Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft
File:                     o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft (raw, json)
Hash identifier:          K5Ytpbv20NCnR3+UgpXOqxts32OvFNflJbc5rCMgZ34=
Subject key identifier:   9B:6A:C7:9E:0A:CA:37:4C:EC:F3:9C:BD:9F:B3:B6:C9:C1:E9:71:D7
Authority key identifier: A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Certificate issuer:       /CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Certificate serial:       018A63B6CE406A4D9E43D568809D6395A789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft
Manifest number:          0864
Signing time:             Tue 05 Sep 2023 05:00:39 +0000
Manifest this update:     Tue 05 Sep 2023 05:00:39 +0000
Manifest next update:     Wed 06 Sep 2023 05:00:39 +0000
Files and hashes:         1: f82l9pzvTl-6uiPEKmi9GkRTq0I.roa (hash: 1v27Kgl5IHD2i6WaCzLYZX7YYS7kHPQuWxjQyNyn1XQ=)
                          2: o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl (hash: YQuAZCcUNKvDcjibEddePbiZd5E2qORZssWIVK3F7Lc=)
                          3: sJHpQ6nEkSymZbhE_e83FH-Ax9U.roa (hash: 8jLwi23dlw5/NLoV8HWgziNboOmWEDUFMjn3x9K2mo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:63:b6:ce:40:6a:4d:9e:43:d5:68:80:9d:63:95:a7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
        Validity
            Not Before: Sep  5 05:00:39 2023 GMT
            Not After : Sep  6 05:00:39 2023 GMT
        Subject: CN=9b6ac79e0aca374cecf39cbd9fb3b6c9c1e971d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:96:04:27:f4:82:8f:3d:f6:f6:36:7f:50:
                    2a:e2:34:1a:09:cc:38:8b:9c:a7:c5:ca:23:89:01:
                    45:0b:ae:08:d8:ae:09:3e:14:fa:ec:ab:e0:0a:fe:
                    a8:cc:36:14:17:ea:f8:c8:cf:d8:80:55:b4:4b:f0:
                    66:2a:99:d7:f0:9a:9c:0f:0b:02:4e:38:2f:5a:f2:
                    20:63:42:cd:48:90:54:b7:dd:d1:da:32:53:e1:e4:
                    95:ce:2e:46:c2:90:f7:3a:4f:07:d4:c8:48:f4:1f:
                    52:49:4f:e6:ef:38:d7:4a:a8:9c:ff:a5:7d:92:57:
                    57:58:44:4b:36:5d:cd:e5:f7:26:73:d0:56:7f:c5:
                    66:53:f9:5d:36:0b:75:0c:1a:27:bb:d4:93:5a:95:
                    d2:a2:08:1f:0b:4d:77:04:ab:b6:b4:c1:ff:6b:fa:
                    a7:42:70:94:81:41:e9:7f:a6:22:b0:fe:16:e6:37:
                    b2:37:a8:53:34:c8:2c:03:ba:d7:e4:63:4c:11:a2:
                    09:8e:46:a9:2c:e2:1b:84:24:90:12:22:af:93:5d:
                    a5:ea:77:99:b9:7a:54:72:72:95:fa:e0:63:70:71:
                    3f:b7:69:15:02:70:5d:a7:90:ed:3d:79:83:c5:c8:
                    a6:55:16:c6:f2:06:7a:d1:3b:53:b3:be:3b:ce:6e:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6A:C7:9E:0A:CA:37:4C:EC:F3:9C:BD:9F:B3:B6:C9:C1:E9:71:D7
            X509v3 Authority Key Identifier:
                keyid:A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:bd:f3:e3:a3:18:2d:48:89:09:50:c3:25:4b:80:b3:01:
         30:64:f3:33:b4:69:b1:12:d5:87:46:fc:56:b0:f3:f5:c6:70:
         43:22:de:f4:75:0f:78:40:b3:2b:d2:bc:2f:1e:1e:61:3d:26:
         6c:73:bc:05:2f:43:3d:97:5c:98:23:15:e6:b6:26:df:fc:fd:
         af:89:af:d8:0a:a7:40:c4:bd:a3:a4:c3:3e:cb:b5:7c:50:60:
         ca:af:e6:28:df:70:24:58:a9:c6:44:fd:11:d0:9b:66:cc:0b:
         55:a7:b4:64:b3:c7:98:c2:48:9d:d3:2b:8e:1b:24:a3:8c:cc:
         8f:74:f7:37:e9:1c:91:03:79:fd:03:71:fa:ed:5d:c3:e2:02:
         83:8f:5f:a3:e2:97:25:46:ca:49:93:42:66:3d:17:cb:e4:84:
         25:2f:a1:51:70:7d:7c:ee:ea:4a:39:59:04:fb:8c:f2:83:13:
         74:0d:c4:a9:96:67:8e:51:46:ab:39:01:5c:f8:f1:6b:af:56:
         7f:0c:2c:94:f7:67:39:af:d6:07:d6:5e:d9:8e:46:f4:a5:60:
         bf:27:69:a7:a0:ba:3c:b3:40:e3:92:bf:bc:54:77:eb:e3:4b:
         a9:ba:23:ca:cb:87:5f:78:7b:0f:e5:e8:77:da:3c:a4:45:ee:
         58:31:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----