Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.mft
File:                     1dsJVtJHAKbIwjv0WO2mxhj8-rM.mft (raw, json)
Hash identifier:          RXY3xVmGP3u58ovX/IEi6HPNsYSgWN+imXJGEOQaBio=
Subject key identifier:   20:56:0F:FF:FD:65:55:56:52:E0:5E:EF:CB:7E:F8:52:73:92:34:BC
Authority key identifier: D5:DB:09:56:D2:47:00:A6:C8:C2:3B:F4:58:ED:A6:C6:18:FC:FA:B3
Certificate issuer:       /CN=d5db0956d24700a6c8c23bf458eda6c618fcfab3
Certificate serial:       018BEB1A19EBAD35A76EEE11516684DC4420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dsJVtJHAKbIwjv0WO2mxhj8-rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.mft
Manifest number:          0564
Signing time:             Mon 20 Nov 2023 05:00:38 +0000
Manifest this update:     Mon 20 Nov 2023 05:00:38 +0000
Manifest next update:     Tue 21 Nov 2023 05:00:38 +0000
Files and hashes:         1: 1dsJVtJHAKbIwjv0WO2mxhj8-rM.crl (hash: cS7ydioBGsuxQhIL01yzZIXEmoPL7NCpbDca5lnwUUI=)
                          2: FHY1nhOgwCuY8vyZ_Y4MG0P-dRI.roa (hash: wU7+M310fyjh2CjiqPnfW1SWoy0fybH8Labp85h6W6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:1a:19:eb:ad:35:a7:6e:ee:11:51:66:84:dc:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5db0956d24700a6c8c23bf458eda6c618fcfab3
        Validity
            Not Before: Nov 20 05:00:38 2023 GMT
            Not After : Nov 21 05:00:38 2023 GMT
        Subject: CN=20560ffffd65555652e05eefcb7ef852739234bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:05:e5:92:92:15:f3:07:57:33:f9:a6:f3:
                    9e:8f:6b:06:cd:1c:9f:41:b7:4e:54:15:6a:f9:6c:
                    b7:c9:9c:d4:d5:65:a0:2f:8b:47:6b:35:e8:5f:f8:
                    53:f2:1f:5e:25:9a:d0:c5:e2:71:71:6d:aa:4f:e2:
                    70:5d:30:95:ba:0e:d9:b6:1c:10:f3:2b:5d:98:1f:
                    0d:61:b7:70:93:b9:7f:09:29:2f:ed:23:9c:5b:e0:
                    36:bb:18:a3:ca:7c:26:49:ca:5f:12:11:63:36:73:
                    e7:54:26:56:36:13:9a:a1:dc:3a:4a:49:80:f8:6b:
                    17:6e:6c:3c:7b:fd:c6:c2:2d:59:44:dd:fe:eb:d2:
                    e4:8a:99:f2:47:3a:78:4b:1f:df:3e:8b:9d:94:ea:
                    e3:9c:5a:e3:ab:51:0c:1a:3a:76:79:d2:e0:ac:5b:
                    2c:6a:74:8e:fd:d8:04:fe:00:57:73:60:f2:8b:8a:
                    26:10:3a:03:10:c0:01:6f:34:2c:1c:24:1a:7a:f4:
                    8d:05:38:fa:1d:ab:df:48:54:82:76:e5:2d:fd:dc:
                    d4:cd:19:37:d2:ee:ff:df:2c:2f:c5:3c:0a:dd:55:
                    2f:0e:c5:b7:03:cd:58:20:1e:3e:c2:e3:b5:2e:b5:
                    79:a0:83:1c:73:11:81:3e:b7:67:42:5d:ac:0c:41:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:56:0F:FF:FD:65:55:56:52:E0:5E:EF:CB:7E:F8:52:73:92:34:BC
            X509v3 Authority Key Identifier:
                keyid:D5:DB:09:56:D2:47:00:A6:C8:C2:3B:F4:58:ED:A6:C6:18:FC:FA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dsJVtJHAKbIwjv0WO2mxhj8-rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:f7:1c:77:41:3d:fa:a5:35:0a:c5:b3:9f:16:71:12:ec:
         1c:65:99:c9:0c:d7:2b:32:90:45:79:ac:bf:1b:50:89:97:a9:
         df:3d:22:ef:a5:da:5c:c0:86:cf:18:6d:68:b2:62:d8:34:9a:
         b9:99:bd:4b:53:ee:54:4f:d5:f5:6b:68:20:be:8a:67:1d:5a:
         dd:68:5c:27:4b:5b:c5:da:e1:1b:96:a2:d4:34:ef:76:29:86:
         fd:03:bd:b3:9e:bc:c2:0c:f8:63:b9:44:dc:d7:e7:d3:92:35:
         f9:d3:ae:12:ac:14:54:70:fc:43:33:1c:ab:e6:9c:eb:95:68:
         00:ae:96:86:0c:b4:fd:7a:98:c3:69:2c:3d:7b:0d:2b:de:5c:
         3d:a8:80:a6:c2:8f:80:3e:b5:b7:3a:a4:c6:aa:ba:b3:10:a4:
         56:ed:4c:db:8e:db:72:89:19:f4:d8:45:f2:86:96:28:9b:52:
         52:60:2f:25:c8:79:e9:ec:61:c3:c1:0b:08:6b:61:dd:2a:b4:
         5e:13:d7:e7:6b:e4:32:b2:56:54:b6:db:b2:0b:e6:18:d6:5b:
         b1:dd:ef:2b:e7:b4:a3:71:29:ff:42:97:c4:68:9b:9b:c4:9a:
         11:75:39:8c:9b:ea:2c:1f:aa:d3:48:f8:34:22:f3:09:2f:45:
         4e:4b:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----