Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/yXab-lmGXQyVkyYogYB9sT9LuHo.mft
File:                     yXab-lmGXQyVkyYogYB9sT9LuHo.mft (raw, json)
Hash identifier:          LAtUBOjC8x9rA+dQfE9MCyBx7ad1e7RhaaM0ZHRCJUU=
Subject key identifier:   66:51:B5:EE:63:93:A0:04:B0:C5:0B:A6:3E:3C:A8:C7:1E:69:46:AE
Authority key identifier: C9:76:9B:FA:59:86:5D:0C:95:93:26:28:81:80:7D:B1:3F:4B:B8:7A
Certificate issuer:       /CN=c9769bfa59865d0c9593262881807db13f4bb87a
Certificate serial:       018BB8AD899176E52670BE160120F452533F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXab-lmGXQyVkyYogYB9sT9LuHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/yXab-lmGXQyVkyYogYB9sT9LuHo.mft
Manifest number:          08DF
Signing time:             Fri 10 Nov 2023 10:01:02 +0000
Manifest this update:     Fri 10 Nov 2023 10:01:02 +0000
Manifest next update:     Sat 11 Nov 2023 10:01:02 +0000
Files and hashes:         1: KPUmdl9CYSFVW9Q4kZKjljfGDic.roa (hash: A2hCehomO0s+/9OS9wFixBVVwPYYQRMtgK3hJs63CUw=)
                          2: yXab-lmGXQyVkyYogYB9sT9LuHo.crl (hash: hQ0ZgJ6pzuopO6ftSGrvB5Z0QhfmlmNpzt1mwYDJsvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:ad:89:91:76:e5:26:70:be:16:01:20:f4:52:53:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9769bfa59865d0c9593262881807db13f4bb87a
        Validity
            Not Before: Nov 10 10:01:02 2023 GMT
            Not After : Nov 11 10:01:02 2023 GMT
        Subject: CN=6651b5ee6393a004b0c50ba63e3ca8c71e6946ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:81:69:9a:c4:e1:6d:69:c6:28:a7:96:31:
                    d7:f5:fe:9d:d7:4b:d2:11:70:fa:ef:05:26:10:f6:
                    d5:24:cb:5a:60:07:53:4e:d0:22:25:38:b2:be:b6:
                    fb:46:de:12:de:46:fb:87:25:1f:77:74:4a:be:5d:
                    04:b1:c3:d3:26:6a:5b:42:ed:ef:12:ff:01:0f:81:
                    cf:76:43:a2:1e:92:4e:ea:35:a1:7b:27:6f:35:d2:
                    a9:7f:38:03:dd:25:cb:e0:b3:b2:9b:7b:81:83:9c:
                    47:a8:fe:d1:61:07:9b:ec:bd:c4:d9:c3:5c:ca:5d:
                    6d:a2:5c:87:28:a2:6e:84:52:f4:0b:d0:4a:f3:de:
                    21:59:79:29:d0:0f:83:b8:f9:4b:0f:b3:ca:a7:65:
                    1a:92:4a:9d:52:71:ff:fa:ae:b1:a0:5d:2b:a3:7f:
                    88:83:7b:50:4a:2f:ae:05:07:1e:97:88:3e:0a:86:
                    47:7c:f3:e5:06:8c:5c:d7:36:a1:e8:80:9a:69:d1:
                    d0:1e:75:81:54:d4:e8:55:df:25:ac:a3:ac:cb:0d:
                    f5:2d:86:82:99:12:a8:15:24:ff:92:52:90:7d:bc:
                    dc:ce:13:2c:9a:c9:ce:46:36:6e:39:0b:71:d1:98:
                    ba:f3:3d:bc:35:9e:97:f5:be:6d:09:32:5b:92:2b:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:51:B5:EE:63:93:A0:04:B0:C5:0B:A6:3E:3C:A8:C7:1E:69:46:AE
            X509v3 Authority Key Identifier:
                keyid:C9:76:9B:FA:59:86:5D:0C:95:93:26:28:81:80:7D:B1:3F:4B:B8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXab-lmGXQyVkyYogYB9sT9LuHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/yXab-lmGXQyVkyYogYB9sT9LuHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/yXab-lmGXQyVkyYogYB9sT9LuHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4e:df:98:f6:2f:1f:18:c0:a8:d4:f2:c5:16:ee:8b:85:72:
         ad:e3:c4:dd:c7:12:f0:87:77:51:5c:83:87:59:5a:00:3c:3d:
         3e:cd:d9:26:75:78:18:52:46:33:5a:72:a1:0a:8e:d8:aa:5d:
         b1:bb:83:73:b3:bf:5d:4b:d2:c1:a6:6c:ff:62:6e:57:9f:a4:
         9a:60:1a:1a:52:b2:25:3f:95:ee:a4:ef:13:87:91:31:ac:0c:
         81:97:9f:34:17:30:50:70:26:21:93:a5:f7:fa:10:9b:0d:7f:
         d4:60:4a:ec:da:29:90:2c:a5:32:29:6e:51:dd:e0:ed:28:d0:
         62:fb:a5:5e:fa:f3:b7:26:c1:79:4f:d9:69:0b:f8:b7:2b:92:
         4c:33:21:55:4a:b1:85:29:0c:5b:ff:fe:48:15:23:f0:5f:da:
         b1:eb:1f:de:ba:24:09:20:84:ba:51:be:a4:b6:1e:43:1c:c9:
         45:21:76:c5:16:11:e8:a1:76:07:71:36:9d:86:b6:93:39:24:
         99:ed:71:16:f6:34:00:a2:a5:ee:4f:33:d2:de:a3:b9:65:30:
         d8:58:e3:50:27:f1:e0:3a:70:e4:ae:fa:ce:1d:ae:3e:9c:90:
         6d:79:ae:73:ff:ea:55:b1:6f:8d:34:8a:6b:4f:dc:be:bc:a4:
         54:28:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----