Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.mft
File:                     IueHG5Jm471Rbb1UI0VoavNL_JE.mft (raw, json)
Hash identifier:          B/bociFBvI0cUmqFbbvpK+4/K42wteTTsgDqUdkAMpI=
Subject key identifier:   6C:E9:F4:8F:58:36:84:59:EC:06:6A:56:C5:6A:AF:E4:BC:CC:5C:9C
Authority key identifier: 22:E7:87:1B:92:66:E3:BD:51:6D:BD:54:23:45:68:6A:F3:4B:FC:91
Certificate issuer:       /CN=22e7871b9266e3bd516dbd542345686af34bfc91
Certificate serial:       018B7EF4CC3CDC4A9F919E8EFF1543C4B166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IueHG5Jm471Rbb1UI0VoavNL_JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.mft
Manifest number:          0F60
Signing time:             Mon 30 Oct 2023 05:00:54 +0000
Manifest this update:     Mon 30 Oct 2023 05:00:54 +0000
Manifest next update:     Tue 31 Oct 2023 05:00:54 +0000
Files and hashes:         1: IueHG5Jm471Rbb1UI0VoavNL_JE.crl (hash: TgsGHf3MMYGtnucfBujwpDjgMzbU1Cbo12qVhj3DTrs=)
                          2: Q9-AEV-rooRNtc1ZBn25vaNDPYI.roa (hash: /azish7PPhKtQ3sORpVQRsa4azpRacpbOkkt+VGLJJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7e:f4:cc:3c:dc:4a:9f:91:9e:8e:ff:15:43:c4:b1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e7871b9266e3bd516dbd542345686af34bfc91
        Validity
            Not Before: Oct 30 05:00:54 2023 GMT
            Not After : Oct 31 05:00:54 2023 GMT
        Subject: CN=6ce9f48f58368459ec066a56c56aafe4bccc5c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:40:aa:07:f6:71:61:2b:eb:06:e5:de:0c:
                    ec:3e:60:3c:7a:25:ed:81:3c:7b:6e:17:84:e1:b7:
                    46:79:c9:b3:8a:a7:07:1c:f6:7f:be:70:b6:b9:3e:
                    b0:9d:90:9c:3a:5b:8c:65:0a:82:1a:e7:00:07:c3:
                    ba:e1:2d:73:11:05:49:43:fb:3a:70:fa:d4:6d:13:
                    6c:91:2e:26:34:51:a1:b3:7c:11:db:0e:32:7d:a4:
                    19:52:09:91:ef:12:e7:2b:5e:a8:e0:a9:d5:26:a3:
                    a4:c8:58:8f:a7:31:ae:7f:65:a5:e2:33:cc:af:da:
                    d9:7b:71:f7:72:4a:20:43:22:5e:f6:42:c8:8e:f9:
                    7e:40:50:6e:0b:39:15:98:45:5f:95:75:c9:b4:be:
                    3a:bd:33:54:b7:6d:2f:19:b8:28:ca:20:56:03:f6:
                    3d:7e:86:7d:b5:0d:eb:d8:65:f0:5e:c1:e8:3d:a4:
                    8b:3c:6e:21:16:1a:ef:64:78:4f:2d:38:6d:53:81:
                    db:ac:82:e6:dd:ba:60:b3:36:4d:f7:c5:38:28:78:
                    77:77:b0:89:d3:e9:bc:43:54:6b:9c:65:07:c6:52:
                    d2:a4:d3:7a:8e:a0:86:85:53:09:e5:d2:b7:aa:05:
                    be:39:75:f8:24:fe:53:27:6f:e1:b1:e8:49:d5:87:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E9:F4:8F:58:36:84:59:EC:06:6A:56:C5:6A:AF:E4:BC:CC:5C:9C
            X509v3 Authority Key Identifier:
                keyid:22:E7:87:1B:92:66:E3:BD:51:6D:BD:54:23:45:68:6A:F3:4B:FC:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IueHG5Jm471Rbb1UI0VoavNL_JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:f3:2f:36:d1:93:ba:1e:2d:6e:e9:1f:09:cd:86:77:17:
         f6:b5:cc:09:e6:6f:56:49:2f:83:c3:1a:92:e3:60:48:95:67:
         3d:fc:30:b6:79:8e:2a:28:87:f1:5a:8d:64:dd:1e:75:8d:70:
         ed:7c:ec:ce:54:59:a4:bb:bd:5b:78:bd:73:21:0c:3e:8c:24:
         00:d7:91:19:58:6b:97:d0:b5:a1:50:14:db:0c:e1:a5:b9:49:
         09:f9:df:18:cd:ff:b7:c7:cf:8e:62:ca:09:48:3f:24:bb:d7:
         fd:fd:46:d8:f9:70:a9:44:3e:00:23:f3:d5:48:42:78:1a:1e:
         86:d8:cf:a6:54:35:c5:15:6d:f7:5a:eb:e3:a9:75:63:ec:e9:
         51:39:01:c8:97:e2:08:71:7d:a0:4b:b7:ef:8a:13:52:df:f2:
         ae:32:2a:12:48:9a:93:e6:7a:59:27:7f:af:44:77:d7:e6:5f:
         3d:d8:9a:01:47:33:74:82:66:df:66:6e:ec:70:b5:b9:44:50:
         b1:2c:3e:56:1f:73:d6:b8:49:9c:f6:dc:e5:11:09:3d:c3:f8:
         3a:b1:45:4f:a8:71:a1:03:24:09:e0:82:e2:63:66:f4:1d:ea:
         ce:5d:1b:24:75:9a:aa:3e:b1:79:c3:aa:be:83:3c:a3:52:5f:
         2b:18:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----