Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.mft
File:                     Gf7GYmONvpLlgBNRQKay8Ok2d84.mft (raw, json)
Hash identifier:          t/edBTKDuIpQ5+pA7rwQOZw677VeX2UYNwZuCFI9nsE=
Subject key identifier:   85:59:8C:81:83:71:6A:DF:36:FF:84:B9:A4:E8:17:64:73:F9:18:2F
Authority key identifier: 19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE
Certificate issuer:       /CN=19fec662638dbe92e580135140a6b2f0e93677ce
Certificate serial:       018C91D44CAB7F4BD78EA9F819C0A2602B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.mft
Manifest number:          090C
Signing time:             Fri 22 Dec 2023 14:00:58 +0000
Manifest this update:     Fri 22 Dec 2023 14:00:58 +0000
Manifest next update:     Sat 23 Dec 2023 14:00:58 +0000
Files and hashes:         1: Gf7GYmONvpLlgBNRQKay8Ok2d84.crl (hash: 8jZZODiCrOOv9xiXLwsiXNRW53ugQSvjzYFCviQ51Rw=)
                          2: S0tX1ML0Ez6Pd24HJTvxihV92fk.roa (hash: FKNW8e3bHAz9iZgj62xFs1VWeLRNRj3j/3n3MRxCvBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:91:d4:4c:ab:7f:4b:d7:8e:a9:f8:19:c0:a2:60:2b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fec662638dbe92e580135140a6b2f0e93677ce
        Validity
            Not Before: Dec 22 14:00:58 2023 GMT
            Not After : Dec 23 14:00:58 2023 GMT
        Subject: CN=85598c8183716adf36ff84b9a4e8176473f9182f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:c2:f1:4f:6b:df:e0:68:02:48:2a:06:78:
                    85:f2:14:47:09:e2:43:79:5e:7e:82:f2:f5:ef:80:
                    72:ed:04:a4:5b:f4:c7:2f:f0:0e:f5:d3:6c:79:ea:
                    d9:4d:82:22:70:cc:bc:9d:18:06:72:2d:2d:12:8a:
                    e8:88:9a:87:c7:28:b4:2d:56:30:ed:39:d5:ec:1f:
                    b8:72:74:45:93:ae:6c:14:59:07:69:be:7c:d6:2a:
                    44:d3:70:ed:fc:a8:2b:08:be:0b:3b:36:7c:a8:f2:
                    81:c8:4c:90:eb:0e:04:56:8a:a3:91:ed:41:63:dd:
                    0d:a3:8a:18:b0:4c:e0:2a:50:2a:7a:23:6c:34:40:
                    c0:6f:3e:07:17:d0:25:e1:7f:c3:1d:2c:b5:95:8d:
                    78:8f:44:09:8d:33:a6:8d:c7:e2:51:33:f2:10:a9:
                    02:2d:14:de:34:4c:08:48:a8:67:3f:c5:53:a6:29:
                    bc:a4:6c:24:3e:63:e3:7b:c8:28:e4:70:49:a4:0a:
                    b4:6c:21:78:f5:91:25:21:df:9d:35:c5:f8:65:38:
                    fb:5c:2f:05:af:ad:a2:e7:28:f9:f8:13:e5:65:59:
                    62:5c:19:9f:7f:fa:5f:70:74:e8:9c:c9:c5:ed:7f:
                    23:bb:ad:92:46:ce:28:da:30:c4:20:31:6e:0f:23:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:59:8C:81:83:71:6A:DF:36:FF:84:B9:A4:E8:17:64:73:F9:18:2F
            X509v3 Authority Key Identifier:
                keyid:19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:21:cf:73:86:9c:4e:f4:cc:34:c7:e8:9d:26:81:d9:5c:8d:
         3f:73:03:84:87:d4:a6:28:29:4b:54:02:80:1d:4f:f6:b7:8b:
         5c:77:6e:13:e4:49:db:66:c6:cd:64:ed:e7:f2:87:da:64:4a:
         4e:17:d4:87:57:84:37:45:3e:12:bd:94:a1:7d:37:f1:74:f7:
         2b:ea:a7:cb:4a:b0:bb:cd:16:f9:c0:23:75:7b:7b:aa:af:fd:
         26:50:20:9d:b8:2f:e9:cc:ae:ac:0b:6d:55:44:f9:a4:47:d7:
         94:fc:7a:8d:77:58:3a:56:0b:75:78:24:2f:de:42:2f:f3:97:
         6b:76:0b:a6:17:16:84:b2:8e:35:45:f3:94:bf:ba:e4:ca:07:
         c5:69:ee:5e:82:9c:0f:33:d8:11:c1:a3:b9:ca:1c:a6:ab:6d:
         2f:19:09:da:55:dd:ff:f0:68:14:23:6e:18:b0:98:71:68:8d:
         8b:79:ba:c5:68:3a:c1:12:dc:33:10:43:31:a5:ed:40:cf:9c:
         dd:a1:21:de:f7:92:50:b4:23:79:14:a0:51:a3:c0:e0:34:8d:
         15:dd:8b:2a:2f:19:c8:d9:19:f3:d8:39:83:81:bd:90:88:46:
         f0:88:5e:6f:55:7b:18:e5:d5:db:31:44:56:f8:1c:9f:88:f6:
         31:88:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----