Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft
File:                     6rZxTXGRgev8zV3N5s1ildd43tk.mft (raw, json)
Hash identifier:          PbWFQEi20Uh7ijTYsimp1aAMOfsroeOLMy2FhpEgPTQ=
Subject key identifier:   BA:DB:A5:C2:72:20:14:E7:FD:F8:76:FA:04:3D:F6:C1:D2:B8:AF:F6
Authority key identifier: EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
Certificate issuer:       /CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
Certificate serial:       018B93C4BD75FD470F436CC21E8DEDDA5A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft
Manifest number:          08AD
Signing time:             Fri 03 Nov 2023 06:00:26 +0000
Manifest this update:     Fri 03 Nov 2023 06:00:26 +0000
Manifest next update:     Sat 04 Nov 2023 06:00:26 +0000
Files and hashes:         1: 6rZxTXGRgev8zV3N5s1ildd43tk.crl (hash: cvmHs8ZES7ugYuuyCX5jrq86P36mJ2woYkrM9U9qUpA=)
                          2: wW-a4Qu1Bls0dZXepdOmqI_DNuY.roa (hash: Ly/KMDsp9SaoF0Y+QGax4fk42oQJT9i82OLkt2ULMKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:c4:bd:75:fd:47:0f:43:6c:c2:1e:8d:ed:da:5a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
        Validity
            Not Before: Nov  3 06:00:26 2023 GMT
            Not After : Nov  4 06:00:26 2023 GMT
        Subject: CN=badba5c2722014e7fdf876fa043df6c1d2b8aff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:2d:56:59:4d:33:ef:78:b2:d0:ca:c0:f7:
                    df:ab:b3:63:a4:3f:6f:a6:d2:22:c5:87:df:cf:80:
                    49:51:03:bb:73:9d:11:a6:87:03:c0:d2:f7:c1:18:
                    08:36:a4:8c:c6:21:e3:fc:8b:77:52:1f:d4:30:41:
                    82:71:63:65:d6:a1:3a:f1:7e:57:dc:7e:18:35:bc:
                    ed:38:a3:c9:63:bc:47:b8:8d:21:34:c9:0e:50:71:
                    f2:d9:80:8f:1d:a3:ed:1a:93:34:07:d7:6e:00:93:
                    6a:2f:3a:e1:8b:2d:82:1b:cf:1b:ca:8a:56:60:8b:
                    82:01:57:5b:2b:a2:72:31:46:6e:75:4d:e7:d0:ee:
                    2f:05:f8:1a:16:1f:cf:03:9e:a0:e2:7d:61:5c:92:
                    0f:bb:60:b5:0d:13:dd:77:3b:65:53:7a:d2:b0:80:
                    7e:00:c9:ed:8c:2c:b2:29:4a:28:ff:06:9e:6a:3f:
                    79:b0:bc:ae:a3:70:92:c9:34:8f:95:e0:f8:d2:36:
                    2b:13:e2:b7:8c:61:73:8d:a4:0c:44:1c:1e:c5:05:
                    53:78:07:b3:0a:9f:46:fc:74:3a:10:3f:66:aa:d3:
                    88:a9:46:1c:ba:1f:e2:ae:7b:f5:f3:49:44:a7:75:
                    26:da:0b:d5:eb:6f:aa:8e:d6:c7:c5:95:9d:2d:c9:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DB:A5:C2:72:20:14:E7:FD:F8:76:FA:04:3D:F6:C1:D2:B8:AF:F6
            X509v3 Authority Key Identifier:
                keyid:EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:55:a4:58:c3:6b:1c:3e:aa:6c:e9:7b:a0:48:50:32:15:c9:
         c3:b7:13:06:07:94:b7:77:5d:ad:3b:c4:8e:24:0b:0c:20:4c:
         47:04:63:49:54:5e:51:cd:ff:fd:39:92:d8:b1:cf:c4:10:09:
         6b:95:5b:03:84:c0:57:95:86:79:44:b8:39:2a:32:2e:b8:e8:
         40:4f:1e:1d:b4:d8:fb:b4:c3:72:64:b7:4e:eb:86:70:1e:11:
         0e:dd:ad:8f:2f:73:0d:aa:57:93:98:47:0d:f3:41:20:6b:3b:
         04:34:cf:17:04:b1:96:4c:73:cb:4e:19:fd:be:b2:6e:52:ad:
         3e:76:0d:9e:50:08:c0:fa:4a:60:cf:4b:7c:94:8d:c3:dd:a8:
         b6:6d:28:d8:9d:33:8f:1e:af:62:f8:64:f1:41:03:ae:a6:30:
         fd:08:96:29:bf:4f:98:3a:37:b8:46:b2:e1:29:bb:88:39:65:
         8e:17:cf:d2:fc:28:13:a2:18:7b:43:c3:6d:36:df:1f:df:d8:
         ec:52:8e:c8:4d:14:f4:24:a6:f0:90:9a:ab:69:fa:27:58:ae:
         21:8f:38:6b:81:5d:68:25:d5:2d:33:76:7f:bd:6a:6a:9b:84:
         2f:ce:a5:49:e2:c4:de:cf:82:73:3e:16:4a:e9:93:03:4d:d9:
         b0:8f:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----