw, json)
Hash identifier:          NMFvTb/DtPCWpZVoqM6Q+2rs5U37vQFLGyzTXvEjMmc=
Subject key identifier:   83:11:24:4B:3B:C8:19:6D:B8:EB:CE:6D:21:9D:AD:AB:22:00:D9:67
Authority key identifier: D0:CA:15:30:80:E4:A9:9E:A8:58:95:11:52:20:98:29:EF:6D:3B:72
Certificate issuer:       /CN=d0ca153080e4a99ea858951152209829ef6d3b72
Certificate serial:       018BDC4C43E057E975D8BC00E8068647A3F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MoVMIDkqZ6oWJURUiCYKe9tO3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/0MoVMIDkqZ6oWJURUiCYKe9tO3I.mft
Manifest number:          0876
Signing time:             Fri 17 Nov 2023 08:01:07 +0000
Manifest this update:     Fri 17 Nov 2023 08:01:07 +0000
Manifest next update:     Sat 18 Nov 2023 08:01:07 +0000
Files and hashes:         1: 0MoVMIDkqZ6oWJURUiCYKe9tO3I.crl (hash: uWNHeCCTb22l7kzl83hWvwbjp2M9A1pAWJFGGrZWP6c=)
                          2: Ith8Br5DBeGRRtnVSwszOweTrb4.roa (hash: lpZFB6U6C3opS7HOSiwPu01PdY4n2e4AF+2wSp0WRD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:4c:43:e0:57:e9:75:d8:bc:00:e8:06:86:47:a3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ca153080e4a99ea858951152209829ef6d3b72
        Validity
            Not Before: Nov 17 08:01:07 2023 GMT
            Not After : Nov 18 08:01:07 2023 GMT
        Subject: CN=8311244b3bc8196db8ebce6d219dadab2200d967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6e:64:d7:fc:c6:ad:14:98:a7:83:54:16:a6:
                    e9:83:45:69:ea:85:73:0e:04:15:63:9b:60:07:c7:
                    a4:f1:b5:93:98:1b:24:7a:3d:25:8f:d0:66:44:63:
                    2c:14:96:69:13:3b:d2:ea:06:60:60:af:8d:fe:e3:
                    dc:b5:03:0f:65:b3:c0:eb:91:da:34:79:08:6d:ca:
                    95:8d:59:7e:a2:6f:8d:29:06:1d:e4:ff:d2:f0:82:
                    27:ac:38:76:16:6d:d7:bb:cf:a0:37:28:08:65:e3:
                    c5:92:42:92:ac:1f:9b:71:f7:d1:de:08:a2:c1:4e:
                    d4:fa:c2:86:03:05:8a:4d:7b:4f:52:b4:9a:09:76:
                    83:03:18:35:82:82:ca:26:fb:ee:df:67:05:4f:72:
                    41:f2:56:67:46:e5:26:f2:2d:f9:ae:d9:fd:76:c2:
                    89:e0:81:70:b7:c2:4f:fe:81:25:01:c9:f1:f0:04:
                    7a:3e:bb:03:2d:a8:be:62:95:28:63:8b:0d:6a:d9:
                    62:a6:df:b5:2c:65:00:b7:ad:d4:6a:4b:04:b0:65:
                    c4:c2:e6:ab:a4:79:5c:a0:73:e1:4e:19:c5:8f:2e:
                    15:7f:fd:8b:0d:3c:de:5c:de:de:3b:5f:9f:ee:24:
                    2b:17:fc:59:a2:fb:31:5f:d9:24:6d:f1:c4:d4:1d:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:11:24:4B:3B:C8:19:6D:B8:EB:CE:6D:21:9D:AD:AB:22:00:D9:67
            X509v3 Authority Key Identifier:
                keyid:D0:CA:15:30:80:E4:A9:9E:A8:58:95:11:52:20:98:29:EF:6D:3B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MoVMIDkqZ6oWJURUiCYKe9tO3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/0MoVMIDkqZ6oWJURUiCYKe9tO3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/0MoVMIDkqZ6oWJURUiCYKe9tO3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:f2:cf:88:cb:33:54:f6:61:d8:ef:b6:2e:ce:60:02:a3:8e:
         3a:37:64:6d:df:e6:56:90:65:15:a6:61:5a:6c:64:a6:e8:0d:
         33:17:31:02:66:f8:16:40:49:5f:cc:ed:c0:1f:13:c3:f6:c2:
         4a:dc:d5:d9:6a:b1:18:4e:c0:53:1b:00:50:a7:66:75:fb:dd:
         53:6a:ac:f9:15:79:40:4f:0f:6e:a0:41:7c:37:88:58:79:49:
         08:04:bc:27:98:41:ab:65:89:11:b3:ac:08:45:45:f7:33:c1:
         4a:ca:dc:98:50:61:5d:cc:37:a7:7a:99:b1:df:db:8f:53:e7:
         82:81:e6:1f:58:cd:37:66:e7:bb:b4:dd:cc:ec:eb:07:65:b2:
         7a:31:30:3f:6f:0e:ac:b6:b3:ef:d9:8b:38:7e:fe:c6:b2:4f:
         05:09:1d:bb:c4:ca:9e:fe:39:af:d5:8b:e6:74:7f:d6:b0:46:
         16:a5:53:66:1a:1c:9f:a5:b8:54:31:41:cf:14:1d:70:84:d1:
         8e:97:4e:96:e9:00:b0:ff:1b:46:ec:66:7a:11:b7:57:83:78:
         2b:bb:33:73:6f:ce:66:4a:fb:74:bb:22:ce:2f:53:99:04:39:
         44:60:82:f9:51:aa:f5:52:ca:2d:a6:6e:95:35:c0:ba:b8:08:
         f0:dc:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----