Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/OwnUESYHcnkUPBgLkRU4QXSrpwo.mft
File:                     OwnUESYHcnkUPBgLkRU4QXSrpwo.mft (raw, json)
Hash identifier:          I1fsz5nDcf1slPetn95GMeoqQ5m6w1vNXNmnsO4bKGo=
Subject key identifier:   62:B4:A8:CB:56:60:30:90:87:0B:12:96:81:8E:7F:1A:0A:89:0F:6C
Authority key identifier: 3B:09:D4:11:26:07:72:79:14:3C:18:0B:91:15:38:41:74:AB:A7:0A
Certificate issuer:       /CN=3b09d41126077279143c180b9115384174aba70a
Certificate serial:       018C0F94C433DD0B498F9F5F18C87CF83733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwnUESYHcnkUPBgLkRU4QXSrpwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/OwnUESYHcnkUPBgLkRU4QXSrpwo.mft
Manifest number:          0873
Signing time:             Mon 27 Nov 2023 07:00:56 +0000
Manifest this update:     Mon 27 Nov 2023 07:00:56 +0000
Manifest next update:     Tue 28 Nov 2023 07:00:56 +0000
Files and hashes:         1: 94YKi0io67iZlDnb4CS9I8gX_b8.roa (hash: YRZP82fbEuc/RslS3sO/rUXjmRRTXawprzvMZtSW/dk=)
                          2: OwnUESYHcnkUPBgLkRU4QXSrpwo.crl (hash: b976STD5y5u6rpBtvgQ6sS6Ca4jp/jYTo40cQzT/0uk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:94:c4:33:dd:0b:49:8f:9f:5f:18:c8:7c:f8:37:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b09d41126077279143c180b9115384174aba70a
        Validity
            Not Before: Nov 27 07:00:56 2023 GMT
            Not After : Nov 28 07:00:56 2023 GMT
        Subject: CN=62b4a8cb56603090870b1296818e7f1a0a890f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:aa:b8:a8:1c:c3:e4:33:5a:cd:c5:aa:99:
                    6f:27:fa:60:22:95:32:85:b6:d1:42:05:95:cd:9b:
                    81:1b:9e:1a:ff:be:1f:28:f2:72:2a:dd:0b:a0:83:
                    6a:ab:b7:67:77:a6:7c:3b:50:d8:bb:a9:96:03:29:
                    07:9c:73:88:12:f1:c7:09:3e:c8:7c:6f:b2:08:f2:
                    ca:60:87:46:59:d1:07:3e:61:3a:82:04:95:85:86:
                    ca:5a:ba:ab:fc:b1:05:6e:df:fe:81:81:c6:6d:ad:
                    8d:87:14:f4:ce:a0:b4:ec:b2:7d:37:22:c0:a8:bc:
                    e3:d5:5f:b0:e0:c3:ac:c4:fb:87:dd:25:8a:c7:30:
                    84:41:0c:60:f1:ef:35:96:ad:31:c8:d1:75:af:7f:
                    3d:16:0f:0e:a4:7a:dc:31:80:ef:61:71:39:5c:71:
                    93:29:f5:fa:66:8e:45:5a:24:9c:1a:14:68:cd:be:
                    71:7c:d7:93:da:f5:c5:6d:95:7e:4b:89:e2:7e:a1:
                    fd:71:18:94:ae:b3:d4:4b:91:ef:ee:88:1b:70:27:
                    ce:45:ca:d1:b3:e1:83:ad:70:ac:b7:5f:1b:57:6f:
                    95:94:b7:90:ff:11:f9:a3:75:37:7c:f7:74:c7:34:
                    2c:82:5f:67:85:04:8d:f1:1f:b7:20:26:d9:ed:ae:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B4:A8:CB:56:60:30:90:87:0B:12:96:81:8E:7F:1A:0A:89:0F:6C
            X509v3 Authority Key Identifier:
                keyid:3B:09:D4:11:26:07:72:79:14:3C:18:0B:91:15:38:41:74:AB:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwnUESYHcnkUPBgLkRU4QXSrpwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/OwnUESYHcnkUPBgLkRU4QXSrpwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/OwnUESYHcnkUPBgLkRU4QXSrpwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:10:98:b7:c9:0a:2a:b0:41:6f:6b:5e:bb:1a:f7:28:bc:9d:
         78:7b:06:c2:f1:2e:fc:6a:15:35:3f:98:a4:b4:78:52:de:6e:
         51:02:3a:d4:f3:60:80:40:bb:8a:3f:c4:e5:90:f5:4e:f9:5f:
         2d:fc:ac:63:d2:c2:47:33:42:91:07:92:3f:b7:26:2f:99:82:
         8a:c4:7e:5e:55:04:82:f3:09:51:31:45:0a:ff:35:4b:38:1e:
         af:6c:25:a7:29:70:3c:bb:b1:49:7e:9c:83:f4:d3:2a:45:4f:
         7c:60:61:7d:fa:34:bc:41:cf:e3:77:84:ec:de:be:45:f1:a1:
         c2:5c:70:c4:f1:1f:46:a7:96:5a:03:37:20:65:bc:a4:24:e8:
         75:e0:1a:c3:9d:f2:bf:ad:10:17:9e:2b:6d:e0:70:ff:a5:e6:
         4a:c5:32:52:09:d0:65:3a:6e:08:71:7a:ec:35:8f:25:9f:79:
         34:9b:17:c7:cd:30:0d:80:2f:86:c8:a3:65:13:93:9e:19:31:
         19:61:9f:86:7c:a8:06:47:29:35:44:bb:3f:c6:76:b5:82:ae:
         2b:66:00:d1:b9:c9:5d:fd:32:36:89:83:94:af:70:7e:94:d4:
         71:04:f3:ab:5e:61:c0:21:80:10:f7:ca:45:c8:83:e0:1a:6a:
         b2:33:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----