Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/Dmcxx993ciLoGwOAD4gVoH4LH8A.mft
File:                     Dmcxx993ciLoGwOAD4gVoH4LH8A.mft (raw, json)
Hash identifier:          T8knw8XxW81NabH0GJJeVFxVWh5RYguqDkkY5ZNfH/M=
Subject key identifier:   2F:5E:E4:69:15:F0:DA:20:7F:DF:53:D6:4B:80:50:4B:EC:08:E1:09
Authority key identifier: 0E:67:31:C7:DF:77:72:22:E8:1B:03:80:0F:88:15:A0:7E:0B:1F:C0
Certificate issuer:       /CN=0e6731c7df777222e81b03800f8815a07e0b1fc0
Certificate serial:       018B604B667C6BA05B1FF70101ED48AA259A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dmcxx993ciLoGwOAD4gVoH4LH8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/Dmcxx993ciLoGwOAD4gVoH4LH8A.mft
Manifest number:          0ABC
Signing time:             Tue 24 Oct 2023 06:07:16 +0000
Manifest this update:     Tue 24 Oct 2023 06:07:16 +0000
Manifest next update:     Wed 25 Oct 2023 06:07:16 +0000
Files and hashes:         1: 82JLJHDcswFlvncNYMcfUVlLUto.roa (hash: itr/JihMEKBH3XPZ9of72uV9V8Q5zMFsmI2hw2TurSA=)
                          2: Dmcxx993ciLoGwOAD4gVoH4LH8A.crl (hash: w6MhiJ9FKNkK3W4msYK41yKXA2kHHq1YTuBpjGfDb1o=)
                          3: GR8j0BQRYdlKWDi28VtBmIRKbGM.roa (hash: sM4ALsn/OZ5Kf7OCZUA4OKX+jy1E+Hu0NkDSUTSJ5fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:60:4b:66:7c:6b:a0:5b:1f:f7:01:01:ed:48:aa:25:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6731c7df777222e81b03800f8815a07e0b1fc0
        Validity
            Not Before: Oct 24 06:07:16 2023 GMT
            Not After : Oct 25 06:07:16 2023 GMT
        Subject: CN=2f5ee46915f0da207fdf53d64b80504bec08e109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:28:ba:6c:ea:d0:9e:32:b3:7d:6e:1b:b2:
                    06:74:5e:97:1a:f6:9e:3a:11:6b:a7:ac:65:54:23:
                    56:c7:6d:bd:19:dc:2a:6a:72:18:97:87:2f:d2:ea:
                    a8:17:5a:da:e8:a8:48:2f:8e:6b:4b:3b:ff:9d:2c:
                    1e:c6:25:ae:62:ab:a9:fe:fe:85:9b:ca:cb:86:92:
                    6b:fd:2d:c3:e0:8d:e4:21:a6:88:6c:2b:25:5e:53:
                    b5:67:b8:2b:51:dd:76:c2:be:5f:b0:63:05:c8:b8:
                    93:d9:54:72:98:a3:3c:ef:c2:d9:6c:46:c4:39:82:
                    6f:e6:36:98:94:b9:ce:d2:ec:65:f1:64:39:6a:41:
                    4b:2f:fd:3d:0a:1d:07:c1:1d:d0:96:32:7d:17:aa:
                    db:46:5a:6e:8c:5d:f6:d2:74:3f:30:bd:ab:6b:8b:
                    5f:6b:38:8c:86:f7:6e:18:89:de:07:8a:57:ca:fa:
                    4e:6b:75:12:05:dd:9c:1b:9e:4c:b2:9d:0e:79:25:
                    e2:ce:ef:f2:ab:11:1c:0c:90:90:fd:27:51:a0:36:
                    d5:0b:05:8d:85:69:97:17:8c:bf:ac:3b:0c:cd:a4:
                    c2:97:9d:18:0c:de:66:12:5c:90:d7:3d:6a:66:50:
                    76:28:39:93:2b:2e:23:7d:f9:df:26:91:d7:d8:4d:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5E:E4:69:15:F0:DA:20:7F:DF:53:D6:4B:80:50:4B:EC:08:E1:09
            X509v3 Authority Key Identifier:
                keyid:0E:67:31:C7:DF:77:72:22:E8:1B:03:80:0F:88:15:A0:7E:0B:1F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dmcxx993ciLoGwOAD4gVoH4LH8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/Dmcxx993ciLoGwOAD4gVoH4LH8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/Dmcxx993ciLoGwOAD4gVoH4LH8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b0:0b:d5:0c:c9:8b:fa:41:eb:7c:51:76:d2:87:22:e9:05:
         9d:5a:aa:95:dd:22:32:f6:94:e3:0b:e1:8c:ca:b2:81:5f:f3:
         31:da:d6:28:d4:82:19:95:74:ab:63:6d:c8:f5:32:70:1a:85:
         62:9a:4f:3a:92:00:12:f4:73:16:00:b8:3e:f7:e8:12:e2:5f:
         6d:c6:9f:5d:9c:e7:d0:a3:54:dd:2b:9d:55:00:8d:f3:fe:c2:
         97:56:77:4b:2d:2f:2c:74:d3:60:06:14:c1:c5:1a:75:ad:52:
         a7:ec:96:d7:97:ab:3f:49:9b:46:66:e4:0d:6d:e3:6b:4b:dc:
         cc:d6:15:35:9d:87:f3:4e:6c:61:35:49:35:33:65:90:52:64:
         04:54:29:15:2d:f5:ac:18:5c:63:ad:c6:0a:be:39:c6:d4:bd:
         75:fa:be:b4:7c:1c:14:4d:98:0a:88:24:df:6d:ec:3a:44:2c:
         b9:9a:b2:49:f7:66:a9:a1:97:b8:f7:96:f5:5b:70:6a:ac:8e:
         98:cd:8e:6f:69:fb:c8:6d:99:80:bb:76:58:ff:75:5b:b5:42:
         b9:e5:e8:8b:5e:10:8f:2d:0f:b0:16:e6:0b:f9:4d:96:e8:4d:
         1d:e0:c6:b7:cd:b9:d3:3f:e0:53:94:ea:6e:11:c9:1f:9c:a7:
         75:c5:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----