Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.mft
File:                     aT37ir0rcFEviOrsWQP_ksrLUTE.mft (raw, json)
Hash identifier:          gX5UbS1ZllMxR4TM13XR0E4xSkHdFgv/NBDA4SpBzkg=
Subject key identifier:   B7:A0:BD:F8:E8:D0:F3:8C:43:34:97:05:53:2A:D4:AB:55:07:5F:C4
Authority key identifier: 69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
Certificate issuer:       /CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Certificate serial:       018A649334BCBA4A21388D9E99843E6406AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.mft
Manifest number:          0863
Signing time:             Tue 05 Sep 2023 09:01:23 +0000
Manifest this update:     Tue 05 Sep 2023 09:01:23 +0000
Manifest next update:     Wed 06 Sep 2023 09:01:23 +0000
Files and hashes:         1: EGBpw5jJlYtBTE95OsWXk9X1irU.roa (hash: 7wDxll6aMs1s/uT7KBk+KIns1i6HU8I5NhCeB51mB0Y=)
                          2: _u3lzm-flkIZyUQsCAtTmEOZhUs.roa (hash: j02X3cteLNVDwfdti+PMJjmeCN1ePWH38VPgqNOmVHw=)
                          3: aT37ir0rcFEviOrsWQP_ksrLUTE.crl (hash: cOkNB5sV/Nfpi4RKsi164a18MXEjSidhpzSvTUNQmu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:64:93:34:bc:ba:4a:21:38:8d:9e:99:84:3e:64:06:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
        Validity
            Not Before: Sep  5 09:01:23 2023 GMT
            Not After : Sep  6 09:01:23 2023 GMT
        Subject: CN=b7a0bdf8e8d0f38c43349705532ad4ab55075fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:c9:a8:77:88:cb:f5:29:ff:e9:9d:e3:45:
                    30:46:62:49:7b:b4:93:14:2f:8e:a6:7e:d4:bd:4c:
                    7c:98:29:17:48:10:1e:f0:83:4f:bc:54:fd:40:16:
                    59:2b:37:61:2a:d1:6e:51:89:ce:5d:7a:47:41:b7:
                    88:7b:be:ce:b0:80:bc:ed:07:18:96:4a:39:d9:92:
                    e9:52:00:04:6d:08:e2:c7:94:fb:2b:7d:75:f0:0e:
                    a1:cd:a1:71:9d:a3:9d:24:22:b8:f0:2f:85:01:85:
                    40:4d:4d:68:d4:54:45:a1:dc:42:0d:bd:82:d4:71:
                    e6:ba:a9:31:89:53:69:41:88:b6:a0:cf:d5:dd:e2:
                    9d:61:2d:58:a8:d9:46:98:59:ff:2e:ed:85:7e:8a:
                    95:ce:3e:3c:7a:03:57:78:24:99:8c:a1:da:c9:7e:
                    21:26:d8:2a:e6:53:41:4d:ad:5e:b4:98:ac:ea:8e:
                    c5:ab:6f:03:a7:4a:da:96:83:6a:da:ee:16:51:5b:
                    31:cb:e1:5f:a6:47:01:55:d4:5a:11:c1:d0:be:bf:
                    94:1f:7f:71:e7:3d:a4:1e:40:a3:c3:05:da:19:f3:
                    e4:e5:93:03:04:b3:fb:36:13:94:63:06:7b:b9:1b:
                    d5:02:c7:2b:a0:8f:c5:18:41:34:6d:b6:38:aa:0b:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A0:BD:F8:E8:D0:F3:8C:43:34:97:05:53:2A:D4:AB:55:07:5F:C4
            X509v3 Authority Key Identifier:
                keyid:69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:74:8a:c8:67:7a:40:13:31:db:6f:1e:14:ef:71:4e:3e:cb:
         d4:2d:a2:d2:e7:83:64:60:48:52:09:a2:29:7b:55:f0:84:cc:
         7c:29:da:88:fa:41:37:0a:6f:b9:f7:46:bc:fb:7a:12:1d:19:
         8e:f3:7e:19:5d:9f:28:41:2d:97:fc:85:c1:77:8b:51:46:bf:
         53:8a:ed:a5:f8:6b:70:8a:bd:3a:fd:e5:ce:b3:b4:96:e0:63:
         70:9a:e3:cf:0e:06:a4:a7:74:70:88:52:f0:7c:76:c7:62:f5:
         06:99:9a:cb:87:59:46:73:c0:31:b5:5e:d5:66:bf:fb:e2:85:
         11:80:81:e6:d6:d5:14:03:c3:0b:40:2e:f3:ed:db:7b:19:8a:
         54:7c:42:a1:cd:79:94:32:2d:15:a2:9a:1b:f1:7e:f0:75:96:
         34:bb:73:35:fe:1b:1e:fa:08:d3:fc:e0:52:91:cd:0b:ed:2e:
         2c:8b:c9:06:57:ed:d7:38:90:c2:74:8a:53:e0:c4:c1:b8:59:
         68:cf:55:78:4a:d0:25:84:9c:b6:c1:ab:73:65:29:4a:41:b6:
         4f:ef:6b:86:37:3d:78:91:ef:85:11:9b:15:23:f6:19:35:de:
         3e:c8:dc:80:a6:5f:08:7e:a9:4b:bf:ce:3e:ea:ed:3c:d1:71:
         02:0a:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----