Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.mft
File:                     W8lpASN89hqtC3k7cl74vQ5ek3s.mft (raw, json)
Hash identifier:          UVJts+CcAevU6WZEP0ro7rBj9OefzCWVM3Ot8yqm8GY=
Subject key identifier:   23:8A:6D:4F:D8:F3:34:9C:62:F9:86:CD:55:AB:FC:8D:B0:06:2D:DF
Authority key identifier: 5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B
Certificate issuer:       /CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
Certificate serial:       018B7F999103F44AEA1A1030DE52775C2B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.mft
Manifest number:          088F
Signing time:             Mon 30 Oct 2023 08:00:52 +0000
Manifest this update:     Mon 30 Oct 2023 08:00:52 +0000
Manifest next update:     Tue 31 Oct 2023 08:00:52 +0000
Files and hashes:         1: 1-VxrJKuQWo0d6EfiTUUCahxUZZI.roa (hash: CsuKk9KMlJiHt+XJxY2GxaC01af4ZX0NxAvglODykpA=)
                          2: W8lpASN89hqtC3k7cl74vQ5ek3s.crl (hash: 6ntpYdI9AStSlUgjHf9e2EPIokyJGz8P8FdRtKFYp4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:99:91:03:f4:4a:ea:1a:10:30:de:52:77:5c:2b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
        Validity
            Not Before: Oct 30 08:00:52 2023 GMT
            Not After : Oct 31 08:00:52 2023 GMT
        Subject: CN=238a6d4fd8f3349c62f986cd55abfc8db0062ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:d8:9f:0c:b4:22:5c:a9:f7:6a:25:10:60:
                    67:88:05:fc:56:c2:2a:a4:08:bf:92:b1:9f:25:46:
                    74:e1:2d:64:6a:b5:c4:16:da:0e:6d:fb:23:b1:94:
                    ca:28:a8:27:74:c3:d6:e4:8d:7c:bf:f2:dc:1c:5a:
                    e1:98:61:a2:40:1f:80:6c:17:49:01:0d:3c:9b:ac:
                    40:3c:0c:9f:53:93:97:f2:17:0a:98:27:27:b8:72:
                    03:e7:4f:01:fe:48:1c:0c:9e:b5:15:56:d0:f9:b0:
                    17:2b:ba:fb:10:d0:55:fd:08:24:f7:88:81:6e:9e:
                    c5:b6:b1:2c:8d:8e:b0:a4:67:46:49:5b:2a:54:c1:
                    78:6f:5c:0d:dd:c7:28:24:b9:2a:85:11:1a:32:aa:
                    e6:83:03:bb:5f:0f:59:3f:d9:9f:4e:e5:36:89:d7:
                    9d:ca:6d:29:42:a3:34:89:04:20:c8:ad:b0:7c:d0:
                    b4:12:d0:41:ab:23:2f:6a:04:0b:cb:05:f5:3f:36:
                    03:4a:ec:7f:b3:3e:98:16:12:cd:6f:59:92:bc:26:
                    c0:26:ca:30:d9:7f:2e:b3:80:6b:9f:9a:71:30:2c:
                    e2:3e:d6:77:5b:02:9c:59:5d:a1:58:c7:cf:26:8b:
                    e3:7e:71:e0:bd:17:e5:a2:1b:93:1a:f6:64:bd:1a:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8A:6D:4F:D8:F3:34:9C:62:F9:86:CD:55:AB:FC:8D:B0:06:2D:DF
            X509v3 Authority Key Identifier:
                keyid:5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:44:cf:5c:c5:b1:d5:aa:2c:ff:05:58:41:c1:53:b0:89:14:
         d3:73:d3:e8:4f:c5:26:1c:ce:e5:b4:d3:87:63:3f:ad:12:48:
         94:9e:d5:ef:7b:01:c2:f5:ef:3d:b1:8e:3f:4d:02:84:7b:c9:
         9a:7b:6f:31:20:85:0f:7d:d2:f8:87:90:27:8f:8c:c1:4c:f1:
         f9:ee:3c:9d:d2:fa:0f:01:0f:2a:20:18:03:f4:d3:32:d6:1d:
         4e:4f:53:b0:ef:ba:e3:22:db:24:1a:ca:c5:86:e2:a3:02:07:
         08:79:ab:49:f6:2d:ab:6c:28:60:4b:02:98:67:b7:97:fe:85:
         b5:e0:cd:fe:d3:79:47:2f:ba:48:b4:c6:7d:ae:25:65:58:9c:
         47:02:93:c0:3e:b9:96:43:01:10:72:fc:bc:76:ac:99:4d:2c:
         0a:1b:fc:fd:1d:78:22:28:42:7a:42:96:9f:be:22:41:00:fa:
         59:31:e3:c6:22:f0:78:7c:22:94:e8:1e:a7:4c:09:5b:cb:47:
         6b:87:3e:27:40:91:90:ad:44:2e:c0:98:24:32:61:6e:6b:3d:
         82:16:42:e7:f7:90:1c:7d:3e:b7:d0:ab:70:0f:2d:50:ba:50:
         22:78:88:d6:21:10:83:04:5e:71:6c:0f:5d:fa:60:ba:9a:d7:
         83:38:87:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----