Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.mft
File:                     3JgLt-Bxjjzh8KCuJor-ea93Ty8.mft (raw, json)
Hash identifier:          yBw3p9Oe6uVK07RdBFRwzkzmaZRojxh+1RVLYwD+m8w=
Subject key identifier:   80:2F:85:72:C1:CB:EF:92:AC:20:7A:4C:67:BF:27:D3:42:48:53:A7
Authority key identifier: DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
Certificate issuer:       /CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
Certificate serial:       018B3A81049604F6547A0634CA9B0DB2CC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.mft
Manifest number:          0860
Signing time:             Mon 16 Oct 2023 22:00:15 +0000
Manifest this update:     Mon 16 Oct 2023 22:00:15 +0000
Manifest next update:     Tue 17 Oct 2023 22:00:15 +0000
Files and hashes:         1: 3JgLt-Bxjjzh8KCuJor-ea93Ty8.crl (hash: wM8CddAyDr/HDkDvNr3RbCMEjI2txmQDFUi9SHTye6Q=)
                          2: K0MsSMIr80a8836h61RuGjqH3EE.roa (hash: DpgCgz75X3PD3ULirqE790YUc+CJxRtjNdKAq8UA+Mg=)
                          3: eMt3vODoRsroEeCiSYMD_P2MOhk.roa (hash: zD+gHX/yQdlE7KIrr3ghRucTuWXmPzWAf6Y6NJCyt3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3a:81:04:96:04:f6:54:7a:06:34:ca:9b:0d:b2:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
        Validity
            Not Before: Oct 16 22:00:15 2023 GMT
            Not After : Oct 17 22:00:15 2023 GMT
        Subject: CN=802f8572c1cbef92ac207a4c67bf27d3424853a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:18:93:05:ef:90:25:41:6f:b1:5e:c6:90:
                    6a:e0:06:77:6a:71:d8:3f:48:78:b6:7c:92:57:6d:
                    f8:b6:54:f8:d5:82:06:e3:b4:cf:2d:39:fb:6f:34:
                    d2:a3:09:8a:d2:a7:2d:2c:f9:19:ff:f6:60:7d:eb:
                    ba:ea:f2:98:94:c6:c4:6b:cc:a8:7e:f3:8d:d3:46:
                    5e:cb:f9:52:13:75:32:cc:b1:42:19:86:b8:71:96:
                    97:3c:3c:6a:fd:cd:57:47:82:fb:0b:83:b6:03:a8:
                    b9:30:04:2f:73:15:de:8e:c9:c9:97:78:13:1b:d1:
                    fd:a5:66:27:d0:58:0d:01:75:fb:89:72:77:91:de:
                    ba:d8:39:49:72:09:8f:25:73:c2:8c:c0:ef:91:e5:
                    43:58:21:15:6a:9d:6e:42:e0:dc:1e:34:fb:c3:29:
                    f5:40:ae:18:41:a1:7a:7c:ca:88:dd:f5:51:eb:01:
                    3f:76:85:a2:c3:ff:d4:d3:ab:51:10:3b:9b:e8:bb:
                    fb:e5:8e:e3:97:91:20:06:38:a5:17:df:66:b4:0a:
                    ae:d9:2f:12:49:5a:f9:2d:cf:aa:ed:fd:37:89:a8:
                    03:a5:ed:bc:b3:23:92:e5:75:e1:4d:0e:51:67:53:
                    1c:24:c5:0d:ad:aa:28:78:5b:b1:d2:24:1c:68:32:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:85:72:C1:CB:EF:92:AC:20:7A:4C:67:BF:27:D3:42:48:53:A7
            X509v3 Authority Key Identifier:
                keyid:DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:09:92:3b:ad:c0:ba:8b:e3:dc:ec:11:7a:74:ad:69:a4:18:
         58:86:75:66:f9:7d:22:75:d5:44:5e:7c:7f:44:81:7e:2a:2a:
         9c:49:89:a4:e2:a4:c1:89:b7:b6:71:9c:2f:f1:24:84:61:83:
         ae:c9:24:fc:af:a4:4f:32:77:3f:bd:86:da:62:f4:86:2e:76:
         ba:12:95:1b:a3:16:ca:e7:4c:de:5f:e7:45:77:43:45:59:1c:
         b9:2e:88:23:59:0f:eb:09:17:c4:a2:67:f1:3f:fc:d0:ec:72:
         01:27:89:83:59:fb:c1:a9:87:e0:2d:f8:e4:b9:12:c2:9c:ec:
         ba:50:bf:04:40:bb:a0:2e:f9:6d:11:1c:d6:9d:4e:cd:44:60:
         ab:c3:34:24:9e:ac:4e:99:48:38:c2:ce:68:de:7e:71:c4:2b:
         99:04:6a:a3:3b:7a:ca:23:c2:a6:ed:d1:be:ec:4f:22:7a:13:
         9a:12:7d:1d:56:5f:ee:d0:6d:32:39:74:56:71:e7:aa:e7:b2:
         a6:17:d2:16:d9:d4:34:1a:09:f2:df:c6:70:7b:0b:d0:f0:63:
         b0:9d:90:23:ec:46:84:df:3e:86:ec:f6:af:4c:f2:7c:d3:b9:
         5c:84:5e:90:07:37:cb:41:28:7f:7d:2f:e4:1f:22:45:ba:9a:
         f6:2e:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----