Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.mft
File:                     JchZYqHCaM6p_jKeT04uRFTSwIw.mft (raw, json)
Hash identifier:          HCCoUzzehxqxJ6BlPT0oubB3E5jm33MQ3GvQfosG8hA=
Subject key identifier:   BD:35:64:C1:24:6E:41:42:89:41:7A:9E:6F:B3:20:4C:98:59:82:5B
Authority key identifier: 25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C
Certificate issuer:       /CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
Certificate serial:       018C1ED0CB27DA61929EACEF0BF1E691F1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.mft
Manifest number:          0887
Signing time:             Thu 30 Nov 2023 06:00:49 +0000
Manifest this update:     Thu 30 Nov 2023 06:00:49 +0000
Manifest next update:     Fri 01 Dec 2023 06:00:49 +0000
Files and hashes:         1: 5T0c2zZ_uucIa43qW0TAbLbNrcE.roa (hash: WHQVNXTz5Qrh6D0JR2XlUs1ZZxV6uHq8rpaKWTh6y8c=)
                          2: JchZYqHCaM6p_jKeT04uRFTSwIw.crl (hash: PxOAIDMdwqjHVAppewBXlmwEO6lGJ9b7bOl9hG796GA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1e:d0:cb:27:da:61:92:9e:ac:ef:0b:f1:e6:91:f1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
        Validity
            Not Before: Nov 30 06:00:49 2023 GMT
            Not After : Dec  1 06:00:49 2023 GMT
        Subject: CN=bd3564c1246e414289417a9e6fb3204c9859825b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:81:92:a4:8a:bc:31:cb:02:13:9d:aa:6c:5d:
                    a0:c1:c5:7a:4a:a2:f9:d1:63:4d:f1:24:95:27:cf:
                    8c:9d:2d:60:e7:c8:a0:70:b6:ba:1e:cf:97:8d:00:
                    c8:4c:7d:3d:35:df:a8:09:1b:45:93:3e:39:17:6a:
                    87:46:8f:34:9c:d9:7f:7e:32:ed:d6:06:36:8c:83:
                    25:4d:9e:e3:d6:56:ef:29:a1:26:1c:52:b4:67:4f:
                    98:91:81:45:66:cc:51:f6:f1:bd:47:c5:e2:b0:e1:
                    4b:69:c2:92:a3:d8:65:31:57:ca:67:32:f9:26:15:
                    5c:9b:cb:bb:0d:a7:2a:b2:44:f1:5b:39:44:80:47:
                    3c:d7:09:35:83:b3:21:b4:f4:57:9b:41:f5:9e:77:
                    50:fb:4e:f2:11:fe:ac:22:8c:d3:c7:6d:a2:32:98:
                    ee:ab:61:10:e7:17:3a:5b:9d:6c:64:35:96:3d:5d:
                    29:82:22:38:2a:e7:8c:82:64:0f:2f:43:f3:66:15:
                    b4:35:7d:26:70:c1:16:40:95:68:33:df:04:f0:1f:
                    cb:e0:ac:73:5e:da:d0:ae:3b:8a:5f:7d:58:cf:2a:
                    ac:9f:d6:2a:ad:cf:c2:cc:df:af:62:b7:78:e1:e0:
                    3b:9f:21:c5:b3:d5:41:61:2d:ce:8e:7f:a3:cf:4d:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:35:64:C1:24:6E:41:42:89:41:7A:9E:6F:B3:20:4C:98:59:82:5B
            X509v3 Authority Key Identifier:
                keyid:25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:51:2e:55:eb:cc:6b:36:d9:b7:1f:7a:ad:ed:c9:c3:64:73:
         3f:5c:0b:23:1b:cf:ea:df:f2:79:e6:77:e6:69:16:91:c6:b5:
         d3:bf:5a:99:0a:87:c6:2b:76:06:4c:eb:4f:b3:9e:3c:95:b9:
         5e:89:c5:85:d9:c4:00:4e:9a:af:ce:5c:11:f6:9c:3a:ce:06:
         2c:7e:b3:ba:3f:f5:9d:fc:c0:e9:cd:3f:81:30:ef:23:c3:b1:
         11:09:a1:a0:ae:26:62:f6:21:26:1d:7d:64:e9:26:4a:3f:1a:
         5a:33:97:e5:5c:12:53:b4:e0:24:e8:ab:54:07:c3:ac:ec:3e:
         a2:4e:8e:cb:0e:2e:68:18:7a:be:19:70:b5:a8:15:c2:fb:f0:
         f8:a0:12:21:c9:71:04:15:68:1f:17:5b:3c:0e:69:9c:fa:4e:
         62:36:5d:f6:a7:82:88:86:52:2a:5a:3d:9d:22:1e:5b:b1:68:
         f9:67:3c:6b:2b:5e:63:09:ef:5e:e7:d5:ab:26:ae:03:11:c5:
         93:fc:7c:73:1c:fa:a0:ee:fd:75:b0:37:db:1e:b6:a0:f7:04:
         1a:b0:2d:53:1b:4f:48:83:75:fe:de:09:63:76:ca:a9:66:6d:
         8e:57:20:03:fe:57:08:cc:4f:59:ab:ce:23:91:70:b5:c4:cc:
         18:ac:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----