Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.mft
File:                     0XOyhXljTdkIxO8hbgXOtr35n3c.mft (raw, json)
Hash identifier:          fIdZGEPY80vDj7Vdrh8w5r6NyIohlhZBQC+2xc/aDVU=
Subject key identifier:   83:E6:70:D3:49:5B:F7:A6:6F:C4:A4:1D:2D:09:16:15:DB:CB:57:55
Authority key identifier: D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
Certificate issuer:       /CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Certificate serial:       018BB8091C1839BAA141109CD0D1AA287370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.mft
Manifest number:          087F
Signing time:             Fri 10 Nov 2023 07:01:26 +0000
Manifest this update:     Fri 10 Nov 2023 07:01:26 +0000
Manifest next update:     Sat 11 Nov 2023 07:01:26 +0000
Files and hashes:         1: 0XOyhXljTdkIxO8hbgXOtr35n3c.crl (hash: ouosVqjKefJ2hAfFwUeI0gbQPjMlhyDDs8E2DvpevSQ=)
                          2: R0iof4oezORHTw6RxTFUlpJyoNE.roa (hash: 3hXbmMJR+HPQYnlYgeN89lAobGThhxI1CxixxdbUvQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:09:1c:18:39:ba:a1:41:10:9c:d0:d1:aa:28:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
        Validity
            Not Before: Nov 10 07:01:26 2023 GMT
            Not After : Nov 11 07:01:26 2023 GMT
        Subject: CN=83e670d3495bf7a66fc4a41d2d091615dbcb5755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:f8:ee:d3:6f:a2:ef:76:a1:4e:f6:f1:f4:
                    5a:b9:80:a4:64:9e:9e:d7:69:96:22:20:0d:b2:6e:
                    ec:f1:67:60:f7:32:ad:8a:a0:12:79:ad:38:4e:89:
                    cf:37:c2:79:2e:1a:83:ec:a3:8e:b7:35:a7:2d:14:
                    34:ae:96:b9:3f:54:7a:65:d7:b1:cd:02:7b:91:5b:
                    22:d9:f0:64:6f:8f:f7:9b:62:9e:03:53:23:64:48:
                    9c:58:5d:d3:5c:c3:0b:07:ad:4a:d6:e1:46:12:00:
                    b3:95:c6:84:74:26:1e:55:a5:c4:3f:52:5d:95:41:
                    66:ed:13:26:2b:8c:c9:fb:31:d0:09:2f:c3:dc:58:
                    5c:c5:d0:68:cf:22:5a:fa:02:57:e3:9a:79:62:e4:
                    18:90:c9:8b:26:43:bd:f4:96:95:5a:ce:82:eb:9e:
                    53:80:20:fb:8f:e3:79:05:73:dc:f0:0f:ea:00:67:
                    cc:7f:2f:57:54:68:c8:f0:93:78:8b:c6:39:ef:8c:
                    dd:e8:84:0e:29:b4:0d:e4:13:c3:5b:93:da:57:b4:
                    95:ab:b5:de:79:dc:77:d9:43:7e:0b:15:25:d7:34:
                    a1:09:8d:82:20:b7:4e:f4:b9:5b:41:1e:ae:c1:e7:
                    95:a0:de:f2:42:85:9d:12:93:9a:be:07:e3:35:99:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E6:70:D3:49:5B:F7:A6:6F:C4:A4:1D:2D:09:16:15:DB:CB:57:55
            X509v3 Authority Key Identifier:
                keyid:D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:95:df:1c:c2:82:c6:eb:70:b0:e0:8c:e5:0c:ab:36:32:dc:
         56:02:60:9d:74:ec:c3:3d:05:0e:08:1d:f9:63:46:de:3e:c2:
         81:e7:03:0d:f8:ef:34:86:14:a8:80:3b:a3:31:10:72:87:52:
         7e:d7:25:d9:d3:c4:51:5d:f8:c5:d8:13:05:c1:e0:82:39:7d:
         14:ca:49:61:2d:26:d3:0c:6d:9b:c6:26:fd:80:ae:d8:3e:10:
         f7:2b:a9:e0:ec:41:09:de:40:e8:0e:8d:b9:0e:3f:f9:27:57:
         40:0f:43:a2:fe:2d:8e:97:f0:74:e1:0f:78:84:80:66:8c:32:
         1d:13:ef:dc:8a:b1:0a:fb:40:7a:4c:e6:ca:77:be:df:ef:4d:
         ed:39:cf:71:53:eb:12:bf:86:7d:e5:43:d4:d9:9c:45:ec:12:
         19:e9:b3:54:b6:52:18:b1:0f:15:d8:f0:52:44:2f:72:f6:e0:
         b7:68:97:dc:ed:ae:78:4b:13:bd:bb:cd:f6:00:d8:6d:f9:c3:
         af:c0:6e:c2:95:16:1b:c2:bb:d0:ff:0f:2b:23:04:09:d8:ae:
         c6:c9:88:ec:19:79:98:24:b3:c7:4c:8e:e0:94:02:6f:86:6a:
         fa:e3:d1:fe:08:ef:b4:de:23:82:0d:1c:05:8b:59:9e:95:20:
         b0:42:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----