Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.mft
File:                     Jxkl4prgOdQ2Gda09kQss3yelwU.mft (raw, json)
Hash identifier:          hmNRlN0JesLAqumgbadGbJ2aRNxzpyd0lY+S4Qw69u0=
Subject key identifier:   37:1B:17:B2:AB:6B:AC:94:00:7B:1F:78:02:5E:F3:AC:35:48:08:5D
Authority key identifier: 27:19:25:E2:9A:E0:39:D4:36:19:D6:B4:F6:44:2C:B3:7C:9E:97:05
Certificate issuer:       /CN=271925e29ae039d43619d6b4f6442cb37c9e9705
Certificate serial:       018BDA5D427F2F4072423A8EFE652C18A5EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jxkl4prgOdQ2Gda09kQss3yelwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.mft
Manifest number:          087B
Signing time:             Thu 16 Nov 2023 23:00:26 +0000
Manifest this update:     Thu 16 Nov 2023 23:00:26 +0000
Manifest next update:     Fri 17 Nov 2023 23:00:26 +0000
Files and hashes:         1: Jxkl4prgOdQ2Gda09kQss3yelwU.crl (hash: k4xidumONDnbTLB5upDQZkC5L4CtuAoiIxR0OqXFSrw=)
                          2: ve3Y9byTEYL_aihpAR46DLEL-bw.roa (hash: Vr0LkEuThEm3+Pjx79+LQ3B4VJjMeOi3s+dFcEtYjaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:da:5d:42:7f:2f:40:72:42:3a:8e:fe:65:2c:18:a5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271925e29ae039d43619d6b4f6442cb37c9e9705
        Validity
            Not Before: Nov 16 23:00:26 2023 GMT
            Not After : Nov 17 23:00:26 2023 GMT
        Subject: CN=371b17b2ab6bac94007b1f78025ef3ac3548085d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:32:be:7c:13:63:2a:1a:e9:70:f2:5b:03:
                    40:55:bb:4b:3d:d8:4c:ac:af:33:f7:a8:3e:28:d0:
                    38:34:83:6a:30:64:84:86:0f:88:97:1f:79:42:f3:
                    46:38:e4:35:1f:8c:fa:1d:80:2e:b9:24:3b:f3:33:
                    42:d6:7a:c8:dd:ad:2a:6c:fe:0f:78:bb:f8:f3:6c:
                    d1:03:b6:5e:28:73:a3:81:cf:e2:3f:ec:8e:f6:da:
                    1c:db:1b:b2:86:ca:4d:00:4d:1c:de:c8:d2:cb:bf:
                    4f:d9:81:d6:4d:c5:b5:f6:bb:1e:f7:8d:2b:84:aa:
                    54:37:86:e6:ea:ed:a4:e2:57:77:82:bf:f2:b9:df:
                    c5:df:79:48:1d:3e:ca:cc:71:2f:6b:01:09:3a:41:
                    88:40:4d:b8:8a:a7:a0:e0:6f:61:f4:4c:99:7d:b2:
                    40:75:11:21:5b:7d:61:07:be:63:c3:d1:95:da:2b:
                    05:56:6c:d9:8f:b1:cc:31:b8:a5:e3:96:d7:d9:97:
                    8b:d5:9d:68:97:6d:01:38:36:4e:ca:31:b0:88:54:
                    5c:72:80:3e:d9:b9:fa:3f:e0:26:8f:01:72:3d:b0:
                    f7:56:b3:3b:b0:41:c1:a3:e0:7d:d4:9a:6f:a7:48:
                    27:c3:89:03:27:4e:16:e5:a8:3d:e9:eb:24:e9:3f:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:17:B2:AB:6B:AC:94:00:7B:1F:78:02:5E:F3:AC:35:48:08:5D
            X509v3 Authority Key Identifier:
                keyid:27:19:25:E2:9A:E0:39:D4:36:19:D6:B4:F6:44:2C:B3:7C:9E:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jxkl4prgOdQ2Gda09kQss3yelwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/994e86-d57f-49cf-8246-f776d3336c62/1/Jxkl4prgOdQ2Gda09kQss3yelwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:93:61:ac:aa:6c:be:da:0e:31:fe:0a:1b:fe:80:de:47:33:
         ab:e8:a2:fa:b4:63:91:26:69:02:8a:e3:30:37:41:c8:91:fa:
         39:db:35:01:59:6d:11:8e:f5:9f:a4:76:28:00:f0:78:cc:80:
         61:48:83:7e:f1:ea:d7:d4:d2:ec:f9:9e:61:dc:e0:27:67:72:
         1c:df:63:d8:a1:b2:df:80:12:b4:36:f2:41:0e:73:69:ff:71:
         59:bc:52:0e:1e:6a:e7:9b:67:c1:d8:65:52:a7:e5:fe:86:95:
         64:7a:41:37:9b:51:b0:27:db:d8:80:ad:76:a8:8f:fa:77:d0:
         ed:31:7a:a4:7f:21:9d:55:f9:16:34:5c:ee:19:61:a0:4a:14:
         48:93:6f:0d:34:7a:63:c3:a8:6e:14:b6:27:1e:c2:ad:46:62:
         47:e7:67:97:70:af:9e:88:e9:ad:d6:d7:3a:18:b8:19:a9:62:
         95:e8:03:07:ca:17:e4:32:be:49:91:66:2c:96:bd:84:49:d7:
         ee:9b:a8:47:a1:53:26:ee:77:89:b5:8f:eb:eb:11:ff:6b:54:
         3b:ff:97:58:c0:e2:a3:ce:7a:92:d0:77:69:53:fc:55:7a:41:
         aa:36:52:1f:df:cf:0f:62:24:35:7c:71:78:b4:bc:fa:91:a6:
         2c:da:fd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----