Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/293987-2751-4baf-bc54-03834f364be0/1/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.mft
File:                     nu0DtWNLDv-wtM_Qhv1MLBkE3DI.mft (raw, json)
Hash identifier:          ffUB1tuFn+ZEc9Lh1lnNX5WezVXFJlhXWfbJfgbFnf8=
Subject key identifier:   4D:BD:2A:B3:18:EC:3F:5F:96:EA:A1:27:73:87:AA:53:87:D8:B0:C4
Authority key identifier: 9E:ED:03:B5:63:4B:0E:FF:B0:B4:CF:D0:86:FD:4C:2C:19:04:DC:32
Certificate issuer:       /CN=9eed03b5634b0effb0b4cfd086fd4c2c1904dc32
Certificate serial:       018B13AB4E35C74CE923DA6854D1DC384237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/293987-2751-4baf-bc54-03834f364be0/1/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.mft
Manifest number:          084B
Signing time:             Mon 09 Oct 2023 09:01:15 +0000
Manifest this update:     Mon 09 Oct 2023 09:01:15 +0000
Manifest next update:     Tue 10 Oct 2023 09:01:15 +0000
Files and hashes:         1: 3GXmrylVFA-kwB9wFff3L9legHU.roa (hash: ++MFgZ+H6QanQQQkN5Zxw7q2X2l8wHr2DlQGtKJwRfs=)
                          2: 9UkN9NKwicaYfew7QSIjROIF0mE.roa (hash: N3j9Td7v/9ACFbhhsBRXlPVlvgV0ViQOqk2AvL0W0l8=)
                          3: nu0DtWNLDv-wtM_Qhv1MLBkE3DI.crl (hash: uF5JHl3lCVQeJ8X/twGmcie2bVrxaRFKAXRwRl8nlik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:13:ab:4e:35:c7:4c:e9:23:da:68:54:d1:dc:38:42:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eed03b5634b0effb0b4cfd086fd4c2c1904dc32
        Validity
            Not Before: Oct  9 09:01:15 2023 GMT
            Not After : Oct 10 09:01:15 2023 GMT
        Subject: CN=4dbd2ab318ec3f5f96eaa1277387aa5387d8b0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:b3:eb:62:d2:33:78:14:b4:43:02:48:c2:
                    69:5e:02:aa:b6:98:1f:2a:c7:47:a7:28:be:f2:6b:
                    8d:ef:f9:1c:0c:37:5d:2c:57:f5:a3:56:0c:58:04:
                    97:e4:8b:5d:6f:06:ce:bb:1e:93:41:4c:bd:97:f2:
                    01:9f:0e:b1:3a:cd:2f:e6:4b:89:73:3f:19:9b:3e:
                    d5:80:b6:dc:80:bc:5c:67:f1:73:e8:7a:08:51:99:
                    7f:23:38:e3:a6:c3:97:e9:2c:b2:11:fb:ad:21:3e:
                    59:82:4c:40:c8:fa:73:3d:de:51:5c:43:44:90:04:
                    cd:21:4a:c7:98:de:f4:0c:8e:70:e6:c1:a4:1b:07:
                    f1:a5:6f:fd:bd:4e:d0:14:07:3b:6c:6d:aa:da:79:
                    ca:45:77:f0:c6:6e:c9:68:2c:8f:ff:53:91:a8:4e:
                    4f:51:c2:44:07:7f:76:83:41:e5:dd:24:2b:a7:bf:
                    86:c8:53:ba:c7:f3:b7:97:29:fb:71:8a:5e:1c:86:
                    28:fc:1a:fd:99:8e:f8:77:aa:f6:ee:d7:4a:df:c4:
                    e6:67:f7:97:88:dc:06:9e:15:05:65:b8:17:bb:4d:
                    da:64:76:06:7a:9b:dc:41:f3:22:7d:b3:ad:68:f4:
                    47:23:d5:c3:6d:4f:e3:b5:4f:94:18:72:88:9f:9d:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BD:2A:B3:18:EC:3F:5F:96:EA:A1:27:73:87:AA:53:87:D8:B0:C4
            X509v3 Authority Key Identifier:
                keyid:9E:ED:03:B5:63:4B:0E:FF:B0:B4:CF:D0:86:FD:4C:2C:19:04:DC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/293987-2751-4baf-bc54-03834f364be0/1/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/293987-2751-4baf-bc54-03834f364be0/1/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9f:14:03:cd:ac:e0:92:f3:34:1d:52:f4:5f:2d:36:42:03:
         1f:39:6f:66:1a:58:fa:af:23:cf:14:84:7b:ed:b8:11:e7:d1:
         41:ae:ac:be:13:db:09:c9:6f:00:40:c7:f2:c1:0b:bc:72:52:
         cd:a2:3f:2d:5f:8b:48:88:ab:cc:40:bf:a7:94:a4:a3:19:5e:
         c6:79:7b:27:ca:ab:57:d5:6a:32:93:8b:dd:65:bc:6a:e9:75:
         4a:2a:cd:aa:06:ea:a4:02:9f:81:f8:13:19:8c:cb:5f:f4:a1:
         47:8e:e7:0d:9d:75:5d:e3:90:62:f5:3e:5d:92:39:e8:70:9f:
         b3:3e:30:4d:02:0f:bf:d9:65:8d:d5:1a:59:65:3c:00:d1:8f:
         d6:0b:98:22:cd:56:90:34:c2:bc:f4:b4:c8:6c:3e:18:69:46:
         3b:c6:b1:eb:5d:46:31:f9:20:15:6b:73:b9:b7:6a:ca:61:44:
         3a:46:42:79:61:cc:c7:bb:af:09:4b:02:e8:f3:dd:51:d2:49:
         a9:ec:50:3c:a2:be:7f:3e:b3:61:05:b7:31:89:cd:e0:e0:2f:
         fb:cb:30:19:ee:f8:8b:31:d3:0c:98:3a:36:c5:71:c8:21:78:
         3a:e7:ef:4a:8f:18:1e:65:23:ae:91:84:b2:7b:61:09:96:66:
         d8:6e:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----