Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.mft
File:                     2F7imcSKXFxe0OETaMUntmykBcE.mft (raw, json)
Hash identifier:          WFRCYRYQ7iM3sChQwsItu3eWPuTD9EF9ZFKO2tUbnBM=
Subject key identifier:   A3:A1:24:27:64:1F:C5:1B:4A:4E:23:27:19:36:23:67:C0:D1:51:8A
Authority key identifier: D8:5E:E2:99:C4:8A:5C:5C:5E:D0:E1:13:68:C5:27:B6:6C:A4:05:C1
Certificate issuer:       /CN=d85ee299c48a5c5c5ed0e11368c527b66ca405c1
Certificate serial:       018A078F0911E7C4ECAA6ADCCEF9B58CABB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2F7imcSKXFxe0OETaMUntmykBcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.mft
Manifest number:          061C
Signing time:             Fri 18 Aug 2023 07:32:08 +0000
Manifest this update:     Fri 18 Aug 2023 07:32:08 +0000
Manifest next update:     Sat 19 Aug 2023 07:32:08 +0000
Files and hashes:         1: 2F7imcSKXFxe0OETaMUntmykBcE.crl (hash: JMTF0zwnb1QKLKAaNAd7EkBE2yGSrP+/aruH40YgapE=)
                          2: cWazi8ZvhPz8eNV7LSXnOnf58oQ.roa (hash: Z9elirKd+Foh1Pjdc7ZcdVyVnbKX1jmQ+pnEL/kSjSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:07:8f:09:11:e7:c4:ec:aa:6a:dc:ce:f9:b5:8c:ab:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85ee299c48a5c5c5ed0e11368c527b66ca405c1
        Validity
            Not Before: Aug 18 07:32:08 2023 GMT
            Not After : Aug 19 07:32:08 2023 GMT
        Subject: CN=a3a12427641fc51b4a4e232719362367c0d1518a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:a2:21:f9:43:a7:66:29:14:78:35:f9:4a:
                    a7:42:34:63:65:af:13:23:c1:b5:27:14:a3:fb:af:
                    16:b7:f9:f0:c6:99:39:ad:a3:1b:b8:3a:65:c4:71:
                    f4:08:1f:16:d1:5b:ee:5f:cc:d9:60:f4:d0:90:2f:
                    28:33:c7:43:b3:35:8f:ee:49:10:5c:d4:69:5b:d8:
                    c0:87:c4:d9:27:4c:31:69:be:6d:74:22:38:14:f2:
                    4c:4a:42:35:f9:34:f4:6a:fe:b8:7b:5e:82:10:dd:
                    33:c8:dd:e6:7d:36:bc:bf:ca:53:ae:1b:f2:46:48:
                    83:6d:a1:03:2f:2f:24:b7:37:41:4a:2b:4b:81:f9:
                    7f:5d:e6:ff:09:67:a8:af:36:0d:32:ca:8b:c6:79:
                    66:3c:19:42:39:82:0a:b0:9c:1b:f4:ba:6d:97:3e:
                    03:f9:44:02:e7:59:bd:87:d3:62:be:7c:c6:52:12:
                    f2:e5:17:29:9b:a9:f6:1c:20:65:51:76:4c:4d:c5:
                    fd:05:1c:16:cc:35:be:64:10:f2:b4:b9:c0:e6:b5:
                    02:13:0d:75:9b:e3:16:88:66:63:3d:ca:34:c5:aa:
                    b7:0e:cc:99:7b:2d:ec:d5:c3:dc:fe:e8:20:47:e1:
                    ed:90:b9:7b:07:42:7a:ea:7c:0d:33:8c:38:0b:57:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A1:24:27:64:1F:C5:1B:4A:4E:23:27:19:36:23:67:C0:D1:51:8A
            X509v3 Authority Key Identifier:
                keyid:D8:5E:E2:99:C4:8A:5C:5C:5E:D0:E1:13:68:C5:27:B6:6C:A4:05:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2F7imcSKXFxe0OETaMUntmykBcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:cb:6b:cc:7f:4e:5e:75:bf:06:8b:b4:71:75:a0:8a:c0:de:
         0e:d8:9a:76:16:61:f6:1c:7f:00:0f:cd:09:3b:76:82:fa:8c:
         2b:e6:41:83:59:23:62:a1:23:75:70:18:8b:f9:79:de:78:ed:
         35:a1:b9:42:02:36:bd:a4:da:f2:93:79:94:ed:f3:cc:a4:43:
         d2:3e:a4:fb:27:aa:87:ab:b7:04:9a:84:da:aa:78:7b:af:b0:
         a5:79:7f:23:08:7c:12:96:32:98:54:4c:e1:b3:79:5e:22:3c:
         79:84:a3:f4:e3:3b:05:81:39:84:f9:e7:8d:45:de:26:1c:bb:
         23:2f:c0:f5:23:26:44:8c:d6:a6:5c:18:81:0a:4f:8d:02:e6:
         06:9c:73:55:4b:20:93:5c:65:be:fe:b6:6f:e3:23:38:7a:33:
         13:8c:7a:19:98:46:ad:bb:51:85:49:b9:e2:07:e7:6f:3c:e8:
         0b:eb:7d:49:4f:2f:88:05:bf:2c:6c:0b:98:4f:ae:49:31:be:
         20:43:51:22:87:41:32:e8:f4:b8:ff:6b:ed:2a:51:ac:be:dd:
         48:50:ae:b4:6a:46:c1:65:dc:2b:92:60:d2:1d:50:6b:ed:ec:
         7b:8c:82:d1:8e:fd:c0:15:54:95:ac:e4:83:45:93:24:6c:97:
         7e:d9:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----