Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.mft
File:                     TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.mft (raw, json)
Hash identifier:          TrgC+JFVfbTZvdlTpM9KaYWIxEogdRbX7d6nW6VIz9Q=
Subject key identifier:   3B:A7:17:8B:A9:BA:A5:30:2D:43:E9:12:A5:33:C1:BE:7A:00:DC:B3
Authority key identifier: 4C:08:7D:06:5F:2E:46:95:3C:68:32:6D:C6:99:B3:FC:1F:72:27:FC
Certificate issuer:       /CN=4c087d065f2e46953c68326dc699b3fc1f7227fc
Certificate serial:       018BDC4BB450FC9D5209CA51F4E1941062C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.mft
Manifest number:          0875
Signing time:             Fri 17 Nov 2023 08:00:30 +0000
Manifest this update:     Fri 17 Nov 2023 08:00:30 +0000
Manifest next update:     Sat 18 Nov 2023 08:00:30 +0000
Files and hashes:         1: TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.crl (hash: sWWI8kIbBvJkw7aTc+YGdqQOU5WBhzLVXRY3+I2F/n8=)
                          2: mICJhnNj60PldCvZBHzz5GWu4iw.roa (hash: BfTbVqGJXmJP0SdVa9TEhUecsSOTCTnzYiT7uUlXjHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:4b:b4:50:fc:9d:52:09:ca:51:f4:e1:94:10:62:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c087d065f2e46953c68326dc699b3fc1f7227fc
        Validity
            Not Before: Nov 17 08:00:30 2023 GMT
            Not After : Nov 18 08:00:30 2023 GMT
        Subject: CN=3ba7178ba9baa5302d43e912a533c1be7a00dcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:36:76:24:b7:2a:4c:1b:87:00:c6:d2:5f:
                    b1:f6:a4:e7:cd:da:a4:cb:b2:f8:06:f4:7c:3b:68:
                    74:ed:8f:77:f0:cf:3e:c4:9a:1a:e8:01:25:29:9a:
                    df:4f:00:5b:dc:46:da:0a:65:68:4d:04:a7:47:6f:
                    2d:80:d6:e3:fb:09:61:96:ee:22:07:3f:b8:7e:4f:
                    3a:50:43:8c:4f:cc:6f:f6:e3:c6:f3:06:38:4b:53:
                    91:80:09:34:6c:71:b7:69:4a:78:38:69:bd:79:31:
                    25:59:1d:66:54:ff:58:df:42:e8:90:36:73:d5:dc:
                    2a:eb:94:50:cf:0f:c4:98:cc:37:99:1d:9f:87:b0:
                    4f:ca:21:f9:27:c8:64:fb:57:97:f1:b0:9e:7b:91:
                    b2:88:8c:0f:ab:7a:c8:5f:d4:b8:2c:49:6a:ad:c3:
                    89:40:e5:61:19:d4:60:1c:b1:54:65:30:23:17:62:
                    b5:dd:6d:7f:2f:c7:28:39:86:fd:02:30:61:71:7f:
                    41:89:a5:9f:12:cc:74:5e:d1:67:7e:47:63:42:9e:
                    05:e3:2b:ff:ac:39:7e:c2:21:b5:dd:b5:5b:38:65:
                    e5:a1:8e:9c:de:a5:35:aa:47:ac:73:4d:d5:ee:a5:
                    59:9c:f1:65:c4:f8:fe:18:46:1f:94:19:4a:6f:24:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:17:8B:A9:BA:A5:30:2D:43:E9:12:A5:33:C1:BE:7A:00:DC:B3
            X509v3 Authority Key Identifier:
                keyid:4C:08:7D:06:5F:2E:46:95:3C:68:32:6D:C6:99:B3:FC:1F:72:27:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff5e5f-436c-4efc-8df7-9b6d82aced33/1/TAh9Bl8uRpU8aDJtxpmz_B9yJ_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:5e:8b:17:ac:cf:6b:44:55:60:c3:41:86:14:2e:77:3d:
         4f:99:01:00:f0:ab:3c:b8:a6:8c:21:0f:aa:f7:07:05:05:79:
         93:65:dc:5c:79:49:d8:65:e3:fd:50:42:c4:07:6f:b0:91:f9:
         5a:ed:0f:4e:dc:99:ac:e6:6a:6b:5c:a7:b9:3d:08:9f:66:05:
         29:20:71:88:5d:cf:6b:0b:66:8a:71:fb:55:db:88:13:6b:06:
         4a:40:ed:7e:f8:37:3a:d5:e4:df:44:4f:f5:38:10:49:e4:a5:
         1e:29:6f:e3:2a:b4:89:d6:87:2c:53:74:61:43:ae:d7:47:6c:
         7e:51:d1:30:fc:ff:b0:2e:dd:35:10:ba:66:94:34:b1:32:51:
         c8:66:a9:1e:ce:7a:42:4f:7a:b9:94:cf:f1:f3:66:ed:45:87:
         48:ad:04:be:45:35:82:79:86:98:cb:c4:8a:6d:1c:f0:5d:52:
         8b:b9:80:5f:e0:65:a2:1a:e0:37:36:51:51:4c:2e:66:16:55:
         aa:d3:03:8e:77:ea:b1:a8:df:bb:2b:f4:43:9f:2b:20:4b:6b:
         13:a9:01:62:0f:1a:2a:cf:84:4d:4c:2d:fe:f9:5b:55:19:fe:
         12:45:1c:76:ba:1c:2c:7e:b7:a2:9b:6a:df:3d:6b:06:e2:e9:
         5b:86:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----