Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/gJY65g6_Hpugo18Ri_rr2STNe5k.mft
File:                     gJY65g6_Hpugo18Ri_rr2STNe5k.mft (raw, json)
Hash identifier:          SqOs3gf3B0lpBXgbbbbnP4cMEqRsXNzG/JUCvbZYedU=
Subject key identifier:   FF:B5:04:C2:39:74:20:E4:B0:F7:80:C4:80:6A:68:ED:D8:09:D2:52
Authority key identifier: 80:96:3A:E6:0E:BF:1E:9B:A0:A3:5F:11:8B:FA:EB:D9:24:CD:7B:99
Certificate issuer:       /CN=80963ae60ebf1e9ba0a35f118bfaebd924cd7b99
Certificate serial:       018A97A4C6C4F0F89B8F973646404FB1F213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJY65g6_Hpugo18Ri_rr2STNe5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/gJY65g6_Hpugo18Ri_rr2STNe5k.mft
Manifest number:          0EEA
Signing time:             Fri 15 Sep 2023 07:01:12 +0000
Manifest this update:     Fri 15 Sep 2023 07:01:12 +0000
Manifest next update:     Sat 16 Sep 2023 07:01:12 +0000
Files and hashes:         1: 7zoxPJwD1ZnxB7qXxCx-NwBSfOI.roa (hash: c3tNkMdMK+GrU0qmPNzZeiq0HeSkKaJdjC6vky1tkuY=)
                          2: gJY65g6_Hpugo18Ri_rr2STNe5k.crl (hash: vBql9GupNzOtuMqnqbwMhVZ6YRGZvPfhy3ReKW7D7xs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:97:a4:c6:c4:f0:f8:9b:8f:97:36:46:40:4f:b1:f2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80963ae60ebf1e9ba0a35f118bfaebd924cd7b99
        Validity
            Not Before: Sep 15 07:01:12 2023 GMT
            Not After : Sep 16 07:01:12 2023 GMT
        Subject: CN=ffb504c2397420e4b0f780c4806a68edd809d252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:07:31:4e:06:b0:c6:1e:25:97:17:28:3a:
                    25:e5:d2:fc:9b:08:26:c9:dd:1e:60:86:3b:aa:55:
                    03:c8:2b:ba:d7:19:b9:70:75:13:3e:2f:ea:17:b8:
                    d1:73:db:cd:57:b8:46:90:db:ff:8b:21:e0:0c:37:
                    3a:3e:55:00:b9:e7:62:f9:11:dd:07:ef:ad:7e:1d:
                    c0:aa:58:84:9a:64:9d:96:d9:95:d3:cf:4e:1a:5c:
                    a9:ee:dc:d3:ef:70:38:ce:3c:39:6d:f8:98:a4:f1:
                    c8:9f:8c:fb:4c:87:b1:d3:00:28:05:6c:9b:93:25:
                    8d:3b:35:dc:ae:cb:08:3b:ac:c5:43:ca:96:c6:42:
                    a1:98:6d:b4:47:3a:40:d1:79:ce:d4:16:f9:8e:4e:
                    fe:cd:af:6d:b8:81:e1:5b:20:dd:dc:2e:11:ce:62:
                    9b:50:79:22:b8:e1:0d:61:62:43:af:b1:fb:8c:9c:
                    43:aa:42:2d:35:5a:0c:5c:fa:67:2b:e3:88:bb:22:
                    85:69:37:cb:16:3b:db:86:53:6e:ed:d2:42:fc:2a:
                    e8:0a:5c:51:90:96:1d:53:34:88:7e:fc:78:f8:b0:
                    a1:98:83:73:64:cc:79:a7:5b:5e:19:5b:05:11:23:
                    3c:5c:b8:35:32:9f:8f:6a:15:63:cd:bc:21:c3:a4:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B5:04:C2:39:74:20:E4:B0:F7:80:C4:80:6A:68:ED:D8:09:D2:52
            X509v3 Authority Key Identifier:
                keyid:80:96:3A:E6:0E:BF:1E:9B:A0:A3:5F:11:8B:FA:EB:D9:24:CD:7B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJY65g6_Hpugo18Ri_rr2STNe5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/gJY65g6_Hpugo18Ri_rr2STNe5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/gJY65g6_Hpugo18Ri_rr2STNe5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a3:42:f0:6a:d8:f8:06:1e:66:b3:36:9d:2b:9a:78:e8:a3:
         e8:3f:d0:72:d5:31:20:62:93:d1:88:ac:21:e8:eb:00:ed:89:
         01:51:55:a3:ee:fe:3f:ed:30:cd:1a:47:64:3b:e4:a3:52:1a:
         38:97:93:53:4e:d6:7c:50:d9:a9:ef:97:45:b7:1d:2c:48:c1:
         1b:e9:1c:8d:2e:3a:d2:da:a3:eb:29:f3:e8:20:e0:99:1f:b9:
         95:ba:c3:b3:bc:67:41:c3:94:77:ee:f8:1a:7a:55:55:a9:d4:
         64:6b:4a:f4:83:c9:62:24:28:10:1c:fb:b2:cd:ee:70:bd:4a:
         a3:56:a9:9c:24:ca:cf:1c:20:b5:73:87:5c:a2:03:f6:11:06:
         08:87:08:74:83:7b:12:f4:e5:42:5d:2e:e8:7d:af:37:4b:cb:
         ad:c4:94:2a:ea:48:39:4e:3f:32:43:37:5e:4b:d3:b3:e3:ee:
         b5:d5:78:91:a2:d3:61:f5:c5:84:4e:7c:76:4a:a4:f5:8d:3b:
         e6:07:be:a8:5a:63:b5:db:75:dc:1a:3f:df:df:41:43:de:2a:
         9b:78:37:d9:22:2f:22:35:26:8e:6d:3c:4f:9c:57:0c:5c:7d:
         c0:65:aa:e6:7b:c0:9c:1e:05:03:37:56:72:5c:f5:85:5d:05:
         d1:17:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----