Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dabf99-1c3b-47c9-8df1-3aa52333da4f/1/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.mft
File:                     HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.mft (raw, json)
Hash identifier:          Az7DSrfz9vRP0zY5vUo4ESnnGBhYt96ZTabmeDQRcUQ=
Subject key identifier:   3B:AB:75:20:B4:27:FB:32:9B:99:1E:5F:D4:25:A6:98:6C:B5:88:F6
Authority key identifier: 1C:21:63:27:A5:CB:83:F1:20:78:11:14:37:10:E2:27:C0:53:3F:32
Certificate issuer:       /CN=1c216327a5cb83f1207811143710e227c0533f32
Certificate serial:       01894DFE0CE46ED727A35AEAF08228BBD047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/dabf99-1c3b-47c9-8df1-3aa52333da4f/1/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.mft
Manifest number:          0E30
Signing time:             Thu 13 Jul 2023 06:44:02 +0000
Manifest this update:     Thu 13 Jul 2023 06:44:02 +0000
Manifest next update:     Fri 14 Jul 2023 06:44:02 +0000
Files and hashes:         1: HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.crl (hash: LEOjpOojn/GUlcDUhCcEgjGjCl+p0N/hAON9Y7g017A=)
                          2: gSZ19lQkEQFiPNVBd4BvPjJgP5Q.roa (hash: q9UQdFnpThka6Fj6QeEHbLeFsFZL7ZTuoqYDnK6jv7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4d:fe:0c:e4:6e:d7:27:a3:5a:ea:f0:82:28:bb:d0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c216327a5cb83f1207811143710e227c0533f32
        Validity
            Not Before: Jul 13 06:44:02 2023 GMT
            Not After : Jul 14 06:44:02 2023 GMT
        Subject: CN=3bab7520b427fb329b991e5fd425a6986cb588f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:a5:a6:76:54:21:15:5b:6a:cf:fd:af:58:
                    73:62:7e:4e:d7:ac:5e:14:83:29:37:b3:0b:c7:cd:
                    22:ee:0f:75:b2:23:8a:62:2c:a0:40:7e:ae:4e:6d:
                    a1:a6:f1:fc:1d:e4:4d:b1:a2:78:cf:bd:da:77:d5:
                    b6:5b:2c:93:5a:f8:a3:03:44:63:dc:28:e2:f4:40:
                    fd:32:5d:0b:c1:68:69:7e:b8:ab:ec:fd:3f:e5:23:
                    69:98:29:28:1d:61:2f:30:77:13:f3:77:a5:d0:72:
                    bc:27:41:6b:0d:7f:5e:67:37:33:4e:ac:4d:8c:95:
                    0f:53:ef:7f:3c:14:f7:06:84:66:c6:4b:5b:75:00:
                    76:8e:bb:9d:c7:e5:30:7e:40:c7:74:db:5a:df:9b:
                    73:29:37:99:51:69:f9:5f:88:14:ed:07:89:75:29:
                    3d:86:2a:b9:44:3b:db:75:93:8f:e9:b3:75:be:0d:
                    ae:cf:be:0e:cf:a3:2c:44:7c:03:12:d3:63:e5:d5:
                    c6:06:d9:43:74:63:f3:7c:f6:17:64:65:cb:bd:a5:
                    7e:99:a2:da:50:c5:80:d4:6c:c1:0d:a3:12:97:72:
                    bd:c5:8a:d0:6a:7c:0e:b0:2c:83:22:c4:aa:f9:d3:
                    8a:cf:80:8e:55:8e:98:10:5b:6d:9f:7f:a4:4b:ca:
                    f8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AB:75:20:B4:27:FB:32:9B:99:1E:5F:D4:25:A6:98:6C:B5:88:F6
            X509v3 Authority Key Identifier:
                keyid:1C:21:63:27:A5:CB:83:F1:20:78:11:14:37:10:E2:27:C0:53:3F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dabf99-1c3b-47c9-8df1-3aa52333da4f/1/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dabf99-1c3b-47c9-8df1-3aa52333da4f/1/HCFjJ6XLg_EgeBEUNxDiJ8BTPzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:67:49:9c:ba:4a:42:8e:44:17:4c:2f:75:e5:07:3a:e3:
         ed:ec:c4:58:ed:3a:94:df:31:49:e2:fc:c4:ba:41:f9:b0:d2:
         fc:4d:1c:85:15:12:9e:eb:7b:c0:1b:fa:c8:69:31:68:4c:b4:
         ba:5b:c1:22:6d:13:24:f3:b4:39:1e:fa:1f:75:b9:6c:df:80:
         15:0f:fa:87:33:98:40:9f:ef:5f:4a:d8:af:5e:35:e9:55:6f:
         cb:7f:b4:a0:fd:f5:ef:cc:85:be:68:7b:da:42:f5:5a:41:64:
         1c:95:27:59:ff:db:3a:12:07:bc:ee:a1:80:be:60:79:b1:a8:
         ba:19:11:39:c1:4d:e0:1f:db:74:f5:5a:da:e2:cc:4a:f5:46:
         65:0f:a6:cd:94:43:3f:1e:eb:a8:cd:dd:26:18:8c:df:c9:76:
         19:8f:1d:a4:e1:52:11:d7:16:ae:17:b0:34:ce:86:17:8c:19:
         b6:94:5c:95:85:4c:c4:27:f6:52:16:97:c3:13:3a:67:31:c3:
         1c:45:81:2f:5a:86:8e:0d:16:69:c0:e2:e4:f6:fc:da:8f:a0:
         55:ae:40:b4:a4:9e:46:d4:8d:d3:45:b8:a3:15:53:a7:56:09:
         27:e7:81:eb:1e:65:80:dc:e2:8b:15:42:42:3c:81:57:75:fe:
         fd:65:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----