Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/94099b-1727-408e-9f1f-48dee405d0c0/1/HLnq8qZq3xikSzxUVQ_hzqGRsAo.mft
File:                     HLnq8qZq3xikSzxUVQ_hzqGRsAo.mft (raw, json)
Hash identifier:          bMEzh1GTcRtCHIfaQiO6DEYiZUBkudHvlEmQgovYrEI=
Subject key identifier:   0A:7A:9B:A7:5F:B9:AA:75:37:11:FA:F9:3C:61:55:2D:1F:0E:D5:BE
Authority key identifier: 1C:B9:EA:F2:A6:6A:DF:18:A4:4B:3C:54:55:0F:E1:CE:A1:91:B0:0A
Certificate issuer:       /CN=1cb9eaf2a66adf18a44b3c54550fe1cea191b00a
Certificate serial:       01894A7CDF2711F8D251A22C79396522E7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLnq8qZq3xikSzxUVQ_hzqGRsAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/94099b-1727-408e-9f1f-48dee405d0c0/1/HLnq8qZq3xikSzxUVQ_hzqGRsAo.mft
Manifest number:          0C5F
Signing time:             Wed 12 Jul 2023 14:24:04 +0000
Manifest this update:     Wed 12 Jul 2023 14:24:04 +0000
Manifest next update:     Thu 13 Jul 2023 14:24:04 +0000
Files and hashes:         1: HLnq8qZq3xikSzxUVQ_hzqGRsAo.crl (hash: sk0v2HLba8s65BrPATxCCKzwYmk27+/tLUR858iraaI=)
                          2: ge6rtVt_kagAVZQGyObj-anUbmE.roa (hash: vfrmy8jzKio3+2ZofN8xhpzEIUz3gO4uG4oPOpSHxPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4a:7c:df:27:11:f8:d2:51:a2:2c:79:39:65:22:e7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb9eaf2a66adf18a44b3c54550fe1cea191b00a
        Validity
            Not Before: Jul 12 14:24:04 2023 GMT
            Not After : Jul 13 14:24:04 2023 GMT
        Subject: CN=0a7a9ba75fb9aa753711faf93c61552d1f0ed5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:c7:29:bb:fc:02:b0:0d:2e:51:ad:e5:25:
                    70:5f:2d:30:7c:60:0e:db:16:ac:76:58:a8:4a:f5:
                    5d:f2:f9:11:8e:1c:9a:ec:9f:2c:95:65:95:5a:d7:
                    67:bc:1b:31:75:83:32:a0:7e:2a:f3:af:f2:9a:dc:
                    e0:a4:65:72:65:09:91:e7:2f:1b:b1:1b:49:d8:ff:
                    83:f2:96:0c:a2:9c:f3:a0:3c:c1:ef:a2:26:34:6a:
                    28:dc:d2:96:77:29:21:04:5b:9c:40:c1:40:32:c4:
                    cd:03:20:00:76:b5:01:8b:77:ee:2e:64:18:4e:43:
                    21:d3:a3:29:a8:72:75:f1:f5:03:5c:14:45:66:91:
                    5c:9a:3c:b4:43:04:89:2d:c8:60:a0:82:4c:53:79:
                    1b:c1:aa:8b:d4:44:91:e1:04:72:db:7c:a0:76:1c:
                    a9:c1:d7:79:e1:ef:73:58:e6:7a:66:8b:6a:5c:66:
                    91:c6:8a:29:a8:c2:e7:24:1b:4e:fe:20:d2:c4:c4:
                    ef:10:83:7b:94:97:7d:20:8f:e2:77:a0:0d:55:f9:
                    19:fb:92:80:9c:90:97:a4:d5:15:47:66:c8:c1:82:
                    42:c3:e3:9f:a0:65:d0:5a:13:ac:25:81:68:b7:6f:
                    95:3e:26:23:1d:8b:c2:d8:5c:b2:55:53:c4:4f:67:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:9B:A7:5F:B9:AA:75:37:11:FA:F9:3C:61:55:2D:1F:0E:D5:BE
            X509v3 Authority Key Identifier:
                keyid:1C:B9:EA:F2:A6:6A:DF:18:A4:4B:3C:54:55:0F:E1:CE:A1:91:B0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLnq8qZq3xikSzxUVQ_hzqGRsAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/94099b-1727-408e-9f1f-48dee405d0c0/1/HLnq8qZq3xikSzxUVQ_hzqGRsAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/94099b-1727-408e-9f1f-48dee405d0c0/1/HLnq8qZq3xikSzxUVQ_hzqGRsAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:52:f1:d9:83:a1:20:68:22:cb:a3:f9:9d:b5:ef:42:b0:
         f6:b3:4f:a8:a4:6a:ee:11:95:0d:03:58:72:df:fa:63:5a:98:
         81:1d:fc:da:86:1d:84:eb:33:db:f4:98:08:d7:9e:5b:4e:14:
         fb:ab:88:24:3c:27:f2:43:d4:5b:6b:58:c3:9f:11:b9:63:57:
         99:44:34:0a:c8:86:bf:55:e1:a1:01:6e:a2:79:9f:e8:89:77:
         e7:76:bc:11:e5:7d:23:98:a6:fd:61:d0:71:76:b8:dc:ed:c6:
         6c:bc:8f:2b:a7:9f:91:47:3f:5f:59:38:88:00:fb:32:02:0d:
         a8:c6:77:a8:73:e9:ac:b1:83:4f:dc:da:66:a7:02:a6:c2:03:
         c2:d2:0a:af:ea:a7:2c:08:dd:f4:3a:dd:11:6f:f1:ef:8d:76:
         21:d0:b7:f1:73:54:0c:76:2c:74:26:f6:db:f2:e9:9a:d0:5f:
         c0:17:57:ce:bd:14:da:3c:c0:a1:92:6d:43:ab:6e:9e:40:0b:
         5f:fc:6a:51:e1:5e:30:8b:75:d8:e1:90:d1:96:c2:ff:97:8b:
         31:22:ba:53:5a:1c:fc:b8:13:bf:a6:22:b8:f8:d8:ce:42:da:
         68:2a:b9:a1:03:39:0e:c3:f8:7b:30:5b:ea:50:ee:f8:d1:85:
         8b:85:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----