Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/X9uKF--kZUkjo14GstBfx8INXvI.mft
File:                     X9uKF--kZUkjo14GstBfx8INXvI.mft (raw, json)
Hash identifier:          B3qtLr7kD9dK3gkkuHBgHCedWJMrjgP4TdwE9HT6l5Q=
Subject key identifier:   9A:7A:80:3B:66:7C:6C:B6:7F:7D:45:C0:BB:82:E3:F7:33:EA:8F:1A
Authority key identifier: 5F:DB:8A:17:EF:A4:65:49:23:A3:5E:06:B2:D0:5F:C7:C2:0D:5E:F2
Certificate issuer:       /CN=5fdb8a17efa4654923a35e06b2d05fc7c20d5ef2
Certificate serial:       018BEA3E4B3E6BBAE7A6418B828295ED7815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X9uKF--kZUkjo14GstBfx8INXvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/X9uKF--kZUkjo14GstBfx8INXvI.mft
Manifest number:          086F
Signing time:             Mon 20 Nov 2023 01:00:32 +0000
Manifest this update:     Mon 20 Nov 2023 01:00:32 +0000
Manifest next update:     Tue 21 Nov 2023 01:00:32 +0000
Files and hashes:         1: Ors38Jp_a8DJx8B4cxqLHY4d-9Y.roa (hash: HR9n1lDRLAF8ZoSjTWQ1YCtX9JLd0ctO+2lnC5EsYWg=)
                          2: X9uKF--kZUkjo14GstBfx8INXvI.crl (hash: 34cMF2QkPZN11IJvgyFIcCtRT5PF3M/9RGCTeiIXaIc=)
                          3: Xm_9LuzwQbjAxdKhLdOWdf1O26Q.roa (hash: CreHoJZnjTE5moDl2q0+MHn+sgziUtdJFYtOAj8VnjA=)
                          4: pLXazm9hpz15HpxNbq0Kj-k7hGo.roa (hash: 1lbx4Cs3fTO2mNJ10SglRBT+yKqvVOQRqQLDY7HWqbs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:3e:4b:3e:6b:ba:e7:a6:41:8b:82:82:95:ed:78:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fdb8a17efa4654923a35e06b2d05fc7c20d5ef2
        Validity
            Not Before: Nov 20 01:00:32 2023 GMT
            Not After : Nov 21 01:00:32 2023 GMT
        Subject: CN=9a7a803b667c6cb67f7d45c0bb82e3f733ea8f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:62:ac:35:75:99:f1:e7:0c:91:36:1b:09:
                    14:73:7f:9b:7c:e2:39:75:a4:56:99:01:61:8a:db:
                    20:f2:f1:39:0d:9c:a4:c2:76:d9:3c:50:e5:ee:0b:
                    6d:9e:78:59:22:4e:72:ec:67:79:40:58:9e:e9:09:
                    99:7b:97:23:81:11:a3:9e:85:40:96:36:4b:c2:4a:
                    b0:84:54:76:45:3d:b2:8d:69:40:64:6b:99:0c:56:
                    fd:c4:c4:4a:c8:de:dd:e8:2a:3d:11:20:4d:2a:f7:
                    75:1b:1b:b7:49:ff:ea:68:d8:09:6d:29:30:04:cd:
                    f5:3e:7a:68:0f:93:4b:a2:a9:27:7c:5d:e4:61:cf:
                    d9:a7:15:47:11:8f:49:72:5c:c3:fb:55:f1:96:24:
                    98:12:3f:99:1e:1a:76:08:48:e1:4b:95:74:1b:59:
                    c8:95:53:8a:fb:28:43:76:88:f2:55:b2:5f:43:c4:
                    9f:3b:8b:9c:b4:89:99:0d:04:72:3e:1c:05:48:47:
                    be:2e:07:fe:f1:d0:d8:87:7e:5d:be:cf:f1:be:7e:
                    6d:23:a8:59:30:ba:26:c8:eb:9b:90:d9:73:48:b2:
                    8f:2f:82:50:81:7e:fa:48:d2:c6:53:59:f2:ac:f3:
                    af:d9:18:b6:2d:b6:b6:7c:30:72:9c:e8:99:ad:34:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:80:3B:66:7C:6C:B6:7F:7D:45:C0:BB:82:E3:F7:33:EA:8F:1A
            X509v3 Authority Key Identifier:
                keyid:5F:DB:8A:17:EF:A4:65:49:23:A3:5E:06:B2:D0:5F:C7:C2:0D:5E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9uKF--kZUkjo14GstBfx8INXvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/X9uKF--kZUkjo14GstBfx8INXvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/X9uKF--kZUkjo14GstBfx8INXvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:50:b8:e5:f2:3d:8f:e9:fc:8a:74:20:dd:fb:bb:9e:f4:
         37:d3:1c:be:fb:d6:ad:ae:d8:4e:8a:99:ca:a1:8c:d4:7b:bb:
         30:15:cb:1f:63:07:fc:ac:31:6e:70:11:4e:2d:23:75:a5:96:
         c3:b1:b4:fe:fa:70:e6:ba:ce:eb:70:27:c3:4e:21:c8:f3:49:
         be:d7:79:18:97:73:cf:c4:95:5b:e7:97:fa:3d:b3:35:c9:d1:
         e8:a5:9f:2f:ca:70:19:d8:9e:ef:31:85:05:7b:2a:6d:95:30:
         7f:e3:33:7d:53:32:b8:c4:d8:10:47:f5:42:97:b0:9d:21:44:
         54:87:79:50:f4:c0:34:b9:e9:c2:30:59:9e:9c:a5:36:ae:b0:
         be:ed:1d:0f:74:fa:c1:fe:70:aa:28:5b:8f:39:c9:d1:e5:36:
         a8:e1:e7:69:cb:5b:47:95:4b:0e:2b:c9:25:03:66:33:fe:9f:
         43:60:45:6a:43:cf:89:8f:a8:05:17:85:a6:60:da:4d:3b:f9:
         e1:be:2e:68:3b:5e:bd:6f:f5:53:5f:a8:28:7d:ac:80:25:77:
         91:2e:c9:c5:0c:14:2b:2d:ce:14:da:6d:3d:3b:6c:50:7f:e7:
         00:8c:fc:b0:3a:d9:2a:a0:b1:9e:a0:0b:e4:5e:d7:50:e7:ee:
         18:4f:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----