Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/b3b3f2-1fb5-48f3-b8b5-1e8ebb09bcac/1/8o7XObMjPSTeFmU8Ssxv_MsIg_U.mft
File:                     8o7XObMjPSTeFmU8Ssxv_MsIg_U.mft (raw, json)
Hash identifier:          dhnT/nXiB2mfZopza8/WcOuVhVls/DwR6S1Snfkn538=
Subject key identifier:   63:FB:2F:B6:DF:29:5F:55:C5:BC:EB:3B:47:12:E4:5D:86:CC:90:63
Authority key identifier: F2:8E:D7:39:B3:23:3D:24:DE:16:65:3C:4A:CC:6F:FC:CB:08:83:F5
Certificate issuer:       /CN=f28ed739b3233d24de16653c4acc6ffccb0883f5
Certificate serial:       018C623127867B736217EE5B81589AEBA72B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o7XObMjPSTeFmU8Ssxv_MsIg_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/b3b3f2-1fb5-48f3-b8b5-1e8ebb09bcac/1/8o7XObMjPSTeFmU8Ssxv_MsIg_U.mft
Manifest number:          08D0
Signing time:             Wed 13 Dec 2023 08:00:37 +0000
Manifest this update:     Wed 13 Dec 2023 08:00:37 +0000
Manifest next update:     Thu 14 Dec 2023 08:00:37 +0000
Files and hashes:         1: 8o7XObMjPSTeFmU8Ssxv_MsIg_U.crl (hash: +3uku9g73fYBBt7II4FspZGzHCMLihx8GPFI57EQFkc=)
                          2: O2-onUAfbByR0sYb2nCOrZQ45Gs.roa (hash: tPc6Ad1Ny4D/sN1oaRZkbIJh1m2/F4T7t+a+Oqq9PUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:62:31:27:86:7b:73:62:17:ee:5b:81:58:9a:eb:a7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28ed739b3233d24de16653c4acc6ffccb0883f5
        Validity
            Not Before: Dec 13 08:00:37 2023 GMT
            Not After : Dec 14 08:00:37 2023 GMT
        Subject: CN=63fb2fb6df295f55c5bceb3b4712e45d86cc9063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:ac:a0:91:5f:47:58:86:0c:d9:43:9c:a2:
                    ff:27:7b:8a:e3:22:80:ff:81:04:38:69:df:27:6a:
                    5a:ac:ad:8e:57:61:3a:c8:f0:c9:14:b7:7d:1c:4f:
                    39:98:a8:30:ae:5a:21:f9:db:85:8a:a6:cf:9d:c5:
                    10:ab:91:fe:03:fb:f0:05:b7:26:28:45:3f:f1:26:
                    27:42:91:58:e0:f5:32:a2:73:1a:bb:6b:d7:bd:e3:
                    08:88:d6:d5:cd:50:d1:92:69:b5:46:10:5b:31:c2:
                    a3:9a:4b:66:7c:1a:00:fe:8d:75:2a:fc:ed:1c:70:
                    10:e3:c5:68:1c:4a:6f:89:23:a2:ae:e0:42:61:46:
                    b0:df:3e:b1:61:2b:60:98:24:4c:27:5e:22:d4:a1:
                    32:f2:94:1f:75:cf:31:71:b1:ce:95:c1:69:e1:97:
                    cc:a8:66:d7:99:ec:22:cb:2e:6a:0b:1e:b0:54:7d:
                    78:9f:a7:81:55:a2:5d:f5:d9:42:20:ec:01:a2:ce:
                    15:1e:86:f8:3c:ed:cd:fe:0c:54:d5:7f:76:f5:4b:
                    c8:ad:8d:d3:8f:0a:d2:2c:d2:a0:c6:6c:9c:b9:73:
                    e8:3f:7f:ef:c2:f1:b3:b7:31:a2:a2:27:3e:74:51:
                    be:58:21:f9:64:df:8e:b2:85:e5:3e:ae:93:38:21:
                    f0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FB:2F:B6:DF:29:5F:55:C5:BC:EB:3B:47:12:E4:5D:86:CC:90:63
            X509v3 Authority Key Identifier:
                keyid:F2:8E:D7:39:B3:23:3D:24:DE:16:65:3C:4A:CC:6F:FC:CB:08:83:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o7XObMjPSTeFmU8Ssxv_MsIg_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b3b3f2-1fb5-48f3-b8b5-1e8ebb09bcac/1/8o7XObMjPSTeFmU8Ssxv_MsIg_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b3b3f2-1fb5-48f3-b8b5-1e8ebb09bcac/1/8o7XObMjPSTeFmU8Ssxv_MsIg_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8c:65:0c:b8:81:f8:87:40:20:b6:f5:66:96:91:4a:3b:85:
         2e:3d:2f:41:f0:6c:45:bf:c7:b9:d6:fa:34:df:d7:1b:56:08:
         09:09:cd:d6:52:2b:9a:d2:4c:04:ea:aa:ff:56:ea:c1:a4:c5:
         30:12:e6:b5:9d:92:f3:a5:cc:c6:64:83:3f:3c:88:77:48:04:
         eb:d4:7a:d7:8e:f2:ed:09:23:3f:82:6c:67:1f:62:1f:42:a9:
         5d:06:59:43:52:9a:13:f1:e1:d3:7c:fd:0d:9b:83:8d:50:3c:
         3e:6c:d4:9b:0c:4f:f7:71:1c:ed:a3:7a:16:74:a4:79:07:2d:
         c5:2d:b7:bf:ab:dd:ab:e6:e3:59:93:33:be:b7:ef:94:9b:91:
         02:49:aa:ad:fa:18:bf:57:87:34:7b:24:88:2f:d1:f6:07:10:
         78:45:22:01:59:65:65:f7:32:c2:ee:73:7b:27:4c:2e:02:67:
         ad:3e:6c:31:75:52:e9:81:51:bc:d0:86:52:31:b6:c8:7b:6c:
         d9:e6:80:a9:8c:81:5d:87:a4:8b:b0:da:6b:db:44:89:21:91:
         92:7a:8d:aa:4c:2c:68:10:18:dd:10:9a:3c:ba:52:5b:a8:dd:
         4a:dd:53:ec:7e:cc:ab:cc:e1:a4:c3:a3:68:40:fb:85:12:0c:
         bc:b3:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----