Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.mft
File:                     HaM5OZFAlInvn9dGCnWjcMrp3Kc.mft (raw, json)
Hash identifier:          v191IiTZWmjgv32ssr3azTRCw63kZFYpd+rLQKYifD8=
Subject key identifier:   8E:AE:BE:B8:FC:A7:17:EA:61:25:DB:81:B2:60:26:1D:62:CE:51:B9
Authority key identifier: 1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
Certificate issuer:       /CN=1da3393991409489ef9fd7460a75a370cae9dca7
Certificate serial:       018C14F246D9C1798DF96498CFF39E739ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.mft
Manifest number:          0877
Signing time:             Tue 28 Nov 2023 08:01:11 +0000
Manifest this update:     Tue 28 Nov 2023 08:01:11 +0000
Manifest next update:     Wed 29 Nov 2023 08:01:11 +0000
Files and hashes:         1: FlmOOUB0UeJOXnm118WnTvOeHoA.roa (hash: 4W1LmKIQUYyZJRH82LuAFDo/6vc7lZAMUD6Qn4Ez1LM=)
                          2: HaM5OZFAlInvn9dGCnWjcMrp3Kc.crl (hash: OaxRCiyTqvvnkqMDb3BPzRNyZLKHS/c5GfRtbMHp1cI=)
                          3: IbfTuVubnOBXjYDiwvIThNtGH2E.roa (hash: kt8RF1AKftg5WHw86HI3ZhdPtVVIRj4sc8hxm+I8Ppk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:14:f2:46:d9:c1:79:8d:f9:64:98:cf:f3:9e:73:9a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da3393991409489ef9fd7460a75a370cae9dca7
        Validity
            Not Before: Nov 28 08:01:11 2023 GMT
            Not After : Nov 29 08:01:11 2023 GMT
        Subject: CN=8eaebeb8fca717ea6125db81b260261d62ce51b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:e6:44:86:ee:48:dd:5f:39:34:b2:98:7e:
                    68:7a:6f:ec:71:59:dd:93:1e:f6:35:37:84:0a:a3:
                    be:b0:ac:35:63:d8:58:3d:5c:ce:4d:26:5f:79:43:
                    08:78:1f:e9:27:7c:ca:4a:f1:2e:33:15:21:cc:d9:
                    04:91:c9:66:f3:8a:36:03:99:77:5c:6e:b0:76:92:
                    e6:e9:e4:51:65:90:a2:20:21:1b:77:33:01:0b:4c:
                    df:78:cb:d9:be:24:7a:17:1c:ff:16:fa:5e:6f:ad:
                    0f:5e:1c:16:52:b1:6f:03:8c:f4:e8:30:39:00:8e:
                    bf:8f:4c:36:93:94:8c:5b:fd:ac:bc:c8:d7:38:2b:
                    c8:d5:35:7b:2e:d4:e4:90:a7:eb:7d:45:5c:70:71:
                    4d:d9:e4:a1:24:bf:8d:fd:97:05:d8:5e:5e:59:d0:
                    b7:5e:18:f7:94:56:28:55:37:56:b6:59:21:7d:9e:
                    22:c7:0e:cf:7a:d2:2d:e5:84:99:9b:fc:e6:ef:9b:
                    fc:10:e3:e7:81:47:e2:64:f4:01:7b:f6:64:7a:07:
                    f2:ef:84:23:24:06:08:29:95:45:33:74:66:10:d0:
                    cf:14:87:3e:5b:66:9d:17:ac:ca:c9:b5:50:73:21:
                    39:15:6e:2e:13:c8:6e:f7:c3:da:bc:2f:95:a9:5e:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AE:BE:B8:FC:A7:17:EA:61:25:DB:81:B2:60:26:1D:62:CE:51:B9
            X509v3 Authority Key Identifier:
                keyid:1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:6f:37:7e:b1:98:15:a6:aa:4d:6b:48:ab:0b:61:73:2b:
         62:be:6b:ae:80:8e:ea:12:81:eb:40:92:2d:9e:20:f4:49:5f:
         19:96:ec:1a:d1:7b:a6:b7:1b:30:b4:95:4c:84:7d:df:92:c4:
         b4:95:24:42:76:eb:3d:ae:94:1a:f3:f1:67:e1:cc:6f:c8:4c:
         2c:c6:d4:80:1b:45:87:0d:6f:0f:39:35:b8:6e:21:30:a1:33:
         ab:04:df:15:10:9d:62:cb:3e:f2:20:d6:5b:1e:c7:db:35:49:
         7d:82:7a:ac:63:97:b2:bf:ff:59:83:ff:ba:c8:11:73:fb:80:
         70:33:1f:13:f7:98:93:35:32:26:20:31:fb:ee:73:0f:25:37:
         b1:03:e3:3b:62:b1:33:5c:94:0f:4b:98:0b:e0:4f:8e:fc:a5:
         25:86:27:d5:43:f8:0a:47:42:10:62:94:4d:ae:b6:31:f2:7a:
         a4:99:67:3d:40:84:a3:8e:6d:0b:0d:c1:8b:f5:d2:06:62:45:
         70:f4:08:62:b8:5d:c2:9d:99:48:0e:d2:96:f3:00:73:9b:ff:
         88:95:3a:58:e4:4b:f3:fb:f1:3e:80:f3:72:77:99:61:02:e7:
         98:c6:fd:42:0b:c2:89:c1:2f:91:32:4e:44:d3:7f:e4:22:f2:
         79:73:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----