Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/GfcmVZrbgRzvFJtyBOIhi6eo1bs.mft
File:                     GfcmVZrbgRzvFJtyBOIhi6eo1bs.mft (raw, json)
Hash identifier:          OJ9BC60TebYs/ITAORZWhgLuiS4iOd1yxfyasXyTum4=
Subject key identifier:   98:DA:C6:0F:A5:43:9D:E1:A8:8C:F4:80:EB:9F:48:8F:2E:FD:3C:EB
Authority key identifier: 19:F7:26:55:9A:DB:81:1C:EF:14:9B:72:04:E2:21:8B:A7:A8:D5:BB
Certificate issuer:       /CN=19f726559adb811cef149b7204e2218ba7a8d5bb
Certificate serial:       018C6267E112E907C4326446234DB551258C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfcmVZrbgRzvFJtyBOIhi6eo1bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/GfcmVZrbgRzvFJtyBOIhi6eo1bs.mft
Manifest number:          090F
Signing time:             Wed 13 Dec 2023 09:00:24 +0000
Manifest this update:     Wed 13 Dec 2023 09:00:24 +0000
Manifest next update:     Thu 14 Dec 2023 09:00:24 +0000
Files and hashes:         1: GfcmVZrbgRzvFJtyBOIhi6eo1bs.crl (hash: 6SQtE62AI7T5ivuYBoOh9FDQXrtZ9OkgJmPg2TFSRpM=)
                          2: uE0mfiS23pS0eTT99JRz50AiFiY.roa (hash: nuHvbg9oVjV/HVDLXCPyzGYbAk+5C0VMgtGy/RocShI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:62:67:e1:12:e9:07:c4:32:64:46:23:4d:b5:51:25:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f726559adb811cef149b7204e2218ba7a8d5bb
        Validity
            Not Before: Dec 13 09:00:24 2023 GMT
            Not After : Dec 14 09:00:24 2023 GMT
        Subject: CN=98dac60fa5439de1a88cf480eb9f488f2efd3ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:2f:3a:56:4c:d5:2f:13:27:74:24:d1:65:
                    e0:85:36:bd:fd:60:a7:37:28:0a:a9:0b:76:8a:bd:
                    16:48:7c:85:32:06:1c:97:19:2a:a1:eb:67:ab:cb:
                    9e:7d:09:a9:1d:d9:e8:c1:41:18:a5:8c:8b:3f:cd:
                    aa:22:11:1c:46:3d:e6:cb:eb:c9:cc:ac:5d:39:c7:
                    3d:c5:2a:76:e2:e4:7a:e5:d1:d4:36:5f:84:b0:f2:
                    df:8b:01:4c:4c:b3:70:22:06:04:77:13:8c:29:91:
                    aa:b9:f9:4f:ee:bf:03:cb:3a:b7:7e:bc:fa:cf:ac:
                    d7:3b:31:7d:8b:81:6b:fe:e4:40:29:fc:bf:99:bf:
                    b6:ba:8a:ed:37:6f:b5:73:26:19:8f:d0:85:b3:d4:
                    da:74:eb:51:a4:a4:dd:86:fa:3b:e5:38:a4:59:58:
                    69:3a:a1:f0:7e:f2:19:de:dc:1a:56:4e:5e:93:7e:
                    58:fe:75:50:14:4c:e1:0a:90:5c:19:a1:4e:5a:eb:
                    9c:f3:94:0a:cc:75:79:b8:aa:b6:5d:73:c4:67:81:
                    60:6d:ab:c5:27:04:5c:a5:e0:ea:d0:8f:47:98:97:
                    83:f5:7f:90:8f:fb:bc:4a:25:2e:93:34:2c:38:4d:
                    af:87:1a:28:15:b8:84:36:a1:5e:77:49:97:ba:7c:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:C6:0F:A5:43:9D:E1:A8:8C:F4:80:EB:9F:48:8F:2E:FD:3C:EB
            X509v3 Authority Key Identifier:
                keyid:19:F7:26:55:9A:DB:81:1C:EF:14:9B:72:04:E2:21:8B:A7:A8:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfcmVZrbgRzvFJtyBOIhi6eo1bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/GfcmVZrbgRzvFJtyBOIhi6eo1bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/GfcmVZrbgRzvFJtyBOIhi6eo1bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:ee:64:d7:ec:ce:17:77:b9:99:38:14:cb:7d:0b:4c:3b:
         5a:da:b8:61:0c:5b:fb:a7:34:08:7c:05:95:b0:08:9c:cb:7e:
         99:40:80:6f:6c:92:84:32:4c:51:c3:09:aa:e2:94:d7:64:08:
         11:ea:8a:91:38:89:59:ee:be:65:30:c6:4a:ec:08:84:bd:1d:
         f9:2f:cd:74:80:33:2e:bd:17:46:bf:4f:0d:29:29:48:91:ed:
         51:f8:d4:11:66:0c:55:2a:36:73:9b:12:e6:93:07:86:cb:22:
         19:1d:ca:bb:80:5f:ce:02:70:3c:97:99:fb:5b:b0:18:b5:63:
         84:69:a5:c3:d6:80:ed:97:fb:b1:16:bb:cf:05:6d:be:33:dc:
         45:7f:15:c2:73:28:95:7b:4c:4c:d8:c6:bb:c0:10:9f:24:c6:
         7b:ae:36:d3:7c:c0:47:a9:66:7f:6b:b7:4d:7b:5b:0f:64:f8:
         5d:f7:6f:1c:dd:5e:15:7d:ea:5a:74:f7:2b:57:3d:3b:30:df:
         a2:b6:44:fe:ac:b1:b9:fd:6a:e3:dd:ca:23:93:15:fd:a8:d0:
         da:fe:16:80:7b:57:fe:f8:14:8e:08:01:ea:89:bd:f2:a0:1d:
         d7:fa:5e:dc:2a:7e:8c:f2:16:ed:0a:ac:97:37:52:5e:59:1f:
         c6:5c:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----