Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0443f8-af04-4f62-a360-43679c6342e1/1/y6PU-tUF6SYRXEntx3qHR8ZefAI.mft
File:                     y6PU-tUF6SYRXEntx3qHR8ZefAI.mft (raw, json)
Hash identifier:          KLlQnXSuLfdD6gVv8e/w05O/UFPy34OkJ4JuWSXDlcc=
Subject key identifier:   BD:59:EE:9C:47:F8:76:C3:27:97:1C:77:E5:17:D7:A5:F1:88:DC:BF
Authority key identifier: CB:A3:D4:FA:D5:05:E9:26:11:5C:49:ED:C7:7A:87:47:C6:5E:7C:02
Certificate issuer:       /CN=cba3d4fad505e926115c49edc77a8747c65e7c02
Certificate serial:       018B8007E1B2D1AE786FAEEFCF27177849A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y6PU-tUF6SYRXEntx3qHR8ZefAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0443f8-af04-4f62-a360-43679c6342e1/1/y6PU-tUF6SYRXEntx3qHR8ZefAI.mft
Manifest number:          0863
Signing time:             Mon 30 Oct 2023 10:01:21 +0000
Manifest this update:     Mon 30 Oct 2023 10:01:21 +0000
Manifest next update:     Tue 31 Oct 2023 10:01:21 +0000
Files and hashes:         1: K2T28mvmC75v2Vw2-uVMvIG2jfo.roa (hash: aYcEUomZvRkVI8uyEUQAOOyPFYPTFwFRDAgHhXXbx5s=)
                          2: y6PU-tUF6SYRXEntx3qHR8ZefAI.crl (hash: l32N6C11YK0J5iJHlk1pe62l5lksuRcj9E07pJOCSn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:80:07:e1:b2:d1:ae:78:6f:ae:ef:cf:27:17:78:49:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba3d4fad505e926115c49edc77a8747c65e7c02
        Validity
            Not Before: Oct 30 10:01:21 2023 GMT
            Not After : Oct 31 10:01:21 2023 GMT
        Subject: CN=bd59ee9c47f876c327971c77e517d7a5f188dcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:03:ef:50:d0:9b:e0:02:ff:d7:47:13:de:
                    cb:26:66:11:67:02:9c:88:22:33:99:fb:be:2c:21:
                    fc:31:4c:ad:f9:c1:3e:30:56:3a:1c:74:d4:7a:08:
                    fd:cb:42:34:40:41:b2:33:9e:c4:05:0a:c7:1f:b2:
                    28:69:75:da:f2:eb:4f:ee:60:f7:e0:eb:9f:14:22:
                    0b:52:f8:5c:16:b8:09:b9:d6:eb:b9:48:37:98:a9:
                    ef:a8:b6:5d:db:32:50:5a:2f:87:5b:84:e3:87:88:
                    fc:6e:cf:a5:e6:f2:af:f2:19:9b:44:a4:14:08:96:
                    55:00:ce:1d:fe:c9:64:ad:f9:54:7a:ce:0b:ce:f1:
                    4d:36:88:5c:d8:86:0b:c7:32:e0:6f:28:2d:91:83:
                    5d:68:15:db:e1:08:16:a0:d6:74:d4:fc:47:7d:ea:
                    30:d6:46:3c:e3:a3:65:ce:8f:c2:86:ca:79:91:f5:
                    13:e5:ee:df:35:7c:7a:50:c1:d9:3b:4b:e1:ca:07:
                    72:a1:b9:29:e0:3f:15:f6:0b:a9:ef:35:19:f9:5a:
                    d9:2e:f5:f9:0c:72:33:6f:15:43:33:be:2e:55:dd:
                    cf:20:7f:09:fc:f7:fe:d5:32:05:f0:c8:2c:46:30:
                    70:6f:fd:77:fe:7f:e0:64:e4:25:e7:63:dd:67:0e:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:59:EE:9C:47:F8:76:C3:27:97:1C:77:E5:17:D7:A5:F1:88:DC:BF
            X509v3 Authority Key Identifier:
                keyid:CB:A3:D4:FA:D5:05:E9:26:11:5C:49:ED:C7:7A:87:47:C6:5E:7C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6PU-tUF6SYRXEntx3qHR8ZefAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0443f8-af04-4f62-a360-43679c6342e1/1/y6PU-tUF6SYRXEntx3qHR8ZefAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0443f8-af04-4f62-a360-43679c6342e1/1/y6PU-tUF6SYRXEntx3qHR8ZefAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f9:5f:18:72:d6:8c:33:eb:4a:2e:7a:98:c7:b6:04:31:39:
         c1:2a:7d:15:33:29:a1:f4:f0:91:9b:ad:f8:31:ac:f6:32:fd:
         e3:91:a9:fe:29:ca:2c:07:8c:04:8e:7d:04:1c:a5:15:09:ca:
         9f:d7:e9:5e:af:6a:b7:e4:60:aa:c7:a7:6a:1a:78:c7:a1:c3:
         a2:5c:66:04:49:05:84:a8:dc:06:39:6c:28:31:53:dd:34:7e:
         3d:ab:14:58:b7:70:16:6e:66:28:d3:2e:5b:17:45:e1:f6:bd:
         ce:57:ef:bf:4f:0b:42:64:d4:ac:f3:ec:26:5a:e8:f0:2a:33:
         8f:20:59:75:e9:17:33:cf:3c:c6:cb:39:51:59:00:aa:84:31:
         2c:68:f5:17:24:aa:94:16:22:e3:85:6b:35:af:66:ce:a0:88:
         33:72:e9:15:b1:b9:05:6e:c7:41:ee:d2:4f:0b:ba:2e:ee:cc:
         bb:12:da:56:78:2a:b0:89:b9:19:8a:91:36:db:d4:37:02:93:
         2a:ee:40:96:57:bd:94:5d:d4:99:d0:31:05:18:8a:e7:4e:8d:
         41:25:8c:2c:e9:60:64:8e:b6:64:35:5c:3b:0e:a9:96:9b:4d:
         23:df:34:b6:6b:f5:fd:79:ff:9b:f5:9d:e1:9e:27:c9:6a:fa:
         5f:35:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----