Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/LzK11fG5jghe6joBbggMhZtBdYM.mft
File:                     LzK11fG5jghe6joBbggMhZtBdYM.mft (raw, json)
Hash identifier:          6p4AYqamaV4UwFZ1j+Bw589JO6VAlHl97dXzW0Ry2As=
Subject key identifier:   5F:49:5B:F4:12:74:73:D5:BE:DE:9F:6C:64:1F:6D:E8:D8:E3:E2:EE
Authority key identifier: 2F:32:B5:D5:F1:B9:8E:08:5E:EA:3A:01:6E:08:0C:85:9B:41:75:83
Certificate issuer:       /CN=2f32b5d5f1b98e085eea3a016e080c859b417583
Certificate serial:       018BDACB9F1591B61D983CB145154F7B02BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzK11fG5jghe6joBbggMhZtBdYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/LzK11fG5jghe6joBbggMhZtBdYM.mft
Manifest number:          0850
Signing time:             Fri 17 Nov 2023 01:00:59 +0000
Manifest this update:     Fri 17 Nov 2023 01:00:59 +0000
Manifest next update:     Sat 18 Nov 2023 01:00:59 +0000
Files and hashes:         1: LzK11fG5jghe6joBbggMhZtBdYM.crl (hash: nS8unKNjTC17rZ5mDfD0pMD3vzO/MXlXQvYh7ccxFfw=)
                          2: X2G9Un3_dDLPerhbYB6mziPC6wY.roa (hash: yAj9aUwFVn+EYSo0DAsKDijmfCHB/PWOI1swtVs+pjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:da:cb:9f:15:91:b6:1d:98:3c:b1:45:15:4f:7b:02:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f32b5d5f1b98e085eea3a016e080c859b417583
        Validity
            Not Before: Nov 17 01:00:59 2023 GMT
            Not After : Nov 18 01:00:59 2023 GMT
        Subject: CN=5f495bf4127473d5bede9f6c641f6de8d8e3e2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:6e:f1:0b:78:09:12:fe:58:6e:4a:c5:72:
                    e3:7d:70:56:90:21:6f:09:ff:99:2e:fb:6b:a0:25:
                    fc:70:d3:2f:f0:20:6e:71:83:3d:53:90:ee:b1:bd:
                    53:45:80:73:bd:2f:41:6b:11:05:a2:3a:47:ec:cf:
                    37:b4:65:b6:08:e8:64:b4:cc:f7:2f:08:e0:65:7a:
                    7f:81:da:0c:0f:67:65:ab:7c:cf:99:3a:21:98:2e:
                    06:ab:0c:47:7f:a1:fe:f9:ce:9f:92:78:da:10:a6:
                    7a:c0:ff:fa:bc:97:fd:81:07:3e:31:08:6b:6a:02:
                    82:a6:5c:f9:6e:b2:27:52:7d:e5:26:4b:87:c4:cf:
                    6e:a3:37:4a:0a:22:03:f1:d6:2e:27:27:9a:29:c8:
                    8d:90:ee:7f:95:71:7a:68:9c:bf:b2:d9:98:85:b3:
                    8d:8d:26:ba:2b:3c:80:ee:c0:66:5a:65:61:9c:b1:
                    8e:1e:37:e6:40:67:53:de:a4:a5:ac:38:e8:0f:3d:
                    17:6f:78:2d:28:f7:f4:ba:19:da:3b:3c:3c:a0:ad:
                    66:3b:24:35:81:da:7e:a8:0d:c2:44:db:4d:50:bb:
                    ff:1f:01:f6:8a:1b:4a:51:ca:a3:af:cc:6c:78:47:
                    9e:7b:f5:3c:12:c3:df:45:26:58:9a:55:e2:8e:98:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:49:5B:F4:12:74:73:D5:BE:DE:9F:6C:64:1F:6D:E8:D8:E3:E2:EE
            X509v3 Authority Key Identifier:
                keyid:2F:32:B5:D5:F1:B9:8E:08:5E:EA:3A:01:6E:08:0C:85:9B:41:75:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzK11fG5jghe6joBbggMhZtBdYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/LzK11fG5jghe6joBbggMhZtBdYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/LzK11fG5jghe6joBbggMhZtBdYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:32:16:07:f6:c5:e1:6f:de:1d:2d:b4:7a:71:a1:29:30:62:
         1f:9c:a0:9a:33:aa:58:c9:3e:b3:d7:0b:2b:c5:76:bb:3d:7f:
         43:5a:a0:a1:41:82:cf:7a:1e:28:37:ee:6d:d3:0f:8d:8e:90:
         d8:a3:41:f7:bf:fc:3d:98:e0:c3:52:7a:2d:44:47:80:f1:7b:
         cb:84:d3:5f:22:16:44:40:e6:7f:26:c5:ce:ad:a5:fa:d2:6d:
         5a:b2:0a:b1:bb:e3:33:37:62:65:5b:54:a3:2b:75:99:11:2f:
         04:c6:a0:a0:21:46:f0:6c:e3:66:35:5e:c9:f0:a9:a5:cd:aa:
         04:4d:7b:07:af:52:ba:ca:c0:3b:96:99:2b:f7:c6:0c:86:da:
         8c:3b:f9:a4:9e:c0:b4:bb:cc:df:79:84:0f:82:f9:ba:2d:12:
         f3:5e:2b:d2:43:99:4f:20:12:bc:2c:0d:13:30:8f:31:7c:a2:
         22:e6:4c:a9:52:96:50:83:18:87:15:a1:3e:7e:10:34:ce:8c:
         b0:0e:05:a5:91:d6:c9:4a:38:a8:69:91:29:c9:48:80:85:d1:
         11:e3:5a:85:54:59:ac:8d:5f:4c:b6:54:29:5e:0e:78:69:1f:
         ab:85:c1:88:81:4d:bf:13:38:d0:b0:d7:92:8c:42:27:94:04:
         e2:e7:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----