Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/fe8f31-7ed9-42e7-bb0f-22adef775178/1/bH_LLB0Rv9rJTz67ZflwA99KVQY.mft
File:                     bH_LLB0Rv9rJTz67ZflwA99KVQY.mft (raw, json)
Hash identifier:          IW1qz6vNQ8u3/xIVHAYA63HFZPyMiSh4c6C3FR4Yeys=
Subject key identifier:   1D:BD:58:2C:D7:3F:95:96:D9:CE:79:16:3E:AE:1B:A2:05:3F:8B:29
Authority key identifier: 6C:7F:CB:2C:1D:11:BF:DA:C9:4F:3E:BB:65:F9:70:03:DF:4A:55:06
Certificate issuer:       /CN=6c7fcb2c1d11bfdac94f3ebb65f97003df4a5506
Certificate serial:       01894912151CEC22872DBE5142CB1545DA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bH_LLB0Rv9rJTz67ZflwA99KVQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/fe8f31-7ed9-42e7-bb0f-22adef775178/1/bH_LLB0Rv9rJTz67ZflwA99KVQY.mft
Manifest number:          05B0
Signing time:             Wed 12 Jul 2023 07:47:49 +0000
Manifest this update:     Wed 12 Jul 2023 07:47:49 +0000
Manifest next update:     Thu 13 Jul 2023 07:47:49 +0000
Files and hashes:         1: Zyc4Fet7gqR40_0SFadHMbRt6B0.roa (hash: 9XCJbiEJInkXk3V9iBpWQvQen9XxqiJ9sP9ytGlY5Eg=)
                          2: bH_LLB0Rv9rJTz67ZflwA99KVQY.crl (hash: C137GNlwKwJtePF4wlr1zl6dRsR1wRFMEpFJ415HSoQ=)
                          3: nVruXn_IU50OfL_bBSaAHLmQWCo.roa (hash: AiP+VOOl36mV2PVgu3fwcgFNMipJZTA0zqfgmrEoY24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:49:12:15:1c:ec:22:87:2d:be:51:42:cb:15:45:da:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7fcb2c1d11bfdac94f3ebb65f97003df4a5506
        Validity
            Not Before: Jul 12 07:47:49 2023 GMT
            Not After : Jul 13 07:47:49 2023 GMT
        Subject: CN=1dbd582cd73f9596d9ce79163eae1ba2053f8b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:b6:83:56:df:6a:01:eb:fb:e6:90:b9:8a:
                    fa:67:e6:f8:14:71:54:05:cb:a3:1f:d2:71:f6:5f:
                    09:82:49:87:46:22:69:3e:63:81:6b:c1:f2:d6:17:
                    50:be:ff:09:77:ac:51:2b:87:69:b8:c2:2c:00:8d:
                    3d:a8:0b:b8:ff:ba:5c:a5:36:77:02:34:8f:ff:ba:
                    37:65:77:8a:17:52:d4:7c:1c:51:ed:9d:c4:0c:07:
                    39:a6:1d:1b:74:bd:45:b3:50:d5:f5:18:21:5b:30:
                    0a:c5:01:9f:9e:54:30:e7:36:51:31:94:37:e5:ab:
                    f9:08:1a:c6:6e:24:59:ec:07:9f:8a:98:56:96:99:
                    2c:ee:71:7c:a8:be:1a:1d:0e:7b:21:eb:b4:d1:e3:
                    e2:27:91:a7:ce:d3:eb:39:74:41:e5:16:40:f2:e2:
                    28:24:3c:23:a0:62:29:0f:bd:1e:ca:80:b6:3d:2b:
                    e0:05:a2:6d:e1:5a:d2:31:98:3f:24:87:d5:46:53:
                    ae:7e:96:58:be:85:64:70:8c:64:fe:4b:1e:0e:96:
                    9a:e8:14:5e:74:1b:6a:59:a9:97:3f:f3:8e:a8:4e:
                    3c:a7:71:fb:2c:6f:05:58:1e:09:5f:67:4d:2b:ee:
                    0c:a3:32:49:80:da:69:7c:b6:45:40:bf:6f:22:4e:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:58:2C:D7:3F:95:96:D9:CE:79:16:3E:AE:1B:A2:05:3F:8B:29
            X509v3 Authority Key Identifier:
                keyid:6C:7F:CB:2C:1D:11:BF:DA:C9:4F:3E:BB:65:F9:70:03:DF:4A:55:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bH_LLB0Rv9rJTz67ZflwA99KVQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fe8f31-7ed9-42e7-bb0f-22adef775178/1/bH_LLB0Rv9rJTz67ZflwA99KVQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fe8f31-7ed9-42e7-bb0f-22adef775178/1/bH_LLB0Rv9rJTz67ZflwA99KVQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:80:ae:37:e6:1d:d6:ab:cc:52:33:7c:2c:73:a1:e4:d1:92:
         55:8c:c1:1d:2a:26:55:5d:22:0f:c8:51:2d:e7:e1:91:2c:7d:
         b7:31:85:88:ae:a0:b3:38:02:ff:6a:a0:b5:d2:54:18:97:c5:
         f4:55:d3:45:e6:01:a8:d8:fb:4c:21:81:b7:ec:cb:40:5d:32:
         8f:e8:78:a3:12:c9:00:99:65:52:b3:a5:c1:25:9b:9d:a0:ea:
         a7:44:be:64:c6:d4:0c:8c:45:89:a0:02:54:78:6e:cf:2e:5b:
         16:20:a4:1c:6b:01:3e:62:ef:56:cf:9c:79:8d:79:3d:25:fd:
         38:22:8d:46:0c:f6:b0:86:fb:f0:8a:64:0a:8e:59:e3:b2:ac:
         a1:64:22:78:78:70:02:59:ea:cf:fd:b3:8a:a5:b8:15:e7:ad:
         34:d8:bb:3c:37:79:ba:a6:cf:42:f7:57:11:11:31:47:72:35:
         a7:5a:00:9b:34:0f:86:9d:63:ef:cb:93:0e:08:70:b0:16:c2:
         d2:b6:3d:4d:2b:23:84:7b:26:7e:f7:22:14:98:d0:53:bf:56:
         9d:21:fa:dc:8c:4b:e8:4e:a6:e1:d0:93:11:0f:c7:4a:c5:5d:
         87:c2:06:2a:08:6b:0e:b6:f1:7c:8a:f4:e8:c7:9e:e0:d0:74:
         b6:ec:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----