Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.mft
File:                     3djV07KQmbJpJh7icU2h6VSMRjI.mft (raw, json)
Hash identifier:          mdJGAll2ULL5XPN7jwfbbQT8e82Yb0Phlbfp+6XY7+E=
Subject key identifier:   38:03:EA:F5:D8:A6:A1:0F:69:3A:35:11:F2:8E:D0:3F:6D:F4:F6:F2
Authority key identifier: DD:D8:D5:D3:B2:90:99:B2:69:26:1E:E2:71:4D:A1:E9:54:8C:46:32
Certificate issuer:       /CN=ddd8d5d3b29099b269261ee2714da1e9548c4632
Certificate serial:       018B3CDDD8BE9503AEDE0FBC894B20E83C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3djV07KQmbJpJh7icU2h6VSMRjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.mft
Manifest number:          0889
Signing time:             Tue 17 Oct 2023 09:00:53 +0000
Manifest this update:     Tue 17 Oct 2023 09:00:53 +0000
Manifest next update:     Wed 18 Oct 2023 09:00:53 +0000
Files and hashes:         1: 3djV07KQmbJpJh7icU2h6VSMRjI.crl (hash: K+B10zwQery/Pe7AomCZ3rKwpCXK3iwWp4vfdvumyUs=)
                          2: vhICLjPK5gdhKjdFHZH_oJ7YfRY.roa (hash: zZAwM15P1yg2rHM6ExCXPKOa/zA5oeK1mD+7UZWSx48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:dd:d8:be:95:03:ae:de:0f:bc:89:4b:20:e8:3c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddd8d5d3b29099b269261ee2714da1e9548c4632
        Validity
            Not Before: Oct 17 09:00:53 2023 GMT
            Not After : Oct 18 09:00:53 2023 GMT
        Subject: CN=3803eaf5d8a6a10f693a3511f28ed03f6df4f6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:0f:f3:cf:b7:ee:bc:04:0a:ba:8c:19:57:
                    3c:a0:53:40:8e:33:a9:81:6a:0e:7d:87:80:64:3b:
                    f9:c1:85:0e:49:cf:19:0c:aa:cb:da:3c:dd:40:6e:
                    bb:08:50:0d:95:03:ca:c3:af:8a:dd:b2:df:22:15:
                    83:34:de:ad:04:f8:ce:f6:d7:92:4d:b8:57:6b:fc:
                    67:0e:b1:11:3b:78:89:c1:53:1b:36:38:80:84:7c:
                    87:dc:1e:73:84:dd:bc:a9:1e:5f:49:05:bd:99:5a:
                    51:60:e6:1f:fb:e4:d9:d0:86:f9:28:51:80:61:24:
                    6d:bf:67:65:4a:54:2f:b4:91:15:a5:26:a7:a0:df:
                    3a:24:d2:de:08:5c:51:89:2f:0d:18:ef:a6:dd:ad:
                    86:65:e1:b8:c0:18:20:2e:01:2c:c2:17:52:a4:8d:
                    8d:47:41:0d:16:20:6f:2a:af:fa:4f:06:f0:ba:53:
                    96:a5:83:c7:43:bf:7d:32:9c:4c:11:c2:8c:32:e6:
                    99:f7:00:d6:5a:c0:f8:51:13:11:3f:54:7e:79:43:
                    9f:87:63:8a:84:f8:85:f4:8c:0b:0a:5c:23:33:f2:
                    8f:aa:21:b4:cb:75:49:44:4e:15:52:c0:a0:dc:83:
                    0c:14:66:82:92:fe:8c:16:03:da:01:32:64:f9:10:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:03:EA:F5:D8:A6:A1:0F:69:3A:35:11:F2:8E:D0:3F:6D:F4:F6:F2
            X509v3 Authority Key Identifier:
                keyid:DD:D8:D5:D3:B2:90:99:B2:69:26:1E:E2:71:4D:A1:E9:54:8C:46:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3djV07KQmbJpJh7icU2h6VSMRjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:e6:0a:e1:ee:43:f1:db:05:16:29:8e:a2:79:29:da:14:
         89:cf:66:dd:5a:bc:db:ea:9e:41:d1:be:9f:89:96:44:6c:a8:
         53:af:40:ed:8f:f6:80:4d:e1:6e:20:53:76:a3:31:18:79:30:
         10:77:53:bf:90:ee:ef:dc:e7:34:0f:22:33:f1:0c:93:9d:e4:
         4d:ac:cd:b6:7a:6f:3b:41:6f:8b:d2:4f:2b:7c:0a:60:21:e6:
         f8:04:22:f4:f2:7b:ea:64:9e:0f:a0:1d:87:57:8b:c4:76:ad:
         77:97:5f:af:8b:82:ce:eb:55:b8:6f:37:4a:f6:04:dd:37:c1:
         dd:0b:63:93:9f:80:6a:eb:b5:8c:fb:43:6f:f0:ad:95:1e:43:
         d7:b0:c2:b0:31:7f:95:a4:fa:cd:2a:24:ed:0b:30:cc:bb:c1:
         35:8f:9f:f4:57:96:4f:16:a5:45:77:0b:d2:b5:2c:bd:37:86:
         e7:d4:3b:71:7d:61:56:a3:a2:36:a0:63:c5:1d:45:54:44:99:
         f0:54:74:dd:57:6c:cd:c4:41:90:32:6c:02:05:4e:e6:26:c4:
         4e:16:9b:76:e7:50:8b:85:6b:e2:36:71:10:c3:d9:1c:a2:f6:
         57:6e:35:89:5b:6a:d8:ce:33:17:79:88:d2:d8:0c:32:38:19:
         3e:2f:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----