Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1ace3c-3a1b-4614-aaf3-f2daf0e42d1c/1/EUm9V2Sou4Sf6ixUBprEIxICULo.mft
File:                     EUm9V2Sou4Sf6ixUBprEIxICULo.mft (raw, json)
Hash identifier:          8fA7uKn1XteYzJNBxq2r5ejmOcwpWTsN/csz0ombvoc=
Subject key identifier:   6C:5F:99:2B:7F:FD:FE:65:B7:A7:1C:63:67:A2:BE:37:8A:02:93:B6
Authority key identifier: 11:49:BD:57:64:A8:BB:84:9F:EA:2C:54:06:9A:C4:23:12:02:50:BA
Certificate issuer:       /CN=1149bd5764a8bb849fea2c54069ac423120250ba
Certificate serial:       018AFE6D829C073F0A8A21215E16902C8C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUm9V2Sou4Sf6ixUBprEIxICULo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1ace3c-3a1b-4614-aaf3-f2daf0e42d1c/1/EUm9V2Sou4Sf6ixUBprEIxICULo.mft
Manifest number:          087F
Signing time:             Thu 05 Oct 2023 06:01:44 +0000
Manifest this update:     Thu 05 Oct 2023 06:01:44 +0000
Manifest next update:     Fri 06 Oct 2023 06:01:44 +0000
Files and hashes:         1: EUm9V2Sou4Sf6ixUBprEIxICULo.crl (hash: VvtjfEc83P5fUQEOUu5gd8kGtCplvJ3BVtyFgmLYEQQ=)
                          2: RJzhDDPfr154OHZ46__52BSP1mw.roa (hash: 6yqQg5llbkCB5NMtTf/dEH/fVLqGaM+LyWutE5MYfZ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fe:6d:82:9c:07:3f:0a:8a:21:21:5e:16:90:2c:8c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1149bd5764a8bb849fea2c54069ac423120250ba
        Validity
            Not Before: Oct  5 06:01:44 2023 GMT
            Not After : Oct  6 06:01:44 2023 GMT
        Subject: CN=6c5f992b7ffdfe65b7a71c6367a2be378a0293b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:a5:1d:b6:10:2a:8d:1b:04:6c:5f:dd:47:
                    63:dd:80:7e:a0:4f:89:25:c7:01:8a:b4:08:8a:0a:
                    54:03:db:d8:e6:6c:bb:2f:38:a4:38:62:02:f0:8e:
                    dc:ab:00:6c:e8:b9:a8:da:7d:ba:d9:81:d5:9c:4c:
                    94:3c:f0:21:da:9a:e9:1a:65:f4:28:e3:43:b1:24:
                    2f:4f:53:f6:c5:44:e1:7b:e7:b4:c5:48:9e:09:3c:
                    74:02:e3:bf:b9:ea:32:ed:05:71:23:1e:25:bd:86:
                    36:20:17:b4:6d:5d:6b:5b:dd:10:e8:1c:54:38:bc:
                    9c:78:10:02:37:58:cb:0f:21:11:9a:76:03:50:49:
                    6a:c3:b5:90:2c:87:54:5a:ee:9b:fe:34:7e:11:d2:
                    b7:3f:ff:a0:f2:eb:76:87:e6:1f:eb:ce:29:bf:71:
                    c7:6e:d2:f5:8a:43:1e:2d:5f:4a:be:4d:d9:f1:cf:
                    3f:2d:31:ec:49:b8:3e:7c:e3:2f:cb:ee:a9:f0:8a:
                    2a:b3:5c:55:74:ba:2c:c5:a0:a0:61:de:bc:a5:35:
                    a1:ad:10:95:ba:9e:30:fe:ad:32:49:0a:37:c9:64:
                    ce:39:ea:e6:0f:fa:8b:78:aa:b8:c9:41:ae:e0:a1:
                    a3:c6:f5:62:9e:2c:0c:1b:b5:6a:b5:b8:3c:65:4e:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5F:99:2B:7F:FD:FE:65:B7:A7:1C:63:67:A2:BE:37:8A:02:93:B6
            X509v3 Authority Key Identifier:
                keyid:11:49:BD:57:64:A8:BB:84:9F:EA:2C:54:06:9A:C4:23:12:02:50:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUm9V2Sou4Sf6ixUBprEIxICULo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1ace3c-3a1b-4614-aaf3-f2daf0e42d1c/1/EUm9V2Sou4Sf6ixUBprEIxICULo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1ace3c-3a1b-4614-aaf3-f2daf0e42d1c/1/EUm9V2Sou4Sf6ixUBprEIxICULo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f4:df:c3:0d:93:69:f7:64:ce:ee:39:fe:bd:32:e6:0f:4b:
         6c:e2:cf:6d:0c:24:4e:6a:db:a8:6a:8e:f6:6b:b3:5f:76:88:
         0c:bc:e2:9c:8d:c5:3f:a3:a8:6d:5d:da:23:ac:87:f0:e8:a6:
         ae:49:83:6e:e3:24:e5:2b:6a:13:e9:29:a6:2e:8e:2a:05:a0:
         b5:3b:e3:22:f5:47:10:0f:11:6f:59:2d:cd:dd:43:89:cf:f8:
         90:ab:a3:8a:fe:86:cc:0c:2b:be:71:b9:e5:de:3e:a9:1e:d2:
         b9:70:50:ac:d6:e1:a7:2d:02:66:7b:96:34:43:1a:40:c0:91:
         1d:ff:35:5c:2e:b2:80:a8:84:3a:3c:a7:22:76:de:9c:ae:fd:
         6d:65:64:89:57:c6:d4:98:fa:7a:24:f6:d1:e1:45:c0:db:fa:
         70:c7:82:82:d6:b2:60:64:e0:4c:fb:63:2f:31:c8:28:07:f2:
         fe:0b:2a:cc:bc:83:d5:96:af:17:6b:39:30:6a:dd:ab:b8:f3:
         31:2f:7e:66:af:bd:40:0a:6a:5f:b8:24:84:bd:36:4b:f4:2c:
         3d:f0:61:72:df:90:73:85:02:49:0f:cb:7d:89:84:a3:7d:c3:
         aa:3c:b1:5a:5a:50:9f:61:b5:7a:1a:6e:40:ad:12:44:d2:df:
         e4:d7:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----