Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.mft
File:                     ERh9wYv6iyooqknRDabVTAgxRkQ.mft (raw, json)
Hash identifier:          TK8P5xnvu8/Atckk2ua97TbNpGlSwD05h1fSWoR9ytg=
Subject key identifier:   A7:02:6A:3B:A9:35:66:CF:9F:C1:FA:47:6F:86:5B:E5:AF:70:BE:A0
Authority key identifier: 11:18:7D:C1:8B:FA:8B:2A:28:AA:49:D1:0D:A6:D5:4C:08:31:46:44
Certificate issuer:       /CN=11187dc18bfa8b2a28aa49d10da6d54c08314644
Certificate serial:       018BEB8837244D84549A8D94EB058F61647F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERh9wYv6iyooqknRDabVTAgxRkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.mft
Manifest number:          0857
Signing time:             Mon 20 Nov 2023 07:00:54 +0000
Manifest this update:     Mon 20 Nov 2023 07:00:54 +0000
Manifest next update:     Tue 21 Nov 2023 07:00:54 +0000
Files and hashes:         1: 1rT_JZzAVmui_8ccUvruW8tvzOM.roa (hash: z1vVTFkBjyR5WPymW3wH2TLtR8t+0o2vdvkxDrm9FZM=)
                          2: ERh9wYv6iyooqknRDabVTAgxRkQ.crl (hash: yd7nDWcU93nXRl1ClaVE5OvHoFB+WKcOO5BvdCjIX1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:88:37:24:4d:84:54:9a:8d:94:eb:05:8f:61:64:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11187dc18bfa8b2a28aa49d10da6d54c08314644
        Validity
            Not Before: Nov 20 07:00:54 2023 GMT
            Not After : Nov 21 07:00:54 2023 GMT
        Subject: CN=a7026a3ba93566cf9fc1fa476f865be5af70bea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c7:6a:d8:a5:a7:d5:4a:25:aa:b8:b7:32:39:
                    0b:b1:fc:f8:fe:da:1b:1a:c8:5c:d2:1b:0a:be:d0:
                    e2:0b:1c:cd:e7:d6:67:90:bf:a5:48:be:90:f7:44:
                    8e:be:82:5f:d8:60:e4:43:5e:89:a8:44:4f:0e:f6:
                    47:7b:48:df:ef:5c:1b:12:10:97:ef:99:c7:06:85:
                    41:8e:0b:4e:f3:53:2b:eb:f7:54:2b:c4:a7:a9:38:
                    9e:db:00:80:98:d8:8a:1e:c7:ca:b4:0e:fe:54:01:
                    45:bb:fb:26:80:84:ff:49:10:c0:7b:1c:72:48:b1:
                    e5:fd:3f:18:65:cf:86:07:7a:e9:e4:bd:a2:88:fa:
                    ab:24:c6:01:29:19:dc:b9:c9:ed:aa:02:bc:c1:f7:
                    73:4e:0c:16:6e:42:cc:b7:16:9f:ea:dc:a4:0c:86:
                    c1:6a:a7:5b:30:fc:ad:05:ca:99:07:a3:e4:6c:b9:
                    a6:6d:a0:d5:17:3c:64:66:b3:90:db:6d:02:c2:0f:
                    6c:3e:00:55:0b:7b:5e:ea:5b:56:48:e2:44:a9:2d:
                    3e:f0:34:e1:97:86:bc:cb:07:9f:b7:40:80:1d:99:
                    75:00:2d:1e:13:61:90:57:b7:43:39:2e:e5:c1:21:
                    84:5d:84:93:5e:77:fa:91:b7:17:21:9e:ec:88:95:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:02:6A:3B:A9:35:66:CF:9F:C1:FA:47:6F:86:5B:E5:AF:70:BE:A0
            X509v3 Authority Key Identifier:
                keyid:11:18:7D:C1:8B:FA:8B:2A:28:AA:49:D1:0D:A6:D5:4C:08:31:46:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERh9wYv6iyooqknRDabVTAgxRkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7a:95:a8:39:86:e1:9a:05:1e:8a:38:94:ef:2a:1d:c6:3f:
         58:db:21:09:80:ef:af:4b:6e:34:56:5f:34:f6:bb:12:6e:60:
         4a:5e:a3:c4:5e:bc:19:23:14:5f:40:3d:aa:a4:c4:64:07:ae:
         57:08:2f:9d:0f:55:e2:44:91:58:b6:a7:a2:82:04:7d:bf:89:
         0c:b1:2f:92:b2:77:ce:46:c6:04:6d:56:68:79:32:7c:d6:07:
         2c:30:f1:b9:85:17:65:7a:e3:6e:83:62:ab:17:fc:0f:fc:83:
         9b:d9:a6:06:8f:e6:7d:12:a9:d5:e1:b6:da:4e:51:43:6a:24:
         92:56:19:21:52:b4:7a:a9:85:07:94:14:04:1a:70:0f:56:89:
         de:af:c7:67:37:5f:ce:de:1b:79:a6:64:cd:7e:f9:f9:f8:cc:
         b4:8f:f1:86:78:22:33:5e:27:de:c1:74:83:af:46:14:ea:c8:
         69:f4:e8:c7:82:9a:b7:98:81:2b:10:25:ba:33:4a:28:32:65:
         51:db:6e:03:3e:95:04:8e:53:48:64:d6:63:68:3b:53:23:71:
         04:2a:23:ca:d2:09:69:21:28:15:b1:8c:d2:41:d6:49:43:5c:
         fe:8b:d1:6f:29:7b:f9:f7:ac:b8:bc:68:4a:90:5e:a5:2f:15:
         cb:27:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----