Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.mft
File:                     dWIOVmZRi7cAQJ-0CHqHXJnzchE.mft (raw, json)
Hash identifier:          wvUWgE+h6TV2v4sR14BhVEjMzX0T8So3VNnkx+2TaZw=
Subject key identifier:   68:F8:A3:DB:5F:4B:38:99:9D:A8:85:EA:BA:9F:CE:AD:16:A5:AB:07
Authority key identifier: 75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
Certificate issuer:       /CN=75620e5666518bb700409fb4087a875c99f37211
Certificate serial:       018BFFEB04B118BAB0B813D6D54957D3EABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.mft
Manifest number:          08CF
Signing time:             Fri 24 Nov 2023 06:01:14 +0000
Manifest this update:     Fri 24 Nov 2023 06:01:14 +0000
Manifest next update:     Sat 25 Nov 2023 06:01:14 +0000
Files and hashes:         1: DFPFXta21as4NEpN2OPTGT43naQ.roa (hash: UCJHSyKjvf6td8B5r8ejqO4sQ4jj0S0dXq734H0NjBs=)
                          2: dWIOVmZRi7cAQJ-0CHqHXJnzchE.crl (hash: 0E/lYbTxcS4YJM7uI1Ss3PN9y3lhQ3xOLtHFV0Wnjng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ff:eb:04:b1:18:ba:b0:b8:13:d6:d5:49:57:d3:ea:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75620e5666518bb700409fb4087a875c99f37211
        Validity
            Not Before: Nov 24 06:01:14 2023 GMT
            Not After : Nov 25 06:01:14 2023 GMT
        Subject: CN=68f8a3db5f4b38999da885eaba9fcead16a5ab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:20:65:38:21:de:6f:79:17:a1:0c:df:53:
                    a1:31:e3:b8:13:38:78:a0:fc:e8:b2:38:10:83:1b:
                    2b:4a:fd:36:62:10:77:0e:14:78:44:9a:fe:44:eb:
                    59:a2:07:ac:c0:6b:30:73:aa:52:66:c4:f7:15:0c:
                    4e:c4:35:7f:0b:1a:b1:8c:3c:6f:78:4c:df:d5:3d:
                    ef:8b:cd:ee:35:8e:37:df:1c:a0:d9:a0:d4:9f:63:
                    c6:2f:f3:0f:e1:f6:17:a1:5f:bb:24:93:13:dd:5f:
                    0a:8a:75:de:ab:1c:16:14:95:75:7e:72:83:3f:a7:
                    7a:91:42:f2:0c:5e:fa:80:a8:0a:16:36:e7:b7:4c:
                    5c:90:2f:59:71:0d:e9:56:10:fc:56:6d:2a:77:16:
                    c8:51:23:91:9c:31:74:88:c4:73:8d:c5:c2:ed:32:
                    84:98:2c:00:d6:c1:fd:76:f7:fa:3c:6a:33:84:4e:
                    10:c7:1c:1e:38:4c:3d:0f:73:88:b9:e4:9e:bd:1e:
                    6a:29:8a:e9:b1:e4:6a:fb:8b:7f:30:99:23:9e:e3:
                    80:5c:bf:65:ba:b8:e1:dc:c0:1b:98:09:58:fe:56:
                    60:3b:a7:63:90:4f:b8:53:34:c0:09:37:69:75:25:
                    ed:a7:a9:88:73:e4:e5:52:69:ae:f8:d1:d8:4a:99:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:A3:DB:5F:4B:38:99:9D:A8:85:EA:BA:9F:CE:AD:16:A5:AB:07
            X509v3 Authority Key Identifier:
                keyid:75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:77:33:1f:d7:f9:82:99:74:49:a8:a1:4e:89:00:72:59:18:
         ac:5a:fd:16:98:40:40:43:a2:6c:8b:a0:47:dd:37:29:32:b6:
         5e:91:8d:c9:47:b5:f5:96:fe:32:cd:89:50:22:8e:9d:62:ce:
         b2:ee:c8:7f:ed:3a:4f:89:56:11:c9:22:ec:5e:04:93:9e:5b:
         32:14:fd:e8:df:a2:ae:16:a0:a5:6a:8e:62:25:ff:30:28:1d:
         2f:21:b8:20:81:9b:2b:04:e8:6c:37:e2:e6:ea:f1:ac:80:d1:
         cc:59:5c:ba:e4:3b:08:7d:94:9e:81:53:25:cc:43:d6:de:93:
         27:c7:39:6c:d3:91:d2:43:62:33:82:4e:52:cd:32:a8:19:12:
         74:79:4f:55:22:5a:f5:51:26:d2:0a:42:35:b1:5e:6b:b0:0f:
         5e:c1:8a:37:10:4f:7c:69:b9:e9:82:ff:c8:bf:80:99:92:65:
         87:b8:3b:e3:da:63:31:38:d2:5f:1d:32:cb:d9:2e:52:0b:44:
         03:7f:0e:15:f4:e4:31:8e:55:fd:7a:59:bf:05:4e:86:52:14:
         ea:c8:b1:c4:a9:aa:10:c7:75:df:35:f6:7a:ee:e0:b3:3f:a9:
         75:b3:67:85:30:c4:2e:bc:f2:3f:30:a9:a9:dd:84:f5:47:8f:
         85:a3:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----