Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.mft
File:                     MnUZ_IaE06lELfaWGRQiKCeaT1c.mft (raw, json)
Hash identifier:          RSUuR9zLCaAPyDxA58DQFTdI22Zi1ueG0JbKxKJP/sI=
Subject key identifier:   B1:02:C6:77:E9:98:D9:63:9F:EE:C0:D9:E6:79:07:81:22:0A:0E:AF
Authority key identifier: 32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
Certificate issuer:       /CN=327519fc8684d3a9442df69619142228279a4f57
Certificate serial:       018BFB9FE0FB3578E1C56CF60CF683381A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.mft
Manifest number:          0878
Signing time:             Thu 23 Nov 2023 10:00:40 +0000
Manifest this update:     Thu 23 Nov 2023 10:00:40 +0000
Manifest next update:     Fri 24 Nov 2023 10:00:40 +0000
Files and hashes:         1: 1-nF-UfFWejEWd6ERt7rOoSQ67Qo.roa (hash: M8D9qGcn9h7W3G5BLZtOqS3EoANkpn8F9BFiOx2z4YY=)
                          2: MnUZ_IaE06lELfaWGRQiKCeaT1c.crl (hash: G/3CZ2hZ6ksW6YOsy19lTR61gjQkhX2g46JdTm7V7FY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fb:9f:e0:fb:35:78:e1:c5:6c:f6:0c:f6:83:38:1a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327519fc8684d3a9442df69619142228279a4f57
        Validity
            Not Before: Nov 23 10:00:40 2023 GMT
            Not After : Nov 24 10:00:40 2023 GMT
        Subject: CN=b102c677e998d9639feec0d9e6790781220a0eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:44:ce:8c:36:a6:18:e0:ba:5e:04:1b:01:
                    b8:4d:48:51:56:6d:05:da:47:c9:ff:f7:36:46:99:
                    e1:c2:d3:8b:d5:82:95:ff:8d:39:23:d7:4c:09:da:
                    b9:17:81:ad:e2:85:fb:47:c7:db:1e:d7:e1:0f:d0:
                    98:f2:79:67:5d:13:89:a1:1d:49:97:10:f4:93:ef:
                    0f:27:cf:07:a6:2a:65:8c:6e:72:35:38:a6:62:41:
                    eb:d7:ac:43:ba:0a:c6:84:98:8b:c1:b3:a8:e6:36:
                    d5:20:28:4d:8a:2d:ad:4b:d1:78:41:28:60:f6:89:
                    08:55:b1:05:de:c1:e3:1c:53:07:0b:fc:f6:c5:00:
                    3e:3e:8f:43:41:19:85:a8:39:58:6c:6f:16:bf:7f:
                    a9:77:f1:b1:f7:65:84:a4:9f:d4:fc:81:10:5e:a8:
                    86:bb:e6:1a:e2:67:38:7a:7a:3d:b9:5f:00:6f:8b:
                    61:15:02:56:e7:97:42:67:37:37:95:b4:b6:53:3d:
                    18:24:fb:8e:09:67:2f:64:13:16:c7:c9:e4:28:4b:
                    b2:bd:3f:5e:7d:df:8c:3d:04:6d:9c:51:54:61:eb:
                    f5:c6:05:c6:f5:6c:70:e3:44:3e:9a:49:54:4e:c1:
                    b2:a2:08:30:4b:20:11:72:60:1d:2c:4a:f7:0e:84:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:02:C6:77:E9:98:D9:63:9F:EE:C0:D9:E6:79:07:81:22:0A:0E:AF
            X509v3 Authority Key Identifier:
                keyid:32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:33:1f:13:7a:ea:00:fd:76:68:36:97:2e:cb:03:d4:51:2a:
         80:87:89:fd:e3:ca:72:ec:15:4e:7e:b2:1d:3f:5c:e5:5a:f9:
         02:ce:f0:1c:fb:e6:e4:96:7b:fa:cf:f1:f7:42:a8:d1:9d:d3:
         49:62:1e:d6:d8:5f:c9:fc:0c:c4:b9:c0:a1:25:9c:70:72:ee:
         e5:54:72:5f:a6:73:7b:82:76:14:a2:3e:68:65:7b:8a:a1:72:
         85:9a:de:89:8f:07:6d:7a:b7:3f:2f:b8:de:0e:b1:ef:97:31:
         0d:11:fc:70:da:8b:14:b4:de:74:2d:aa:76:c9:da:41:dd:13:
         0f:d3:33:b4:78:06:aa:89:e6:e6:2e:a8:c9:fb:32:5b:29:64:
         73:98:a0:8f:ee:2d:06:95:c1:fa:cc:7e:bd:51:6a:16:4a:26:
         f1:77:15:94:47:20:0a:37:82:2b:9f:73:29:3f:78:7b:22:00:
         03:f5:50:44:9d:96:59:8a:2d:e6:8e:b4:5e:89:dc:30:2d:9d:
         cd:0e:f6:2f:c1:b9:cf:af:f2:d1:53:1d:75:14:cb:25:68:8e:
         e0:67:1d:0c:5e:02:23:a2:fc:6c:bf:32:a7:89:5c:79:87:5d:
         00:30:eb:17:9f:26:5b:f8:83:ff:aa:a1:aa:cc:25:06:71:17:
         86:e0:8b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----