Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.mft
File:                     IY97c7jeWCg3DQid6mho4ow-D00.mft (raw, json)
Hash identifier:          uV7zlHhjU/oJVKzMZeyfSyJG71VSlj80kPLrO666EjE=
Subject key identifier:   E3:04:E7:7C:6B:0E:D5:EE:A9:A8:FE:24:0B:04:E6:69:24:29:B2:B6
Authority key identifier: 21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
Certificate issuer:       /CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
Certificate serial:       018BB83FC3BB4A044FF154E23F02898164CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.mft
Manifest number:          08CD
Signing time:             Fri 10 Nov 2023 08:01:08 +0000
Manifest this update:     Fri 10 Nov 2023 08:01:08 +0000
Manifest next update:     Sat 11 Nov 2023 08:01:08 +0000
Files and hashes:         1: IY97c7jeWCg3DQid6mho4ow-D00.crl (hash: bpYzPfgoBb1l/gGHOjx46gNu3Xv+r5LkmFoQi/Xb1ss=)
                          2: grEaOB8sK_HOeFsshBjbhHi7NgI.roa (hash: L5O7fzeoomgxw1YX1CQRrUFLHN+yowOfzHnc13bTmnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:3f:c3:bb:4a:04:4f:f1:54:e2:3f:02:89:81:64:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
        Validity
            Not Before: Nov 10 08:01:08 2023 GMT
            Not After : Nov 11 08:01:08 2023 GMT
        Subject: CN=e304e77c6b0ed5eea9a8fe240b04e6692429b2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:a5:64:af:75:d1:e1:41:cb:12:3c:0e:9a:
                    af:02:3b:21:6e:c5:2d:69:6f:2c:80:85:13:34:86:
                    df:f2:c3:94:f8:a6:ab:2d:b6:94:85:c0:5c:7f:13:
                    78:ae:e5:b7:20:3b:1b:0f:c8:5a:03:30:d8:4b:3c:
                    3e:88:0d:74:ef:2c:42:9a:c6:26:74:a1:11:16:a1:
                    57:50:04:a7:28:a6:e0:b8:e4:20:95:31:b3:50:1e:
                    38:11:5f:d8:26:ce:10:fa:4d:2a:50:10:92:6b:93:
                    85:f2:d8:6f:01:52:c4:52:9d:98:d7:ab:ba:10:2c:
                    d5:e3:73:b1:a2:24:fa:70:5b:b4:f2:6a:08:0e:a4:
                    65:69:73:a0:d4:9f:96:65:d0:6d:ed:e6:79:64:fd:
                    94:0c:e9:6b:90:71:87:d7:79:ca:28:89:71:2a:35:
                    60:be:a3:e2:4a:b8:82:6a:18:8e:bf:07:79:58:23:
                    50:c3:8b:64:4c:82:6d:cf:0b:a5:c6:00:d4:24:a0:
                    04:a5:28:ee:92:e4:ab:1b:7c:7a:68:7e:59:f7:19:
                    64:15:71:cb:a7:e1:95:27:46:5d:f7:01:32:d8:c8:
                    12:e9:67:48:b1:72:07:4f:32:a5:81:37:36:4d:19:
                    a4:9b:5f:fe:b8:ef:ad:f9:ff:9b:02:60:69:ff:35:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:04:E7:7C:6B:0E:D5:EE:A9:A8:FE:24:0B:04:E6:69:24:29:B2:B6
            X509v3 Authority Key Identifier:
                keyid:21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:51:93:95:e6:1f:7b:51:c4:63:c0:61:03:f4:70:d8:e7:f6:
         09:20:8f:7a:19:b8:e1:da:c1:e7:5d:44:76:6b:5e:8c:87:82:
         71:6d:3b:c1:d6:0e:6b:16:29:42:7a:4d:2e:62:d0:1c:cc:ba:
         68:f0:a0:47:e5:5c:7b:b6:d2:86:d9:c2:9c:2b:bf:01:27:e2:
         b2:88:d8:f8:3f:81:4c:27:40:d3:7d:f7:40:6d:5f:00:0b:47:
         ee:76:5f:ff:4e:f7:d7:5a:84:96:dc:e5:59:90:8b:da:2c:d9:
         9a:09:30:50:ca:32:41:0b:18:f9:25:c7:9b:d2:5e:e8:71:07:
         3a:50:bb:31:31:91:ff:08:6a:28:2e:8d:b1:98:96:a1:b0:b4:
         f6:c0:6f:e9:29:1f:73:5c:3e:89:47:2e:cc:fb:79:36:a0:1a:
         d4:b1:8c:92:6f:b3:2b:16:1a:3a:d8:9a:fc:44:97:62:67:a1:
         90:e3:d1:bd:91:8f:cf:04:63:d0:82:6b:ac:44:68:02:05:10:
         81:e6:9f:38:66:cf:52:ee:57:6a:4c:ba:65:7d:0d:97:7d:c8:
         48:5a:6f:32:c3:99:ba:3f:e5:84:31:45:dd:b7:26:e3:d8:4f:
         4c:ca:01:00:0d:6e:5f:1e:b8:be:e6:1f:ac:64:71:b3:2d:fc:
         d4:34:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----