Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.mft
File:                     FbHRf4P-hCdFxM0j4fGh7LnNM5I.mft (raw, json)
Hash identifier:          I2qPY2FGXNQkDR2W1GMhoEqwGVRt5f8/h1ifTTZGzTs=
Subject key identifier:   E6:46:81:CE:B3:F0:02:A4:2A:A8:E6:8C:B0:DA:8E:BB:E9:75:51:E4
Authority key identifier: 15:B1:D1:7F:83:FE:84:27:45:C4:CD:23:E1:F1:A1:EC:B9:CD:33:92
Certificate issuer:       /CN=15b1d17f83fe842745c4cd23e1f1a1ecb9cd3392
Certificate serial:       018C1FE38D54C1BCD2AB704FD672B964BB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbHRf4P-hCdFxM0j4fGh7LnNM5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.mft
Manifest number:          085B
Signing time:             Thu 30 Nov 2023 11:00:55 +0000
Manifest this update:     Thu 30 Nov 2023 11:00:55 +0000
Manifest next update:     Fri 01 Dec 2023 11:00:55 +0000
Files and hashes:         1: 8ntjbL76NSSew7SIv0iKNwMn3CQ.roa (hash: bm/wkW3Mx82bBQXHNXPLp65iRJUeAgp3rRWQtolIpbA=)
                          2: FbHRf4P-hCdFxM0j4fGh7LnNM5I.crl (hash: Jj/vXYpfpwDK7F2zjYOKyiZShOu6xr5BGA4kJaGpREU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1f:e3:8d:54:c1:bc:d2:ab:70:4f:d6:72:b9:64:bb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b1d17f83fe842745c4cd23e1f1a1ecb9cd3392
        Validity
            Not Before: Nov 30 11:00:55 2023 GMT
            Not After : Dec  1 11:00:55 2023 GMT
        Subject: CN=e64681ceb3f002a42aa8e68cb0da8ebbe97551e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:dc:48:fe:85:c1:e0:41:99:07:c5:11:e4:
                    c2:f9:65:fe:53:d2:91:8d:22:5d:58:35:ec:3d:11:
                    1d:11:8e:04:4a:97:e8:28:2c:5b:8d:79:63:11:6c:
                    7a:a9:92:ab:e1:a4:d0:b6:ef:f4:69:a9:fd:f5:0e:
                    0b:f3:35:68:4f:fc:ef:f5:24:f8:9d:49:b4:c8:a9:
                    d5:fb:23:a2:1a:80:79:76:e1:16:de:b9:f6:af:4a:
                    a2:db:a7:2f:a4:e0:21:f5:f9:86:09:e6:cd:be:ae:
                    7f:33:59:cb:a5:38:e4:ab:21:0f:2d:fc:ae:2d:84:
                    a6:41:07:a6:8c:64:0b:12:66:15:67:8e:77:60:f9:
                    2f:aa:4e:1d:39:1e:de:d4:8a:0b:fd:3a:ff:0c:76:
                    80:d0:a0:92:07:35:e5:56:b4:66:ea:cc:19:82:80:
                    83:ef:ad:76:66:ec:11:3c:b9:ca:ec:73:3f:f1:4c:
                    93:cc:e3:4d:3a:89:9d:ed:d4:66:1f:6d:fd:44:55:
                    1c:f6:04:b9:33:06:40:fe:33:97:d5:42:39:2b:50:
                    4f:80:bf:02:e4:2a:0b:22:78:82:62:1b:db:34:7f:
                    f9:9a:07:a6:37:e3:1d:b3:6c:31:5b:ca:e3:7f:79:
                    5e:67:69:eb:38:50:31:4c:c4:c2:c9:fc:f3:46:68:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:46:81:CE:B3:F0:02:A4:2A:A8:E6:8C:B0:DA:8E:BB:E9:75:51:E4
            X509v3 Authority Key Identifier:
                keyid:15:B1:D1:7F:83:FE:84:27:45:C4:CD:23:E1:F1:A1:EC:B9:CD:33:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbHRf4P-hCdFxM0j4fGh7LnNM5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3e:5b:af:bc:ea:a0:ed:f3:08:3c:0e:55:04:ca:f5:f6:f6:
         6b:97:bf:89:f5:05:7e:41:4f:6e:04:6c:3e:82:2c:59:9e:38:
         03:f3:67:cd:02:72:79:b0:46:82:b0:f4:b8:ea:d1:20:bc:e4:
         04:d7:a1:2f:5f:94:0e:ea:c0:f1:64:8a:63:c6:b9:e4:51:96:
         a1:62:a4:8e:59:a1:52:71:c9:b1:ec:9d:68:7f:ad:eb:da:78:
         ff:3b:90:b9:7e:8a:23:54:e8:b2:75:b5:78:7e:b1:a4:1b:67:
         e8:65:ce:3b:a4:81:a5:16:80:48:90:c6:f0:57:95:fc:49:d9:
         7e:15:83:3f:87:91:a6:6b:82:5e:33:04:f5:bf:47:84:3b:3c:
         d1:f5:c4:57:0e:04:7e:e1:6f:a2:af:44:ec:e7:d3:1b:e6:7a:
         3c:c2:43:1b:dc:2d:ee:b5:a8:f2:ef:bb:57:cf:13:d2:aa:66:
         d3:72:31:00:1e:96:70:88:2e:0d:7f:c2:da:14:c0:18:c9:d0:
         5a:08:e8:b7:73:7d:2f:be:c5:aa:27:91:54:46:f9:ec:1a:f5:
         e3:35:70:69:39:c2:61:b1:49:dc:c4:32:c6:e7:1e:5f:87:6f:
         af:f5:99:db:95:d5:e3:ca:2a:c7:43:b3:c0:ce:d6:a9:b9:f5:
         ac:46:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----