Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/6Sf9xj0xDT0jG0p1U65OQVgCXp8.mft
File:                     6Sf9xj0xDT0jG0p1U65OQVgCXp8.mft (raw, json)
Hash identifier:          TWGLYWhExB2w/A7/jr6bg5rIDQOjPb1xHSJTNuhpWh0=
Subject key identifier:   8F:B6:7B:A7:70:14:F4:88:14:2F:EC:16:14:1B:5A:AC:40:CB:42:92
Authority key identifier: E9:27:FD:C6:3D:31:0D:3D:23:1B:4A:75:53:AE:4E:41:58:02:5E:9F
Certificate issuer:       /CN=e927fdc63d310d3d231b4a7553ae4e4158025e9f
Certificate serial:       018B5EFC012CF1CA83FA38BAB88B0C75EF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Sf9xj0xDT0jG0p1U65OQVgCXp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/6Sf9xj0xDT0jG0p1U65OQVgCXp8.mft
Manifest number:          0F51
Signing time:             Tue 24 Oct 2023 00:00:55 +0000
Manifest this update:     Tue 24 Oct 2023 00:00:55 +0000
Manifest next update:     Wed 25 Oct 2023 00:00:55 +0000
Files and hashes:         1: 6Sf9xj0xDT0jG0p1U65OQVgCXp8.crl (hash: jSwflAhfmUjwXaAQ1Y4h/8YW523TlELZergmEkndiWQ=)
                          2: aOt5rviKlMCkrkBgrLg1jMhKpnU.roa (hash: vdB4ADLysAJRo95WIA64y1tWJHgiXJpGIRCNi7i2M0I=)
                          3: o_H-GvwWLujLRYuMayVSDupyAU0.roa (hash: Lq8Gpgsab7pMhmiVteQtDF9GFBvQtqSkGKUonBL6MjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5e:fc:01:2c:f1:ca:83:fa:38:ba:b8:8b:0c:75:ef:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e927fdc63d310d3d231b4a7553ae4e4158025e9f
        Validity
            Not Before: Oct 24 00:00:55 2023 GMT
            Not After : Oct 25 00:00:55 2023 GMT
        Subject: CN=8fb67ba77014f488142fec16141b5aac40cb4292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:92:40:cf:e1:29:6f:96:7a:13:40:1a:ef:
                    ab:23:96:1c:80:ce:b8:e3:bc:f2:f7:bf:a4:a4:a5:
                    10:88:63:9d:9a:ff:4d:65:72:90:7e:73:39:c8:50:
                    42:3f:56:aa:d4:55:69:ec:7e:bc:41:48:69:26:73:
                    c8:a4:37:97:d9:a5:9f:7f:50:bf:34:83:1a:23:48:
                    57:ed:c4:f5:0c:aa:e2:c6:f9:05:dc:92:ee:68:51:
                    4b:aa:6b:0c:b0:42:d9:fd:f5:f5:d5:6d:05:46:6a:
                    6c:60:90:c8:49:99:c9:ad:b2:b5:b4:87:90:ff:da:
                    8c:ac:7b:a3:59:dd:22:d2:6d:87:77:0a:48:b0:49:
                    4c:27:a5:b1:5c:6d:fe:65:05:e9:28:65:a0:98:06:
                    9a:2d:e3:e4:c5:e6:31:60:8d:61:d3:4c:73:d9:8e:
                    e0:e2:72:ec:85:48:3c:a2:99:c1:e4:bf:d6:15:fa:
                    1a:78:db:95:7d:df:b1:f3:f3:74:5f:ed:8b:b7:1b:
                    f4:0d:20:9f:81:3c:48:e0:7c:14:8b:fb:4b:bd:f1:
                    19:a8:13:ba:61:8b:40:be:ad:9d:ed:14:49:a2:e2:
                    f1:fc:8e:8a:39:39:13:eb:ee:fa:39:7c:d9:c1:ab:
                    86:ec:f2:58:43:0b:0b:6c:f2:a9:40:8f:10:51:e5:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:7B:A7:70:14:F4:88:14:2F:EC:16:14:1B:5A:AC:40:CB:42:92
            X509v3 Authority Key Identifier:
                keyid:E9:27:FD:C6:3D:31:0D:3D:23:1B:4A:75:53:AE:4E:41:58:02:5E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf9xj0xDT0jG0p1U65OQVgCXp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/6Sf9xj0xDT0jG0p1U65OQVgCXp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/6Sf9xj0xDT0jG0p1U65OQVgCXp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e8:7e:c3:ef:04:34:ef:66:a0:79:65:99:d9:9e:30:3b:d0:
         e6:04:37:4d:df:3e:f7:dc:17:25:3f:2b:41:b7:b3:42:c9:83:
         48:6f:10:6e:61:e6:e7:b0:2c:6e:da:48:13:bf:a9:a0:84:5c:
         ee:f4:9c:fb:e4:80:43:2a:e2:1a:7f:0f:06:4c:ea:12:86:53:
         55:69:4a:e5:a8:85:5e:8a:fa:f4:3c:72:44:24:7a:42:5c:fb:
         4a:77:48:a6:fd:8c:5d:ce:e9:6d:0e:d3:90:45:70:65:60:d9:
         da:9c:9d:16:b7:ad:00:d9:60:65:29:24:42:f1:3e:e6:45:b0:
         42:c5:bb:38:4b:be:62:b8:e5:55:6f:22:6b:25:4c:f1:f3:6b:
         13:a3:4b:f0:d6:37:7d:67:62:22:eb:bd:79:b6:f6:49:48:fc:
         ef:99:b1:eb:fd:ff:1a:d3:ea:d4:18:a1:bb:c4:15:82:1f:1d:
         af:7f:7a:55:7b:0c:7d:06:4f:bb:66:13:fb:16:4e:3a:1d:1e:
         8d:d4:70:a1:c4:cc:ef:d2:07:b5:64:7a:f9:5a:f2:78:77:9e:
         8d:b2:50:f5:c2:bd:aa:80:07:b3:81:85:ce:e9:d8:fc:69:31:
         5e:0b:02:17:0f:2c:62:9a:a4:93:94:35:55:07:d4:fa:67:48:
         7f:9d:ef:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----