Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.mft
File:                     kabnzn1aAh-sMyuvhUELXj1hzZQ.mft (raw, json)
Hash identifier:          UDgMkAE/pX8iGpfUaV6IfsYHdycp1+L49BOJoVulYqc=
Subject key identifier:   9F:DA:97:94:23:AB:C3:83:E8:86:95:DE:BC:DA:65:8D:FA:05:58:C5
Authority key identifier: 91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
Certificate issuer:       /CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
Certificate serial:       018C908B78D084AD5E1CBA6303AD330241ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.mft
Manifest number:          084E
Signing time:             Fri 22 Dec 2023 08:01:48 +0000
Manifest this update:     Fri 22 Dec 2023 08:01:48 +0000
Manifest next update:     Sat 23 Dec 2023 08:01:48 +0000
Files and hashes:         1: 5EeMt85pmHbrc8tS0uOEQ0w0A0s.roa (hash: /eaDHE3PXnv99OEgq/6Q5iqOF1TPVQlYSgHyv84hc3Q=)
                          2: kabnzn1aAh-sMyuvhUELXj1hzZQ.crl (hash: DETiN2n9FmJUhISYzZCcsFF7CLfp5UyU6M87Ql9OCbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:90:8b:78:d0:84:ad:5e:1c:ba:63:03:ad:33:02:41:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
        Validity
            Not Before: Dec 22 08:01:48 2023 GMT
            Not After : Dec 23 08:01:48 2023 GMT
        Subject: CN=9fda979423abc383e88695debcda658dfa0558c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:72:e6:df:c3:58:7f:91:c0:6c:3f:8a:4f:e2:
                    8f:c6:cc:19:b7:40:3a:2a:c0:14:16:6d:b0:fd:6e:
                    ff:6b:47:a0:72:c3:c3:55:da:32:8a:75:7a:4c:22:
                    c8:a8:23:25:b5:03:d6:a7:e4:e3:c3:20:ed:72:ea:
                    b2:58:56:be:05:ba:53:12:fa:1b:57:0e:b5:f3:9c:
                    47:2e:3c:21:8b:ab:c4:91:04:54:b5:36:20:09:10:
                    17:2f:2e:84:c6:c8:9d:1e:0d:67:f3:42:c6:76:96:
                    0d:a7:4a:c7:87:35:e2:0a:27:42:83:34:0d:5b:4c:
                    41:82:af:a6:2f:83:c5:0b:d6:bd:80:21:72:17:38:
                    2e:b3:3b:e3:c5:04:66:62:4b:c4:2b:82:5d:50:6e:
                    52:ef:ba:a4:2e:40:ac:3c:37:eb:79:27:1c:f3:d8:
                    cb:bf:2c:d3:8d:90:7d:da:a4:e9:9e:63:2b:ba:52:
                    85:67:80:a0:92:fc:37:7f:4c:34:60:78:2e:cb:70:
                    4e:6a:47:00:0a:06:29:91:48:da:16:2a:54:34:96:
                    e2:9c:81:33:8a:77:85:78:28:57:2d:28:09:20:96:
                    ac:e7:ca:96:b7:16:6e:0c:1d:3b:b4:be:f9:55:6f:
                    ac:0b:ba:a7:96:75:d2:85:96:19:d0:0b:75:a5:d3:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DA:97:94:23:AB:C3:83:E8:86:95:DE:BC:DA:65:8D:FA:05:58:C5
            X509v3 Authority Key Identifier:
                keyid:91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ab:7c:e4:e4:38:81:0c:36:11:c1:8a:6e:ae:74:d7:a3:34:
         b5:70:7c:c5:4b:94:c0:b4:79:8b:91:83:8e:9f:9b:8e:99:d8:
         b7:a2:9e:e8:8f:f0:4f:cc:89:7c:d9:fd:bb:fd:71:db:7c:24:
         b9:b1:05:66:42:4e:b2:c6:44:10:fc:09:7e:e5:90:11:53:5f:
         e2:68:91:8e:79:68:71:89:97:05:d3:3d:20:98:34:97:60:ca:
         aa:9c:5e:ca:b7:98:91:d8:32:f4:57:8a:28:32:2c:d8:08:6d:
         05:32:dc:a3:7d:69:78:c7:9e:86:85:6a:a1:d5:7b:87:79:f1:
         21:c5:50:90:de:6c:54:cd:87:5b:1c:0f:f6:7b:b7:aa:3e:9e:
         8b:37:38:b2:7c:c8:80:0c:a4:2c:b6:99:77:b1:9a:3b:a6:33:
         a2:86:e0:40:d3:14:22:c6:6e:ab:c6:fe:b1:52:05:66:54:34:
         ec:c6:c0:00:b1:b7:9a:21:f5:30:ca:55:c2:92:a2:76:e9:e2:
         3b:c9:71:27:a3:ed:b5:c2:a7:1e:5e:1f:92:22:5b:fe:b9:7b:
         34:d4:b2:82:97:82:8e:f5:0f:db:41:4a:69:f8:59:8f:af:1a:
         78:36:fe:56:a8:cd:a3:d0:22:0e:db:f4:97:5a:95:b8:c4:ea:
         66:64:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----