Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/G3McnNHvo4lySqJm_ygPTBCMe-w.mft
File:                     G3McnNHvo4lySqJm_ygPTBCMe-w.mft (raw, json)
Hash identifier:          p/9tiWJZzLl01Rn9R6rkNwKq9i7jpG0vpEqj+hRRY8w=
Subject key identifier:   75:27:09:BD:A4:A6:1E:C5:E5:A8:96:09:6A:6C:63:A1:E8:CC:08:02
Authority key identifier: 1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC
Certificate issuer:       /CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
Certificate serial:       018ACB5AFF1214DBE180D699A76F9E39F2AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/G3McnNHvo4lySqJm_ygPTBCMe-w.mft
Manifest number:          0766
Signing time:             Mon 25 Sep 2023 08:00:52 +0000
Manifest this update:     Mon 25 Sep 2023 08:00:52 +0000
Manifest next update:     Tue 26 Sep 2023 08:00:52 +0000
Files and hashes:         1: G3McnNHvo4lySqJm_ygPTBCMe-w.crl (hash: eUr1bnT5RO6ag90M9ZsT2CXjnyohzU4H2qyufMQ2euY=)
                          2: QfMaN8XD6PcKf6myyz-0j4fnkcw.roa (hash: YHE/Gt+bMjp+Z+4qLgwR3M/CPVtf/kFYVpqIj+eEcqI=)
                          3: s09ox-0oucdTFbbwX-BILxORmdM.roa (hash: sTXijC43DmXPAftQmaq4v8VtNPlutWDgemMY0h6wAxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cb:5a:ff:12:14:db:e1:80:d6:99:a7:6f:9e:39:f2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
        Validity
            Not Before: Sep 25 08:00:52 2023 GMT
            Not After : Sep 26 08:00:52 2023 GMT
        Subject: CN=752709bda4a61ec5e5a896096a6c63a1e8cc0802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:34:b9:b6:7e:d5:44:dd:4f:67:a9:81:4d:12:
                    6b:7a:85:87:1f:cd:32:9b:9f:bb:70:4d:35:31:cd:
                    c6:a0:f1:e0:fc:ba:1c:e8:d9:71:85:c1:09:87:2d:
                    38:e2:21:a8:8e:0b:c7:0b:32:6e:81:d3:51:84:00:
                    db:e9:7f:9f:f3:84:f3:eb:c5:d2:c6:b1:37:5d:de:
                    ce:d2:c1:d1:2b:d5:22:db:a5:11:fd:d2:74:a0:98:
                    50:60:44:4d:2f:7c:19:2f:0a:77:2d:5b:da:56:f4:
                    72:5f:36:7f:ff:92:78:e6:db:b1:75:3a:3a:21:79:
                    38:c5:de:bc:30:f8:4e:ad:cd:a5:ae:bb:30:54:87:
                    a8:3d:82:32:e5:b5:a7:a2:6d:b3:1c:55:16:7f:4a:
                    e8:d6:0c:08:aa:df:46:db:56:68:32:a5:20:7e:f3:
                    56:5f:62:97:37:b0:6e:46:f9:88:bf:14:6c:f4:fa:
                    88:2b:45:e1:f0:a6:72:de:ee:77:a9:0d:35:15:81:
                    f2:e8:05:8b:de:f0:1c:01:c0:a4:87:47:b2:5a:db:
                    f5:69:67:30:2f:cb:27:56:b8:0e:21:78:c6:0c:18:
                    3c:f0:d2:bb:26:48:ae:cb:00:4e:41:44:ca:d3:cd:
                    23:7d:18:06:ff:06:31:ff:d6:98:c9:6d:6a:1d:fc:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:09:BD:A4:A6:1E:C5:E5:A8:96:09:6A:6C:63:A1:E8:CC:08:02
            X509v3 Authority Key Identifier:
                keyid:1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/G3McnNHvo4lySqJm_ygPTBCMe-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/G3McnNHvo4lySqJm_ygPTBCMe-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:80:37:cd:1b:31:af:b0:bd:ef:05:00:be:d5:f9:66:6f:1c:
         98:02:a5:9c:f0:11:ac:04:28:91:52:f2:c4:a9:e2:dd:b3:23:
         b7:ba:20:8a:b7:a6:bb:81:c0:0c:c3:78:8b:71:8d:a6:2c:c0:
         12:cf:18:4f:1d:c9:93:cd:1f:3c:e0:3f:d2:90:3f:6e:3a:87:
         5a:21:53:f8:2f:31:f9:2a:8f:5e:82:54:59:16:4f:ad:68:de:
         3a:8e:1a:7c:84:96:c5:e7:01:03:96:4d:a8:2e:1b:0e:0d:84:
         0b:a2:96:01:88:6d:68:05:2b:08:7e:55:8b:00:13:7f:a7:28:
         85:eb:3f:4d:b6:ac:0c:74:db:ca:52:23:f2:a7:d2:57:04:eb:
         4b:84:1a:8d:cd:56:95:61:cd:03:e7:32:3a:51:8b:14:e8:df:
         02:b2:a4:21:cc:98:97:ff:66:a7:0b:9f:a0:47:7e:c9:d6:ee:
         61:85:fa:5e:ac:64:f1:54:1a:15:00:60:63:bb:65:4a:96:d3:
         3a:69:2f:30:2d:60:44:18:92:23:dc:12:fe:21:6e:18:d9:cd:
         96:9f:bd:15:3c:84:d9:ea:32:5d:aa:51:fb:b4:1e:ba:34:b9:
         68:40:e7:e3:23:9b:87:a0:4d:1f:4a:42:ca:a3:70:ed:13:02:
         4e:6e:af:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----