Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/Ds2ZqhcBdjpaHtm7430swJMpybo.mft
File:                     Ds2ZqhcBdjpaHtm7430swJMpybo.mft (raw, json)
Hash identifier:          OR9nRjFriCtbmiXeX3ILn3H1iUEDtl/zKKt5b/e1B5A=
Subject key identifier:   F7:0D:00:B8:8C:ED:A1:54:B3:EA:97:97:CA:91:3C:F2:3F:C7:36:9E
Authority key identifier: 0E:CD:99:AA:17:01:76:3A:5A:1E:D9:BB:E3:7D:2C:C0:93:29:C9:BA
Certificate issuer:       /CN=0ecd99aa1701763a5a1ed9bbe37d2cc09329c9ba
Certificate serial:       018A169A01FD85BA5F9C44FEC0941C6D188A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ds2ZqhcBdjpaHtm7430swJMpybo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/Ds2ZqhcBdjpaHtm7430swJMpybo.mft
Manifest number:          086D
Signing time:             Mon 21 Aug 2023 05:38:26 +0000
Manifest this update:     Mon 21 Aug 2023 05:38:26 +0000
Manifest next update:     Tue 22 Aug 2023 05:38:26 +0000
Files and hashes:         1: 1-EllfV6Stduk5IhgbZ6OTLBM1k8.roa (hash: sfn4drTLL6omxx7EOacJmOCGYpMGgTLeLVwOIZABQK8=)
                          2: 4u-QMESNMn7dOAlrw2yA_5LeEzY.roa (hash: S93KmhgKcL7qXbmrxtDxIw+B5cVVD3UnEn6yB7Bj7GY=)
                          3: Ds2ZqhcBdjpaHtm7430swJMpybo.crl (hash: 7tHP7qQJdh2y2Ex5FBGQ0cn1xV83zHHgx8yuqxnlbEw=)
                          4: SfVPVnOPSbmEr6SQTxgSOtIDPhs.roa (hash: V7aLgxoNqXTtSZKoOKn8B3F1NMpn7cWdIR68LEXcyf8=)
                          5: aySNolXy5Sdem3IdcQFPwMfoWEM.roa (hash: VetTjwGNN4EBbwywbF7kgTQa6UI8Gek1bCWc4so+O8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:16:9a:01:fd:85:ba:5f:9c:44:fe:c0:94:1c:6d:18:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecd99aa1701763a5a1ed9bbe37d2cc09329c9ba
        Validity
            Not Before: Aug 21 05:38:26 2023 GMT
            Not After : Aug 22 05:38:26 2023 GMT
        Subject: CN=f70d00b88ceda154b3ea9797ca913cf23fc7369e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:0b:6e:25:11:18:99:2c:42:f0:69:5a:b6:
                    9a:65:e3:d3:da:56:a9:ac:a7:65:64:f2:b4:73:93:
                    76:a5:f6:a2:7a:e0:38:96:83:6f:f3:1f:67:b1:4c:
                    59:ff:a3:16:ac:65:c3:58:f9:c5:6b:fe:d1:1f:7b:
                    06:f3:74:c3:8a:db:14:9d:21:b6:72:43:49:1b:e4:
                    e2:8f:54:d6:a6:30:88:8a:49:88:cf:e1:97:db:76:
                    8f:98:ee:0a:ce:27:9c:b0:72:e8:40:2a:52:c3:e9:
                    e8:61:83:30:2d:09:ea:44:bc:18:ee:3d:72:45:dc:
                    47:82:d7:a3:be:7a:e7:49:f4:66:e1:1d:7b:2a:5f:
                    67:32:09:e6:72:57:29:cb:96:1b:52:ff:66:43:97:
                    f8:5b:b5:c3:47:52:1d:f6:65:b7:7b:f7:c6:dd:97:
                    89:d0:37:c4:a6:ce:65:ee:88:ee:54:35:30:f5:4b:
                    23:16:6c:7a:94:9e:55:fb:5e:60:90:d3:ea:30:5a:
                    67:4c:2a:73:3b:c5:21:61:de:48:13:4d:36:61:c6:
                    05:2d:d9:82:77:27:0b:29:a1:5f:be:59:3d:70:54:
                    83:dd:e5:e6:59:4c:91:aa:96:1d:d0:9d:b1:df:b6:
                    11:a3:de:f1:f5:77:3f:09:16:a9:62:40:cc:72:44:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:00:B8:8C:ED:A1:54:B3:EA:97:97:CA:91:3C:F2:3F:C7:36:9E
            X509v3 Authority Key Identifier:
                keyid:0E:CD:99:AA:17:01:76:3A:5A:1E:D9:BB:E3:7D:2C:C0:93:29:C9:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds2ZqhcBdjpaHtm7430swJMpybo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/Ds2ZqhcBdjpaHtm7430swJMpybo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/Ds2ZqhcBdjpaHtm7430swJMpybo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:41:d2:19:64:3b:9c:11:65:3c:39:d5:1b:59:8d:1e:1f:95:
         d9:fa:7e:0c:72:05:3c:22:b5:a1:d3:de:34:15:39:17:ec:c5:
         0a:4b:9a:f6:e3:2d:b0:7a:7e:6c:e5:8b:25:3d:3f:7c:dd:37:
         62:da:4c:dd:b9:7d:21:52:01:1d:4f:ca:20:25:7b:b5:20:28:
         17:cb:92:2d:14:47:5f:a6:9c:f8:cf:d9:1c:d0:9a:88:51:7a:
         2e:33:38:84:52:59:27:94:86:16:92:99:e1:2e:22:8d:b7:dc:
         5d:af:e5:5a:c8:21:1b:98:d7:d9:39:22:70:ca:92:58:52:90:
         4b:2b:40:e5:f6:aa:1d:07:0b:d6:66:cf:65:03:fb:9e:31:5e:
         25:3f:c4:68:96:8b:bd:3c:d8:3a:6d:b0:42:a6:8c:d6:40:21:
         5a:a8:07:43:a1:b6:26:8c:be:0a:ae:71:25:76:ae:06:37:56:
         3b:d9:61:d9:0f:85:b7:26:28:2f:b9:1a:0d:eb:cb:ab:f5:55:
         42:be:6d:45:02:3a:f3:db:75:7b:ac:5e:15:79:c2:2d:d4:a2:
         c7:52:90:fa:23:af:3a:84:82:86:14:7e:2e:b3:2e:d8:bf:82:
         0b:59:0d:a5:f1:07:8e:71:4b:31:1f:73:c1:84:20:3a:8e:35:
         ff:f9:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----