Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.mft
File:                     hACIDMSZsrovDbfaSOu3swqip2I.mft (raw, json)
Hash identifier:          OsTI57+6spmVacAlBBchrTvJuspURSjHcLE9tCpMtyo=
Subject key identifier:   33:40:1B:83:11:92:42:89:55:5B:0A:20:BA:57:80:57:AB:10:F1:4E
Authority key identifier: 84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
Certificate issuer:       /CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Certificate serial:       018BDD28342B88F0E29EBC3EEA8DCC2A2329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.mft
Manifest number:          06E6
Signing time:             Fri 17 Nov 2023 12:01:21 +0000
Manifest this update:     Fri 17 Nov 2023 12:01:21 +0000
Manifest next update:     Sat 18 Nov 2023 12:01:21 +0000
Files and hashes:         1: 4uB3m7Kxn7jXRnTubzHsjKOrEaA.roa (hash: LXl9XFJ/aLzHlAZ8OR2Ejh3b5K/b2CNe9jV+lZfCgvI=)
                          2: HyXCUiSbaj8XurTbkdSRyrQICcM.roa (hash: jiDAr70buu7hHzm76uavZH0Hp6OsTSseHUKQnNCardc=)
                          3: hACIDMSZsrovDbfaSOu3swqip2I.crl (hash: IuX1Mk/g5nhwkJnghnzc6yTsVV8thZoxCFMEWxbcc34=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dd:28:34:2b:88:f0:e2:9e:bc:3e:ea:8d:cc:2a:23:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
        Validity
            Not Before: Nov 17 12:01:21 2023 GMT
            Not After : Nov 18 12:01:21 2023 GMT
        Subject: CN=33401b8311924289555b0a20ba578057ab10f14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:9b:91:3d:e4:e2:05:29:46:a3:1b:3f:93:
                    8c:5c:6e:60:a9:88:13:7d:bd:73:e7:25:bf:75:46:
                    35:c4:6b:bc:b4:c9:78:3f:3f:16:12:8c:87:81:df:
                    34:31:73:50:b9:9b:eb:ed:b2:42:45:52:43:c0:e5:
                    4e:13:11:e3:09:0c:9c:9f:75:b0:72:81:dd:47:2e:
                    a5:15:9b:1c:80:28:d5:b0:19:d3:ae:4c:c2:e5:a9:
                    d4:47:58:5e:f2:1d:37:2f:b5:09:60:a3:a5:aa:8c:
                    b7:bf:2f:8f:59:10:fe:9d:ac:e5:89:3d:53:8c:f6:
                    e7:2e:8f:e1:65:ac:45:d7:cb:0e:11:dc:cc:bf:4a:
                    a7:47:54:2f:59:04:0e:0f:f5:a7:9a:51:4e:2b:a1:
                    fd:7e:f1:dd:e9:7a:91:d8:07:da:88:26:50:fe:63:
                    17:8a:7f:b1:48:b8:1a:27:c6:ad:39:d9:7c:4b:3f:
                    b0:31:c9:fa:37:90:e8:34:8b:4a:53:38:6f:73:d1:
                    a0:4e:dc:56:80:a0:38:11:ae:99:fd:ca:b7:40:c6:
                    c0:89:ef:fd:46:48:95:c0:88:86:b1:1e:d9:b5:38:
                    66:b3:79:9e:ae:54:0e:f6:ad:c1:96:64:45:73:ac:
                    f2:96:07:e6:ad:69:72:36:7e:3c:76:b3:41:38:3b:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:40:1B:83:11:92:42:89:55:5B:0A:20:BA:57:80:57:AB:10:F1:4E
            X509v3 Authority Key Identifier:
                keyid:84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9d:47:31:d2:39:9e:63:fc:c2:af:49:28:24:f2:d6:04:1c:
         f9:d9:18:23:bc:ec:d8:89:4e:b4:3c:08:5b:76:4b:a6:d5:37:
         46:19:80:11:b1:0f:65:47:0a:a5:da:0a:51:17:2c:43:63:c6:
         44:23:d7:c2:73:e7:c7:e1:af:9c:d0:fa:f3:0b:0f:26:c9:84:
         52:1b:f1:54:0f:2d:b2:76:b8:cb:7f:11:c4:01:bb:7d:13:59:
         b6:03:f7:23:79:5b:51:ef:9a:4d:c6:97:49:62:c3:3d:23:1b:
         81:44:af:97:56:8b:e0:a7:3e:dc:c5:3f:8e:38:bd:e3:a2:3b:
         b5:7f:b6:43:3a:aa:25:78:7c:66:de:92:28:02:b4:5c:ff:24:
         14:74:a7:60:0c:13:89:14:f6:11:cb:45:a1:6b:08:a1:e8:db:
         c0:6d:6f:cf:3a:7b:36:7a:e4:2e:45:73:18:2e:7a:21:f2:ef:
         17:b4:39:21:05:76:d1:2d:1b:77:d6:60:fe:76:07:9e:e0:93:
         05:0b:ed:4f:47:cb:03:53:f8:38:d9:e0:45:dc:db:f7:72:42:
         41:4c:33:02:1d:4b:35:93:04:e3:52:17:6b:28:e3:41:3c:15:
         33:5a:71:5e:86:08:fd:c1:c6:dd:b6:ea:c9:29:74:4e:4a:f3:
         f3:83:dd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----