Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c05b70-d65a-46ed-a8ee-e2173ee37f91/1/9p_xxisa_PUv_b1QDdR-GmjxP8c.mft
File:                     9p_xxisa_PUv_b1QDdR-GmjxP8c.mft (raw, json)
Hash identifier:          HYdfVxOxO51qjwOErLVb0w1ykpj/thy8wGXL62uImJc=
Subject key identifier:   9A:85:62:0F:1E:9A:11:6C:24:4E:61:4E:19:D2:8A:1D:E5:84:F7:FC
Authority key identifier: F6:9F:F1:C6:2B:1A:FC:F5:2F:FD:BD:50:0D:D4:7E:1A:68:F1:3F:C7
Certificate issuer:       /CN=f69ff1c62b1afcf52ffdbd500dd47e1a68f13fc7
Certificate serial:       018AEEC3005A67834AB0B49FA3652CA9506D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p_xxisa_PUv_b1QDdR-GmjxP8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c05b70-d65a-46ed-a8ee-e2173ee37f91/1/9p_xxisa_PUv_b1QDdR-GmjxP8c.mft
Manifest number:          0B49
Signing time:             Mon 02 Oct 2023 05:01:11 +0000
Manifest this update:     Mon 02 Oct 2023 05:01:11 +0000
Manifest next update:     Tue 03 Oct 2023 05:01:11 +0000
Files and hashes:         1: 9p_xxisa_PUv_b1QDdR-GmjxP8c.crl (hash: Z33rrq116bN0U5zWOk2OMpD+lEhUEROcBGZw3cs337g=)
                          2: myV8iPLgyb47B0A3k_F9wxvn37o.roa (hash: RleXcQiNnLXAYMT4X5kJ6JOXDdy35sCcPgnN/7SMNUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ee:c3:00:5a:67:83:4a:b0:b4:9f:a3:65:2c:a9:50:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69ff1c62b1afcf52ffdbd500dd47e1a68f13fc7
        Validity
            Not Before: Oct  2 05:01:11 2023 GMT
            Not After : Oct  3 05:01:11 2023 GMT
        Subject: CN=9a85620f1e9a116c244e614e19d28a1de584f7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:26:19:bf:2c:d0:de:41:eb:83:e4:40:f2:ff:
                    3e:49:af:17:06:39:ee:3d:ea:e5:c0:36:fb:ad:c6:
                    1a:22:b2:e9:90:c6:e8:8a:c1:a0:81:4f:7a:f8:1c:
                    25:36:18:3b:00:f0:8f:3f:2a:b1:87:4d:f0:14:b6:
                    87:8d:a4:c3:b1:32:7e:0b:ea:d4:4f:58:50:fb:d0:
                    7d:a6:bd:c7:91:44:10:df:50:b5:c6:4f:44:48:b4:
                    e7:dc:cd:0f:5c:c3:12:cb:27:fa:db:16:96:ef:f8:
                    33:1d:39:a6:15:79:99:76:3e:20:a4:19:de:c5:3a:
                    24:f3:48:6b:69:34:18:33:d0:76:97:d5:35:8c:80:
                    15:b2:85:8f:d4:f5:7f:1d:25:bd:11:ec:f4:9e:40:
                    97:35:7a:04:eb:51:2e:60:ef:ff:6b:d3:07:ab:42:
                    92:d4:88:43:e1:04:83:9c:3a:67:21:3f:bc:5a:b5:
                    84:85:a3:50:e9:cf:ea:ab:4e:00:52:02:6a:49:04:
                    9b:02:07:0d:6d:51:d9:0f:9e:c3:fe:6f:2c:7d:67:
                    41:c6:de:63:3d:b6:9b:fd:b6:a6:e1:76:71:99:11:
                    57:14:9d:ba:65:d8:a6:e8:a3:b1:b0:06:ff:51:c1:
                    6d:0d:2b:31:d3:a1:e3:20:f0:d8:a4:67:5e:b2:ec:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:85:62:0F:1E:9A:11:6C:24:4E:61:4E:19:D2:8A:1D:E5:84:F7:FC
            X509v3 Authority Key Identifier:
                keyid:F6:9F:F1:C6:2B:1A:FC:F5:2F:FD:BD:50:0D:D4:7E:1A:68:F1:3F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p_xxisa_PUv_b1QDdR-GmjxP8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c05b70-d65a-46ed-a8ee-e2173ee37f91/1/9p_xxisa_PUv_b1QDdR-GmjxP8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c05b70-d65a-46ed-a8ee-e2173ee37f91/1/9p_xxisa_PUv_b1QDdR-GmjxP8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:03:8e:f2:2f:6a:e9:2c:31:b8:e6:9e:7c:4c:1f:6b:e7:1e:
         15:f3:25:01:b5:6b:58:fd:07:ca:37:96:33:e6:c4:7c:1a:6c:
         9b:44:76:4c:1f:72:c9:84:6b:1f:46:1a:37:8b:e9:b9:d0:12:
         47:6b:63:f5:64:95:e3:cf:92:f4:66:1b:a1:70:1d:28:8e:67:
         33:82:9f:12:04:37:17:16:74:ff:7e:61:d6:b0:8c:c2:8d:1a:
         c3:08:33:0f:ac:f1:0b:e5:f0:3a:e4:48:90:d9:b9:03:be:90:
         77:ce:19:a2:78:af:46:b9:76:d6:8b:25:26:07:ed:b5:3e:bb:
         ad:e1:b6:2d:eb:a6:44:47:7e:2f:5c:af:16:26:ad:25:84:35:
         53:74:82:68:40:e4:43:6c:e3:90:7d:73:fd:59:8a:32:d3:68:
         37:f5:55:6c:cf:e5:12:ea:09:e3:0e:19:b9:86:a2:e0:c4:b3:
         87:89:85:3b:10:69:2f:5a:4d:c9:0d:db:a9:8b:63:81:c0:03:
         5a:51:6d:e1:8f:2c:87:21:2c:78:3e:53:03:3e:ef:06:6b:7f:
         d6:e2:a6:97:99:1a:2e:a5:df:b0:52:e6:28:91:45:94:4a:56:
         e8:05:a5:19:2b:55:0d:26:5c:cc:cb:ed:f7:5b:50:69:09:98:
         c7:b3:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----