Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.mft
File:                     ROKbxnH5ndWb2pRVdxORUGMbHXE.mft (raw, json)
Hash identifier:          Hr9o3pkrT5vkWZkCf5eJ1eYa1RX/d2UAnY80o6GRl6Y=
Subject key identifier:   CE:CC:69:68:84:FA:A0:F4:EF:67:E8:2F:42:6A:2A:C9:12:9C:CA:05
Authority key identifier: 44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71
Certificate issuer:       /CN=44e29bc671f99dd59bda945577139150631b1d71
Certificate serial:       018B6B37620C74AE45153C9C76B2D7748D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.mft
Manifest number:          0899
Signing time:             Thu 26 Oct 2023 09:01:13 +0000
Manifest this update:     Thu 26 Oct 2023 09:01:13 +0000
Manifest next update:     Fri 27 Oct 2023 09:01:13 +0000
Files and hashes:         1: 1-RaJfIyPa4i2KChD2H3MUvkeM00.roa (hash: +YNj+E8p5EPi1dAGJkOhXTt1QIj5aTxycNQWk4zSWH8=)
                          2: 8S80SKy50E0o4qLnM_kDRiwsX3I.roa (hash: MX2uiucyTpgNB3SkfqfAweTFgeyCOqErwX9lmVd0RLc=)
                          3: ROKbxnH5ndWb2pRVdxORUGMbHXE.crl (hash: x+eKz1K4Gkq8IRpCDDAmdgYlj0ngmVxdPIRJdhIoy4A=)
                          4: s894IBvXTLHBhTOJRr3klX5t1AY.roa (hash: ZgHbxYChYD+NjPZOS8OE1XsvR1HaYc3IpqHh4zvIe7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6b:37:62:0c:74:ae:45:15:3c:9c:76:b2:d7:74:8d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e29bc671f99dd59bda945577139150631b1d71
        Validity
            Not Before: Oct 26 09:01:13 2023 GMT
            Not After : Oct 27 09:01:13 2023 GMT
        Subject: CN=cecc696884faa0f4ef67e82f426a2ac9129cca05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:56:af:17:8e:f1:cd:89:ff:56:16:72:90:
                    28:63:19:ce:93:df:19:12:e4:a2:38:c3:24:40:de:
                    9e:71:7f:8c:57:e0:30:6e:c5:39:4c:ea:17:1e:a0:
                    80:ee:d5:49:68:0c:64:55:aa:a8:db:6c:0c:e7:79:
                    39:c9:3e:c7:06:e3:53:84:c1:d8:5a:b5:43:33:c6:
                    d7:d5:fc:ee:1c:0a:62:2b:99:9f:63:8f:9e:2d:40:
                    80:ae:e8:2a:21:ae:64:35:39:f6:6e:91:ad:b8:4c:
                    7b:7d:28:b4:97:08:ef:76:10:96:b4:0e:43:0b:b7:
                    d0:19:92:75:a2:fb:1e:2b:01:0f:60:e7:50:5f:c9:
                    6f:ab:60:f0:52:30:d2:15:21:2a:ed:05:d1:ae:77:
                    1d:87:d4:5e:71:2b:2f:3d:ce:09:13:10:b1:77:09:
                    13:f1:42:80:f2:72:48:ff:15:57:6c:53:da:ff:42:
                    bb:d6:b2:1e:ba:23:10:0e:1d:ee:6b:46:35:c7:38:
                    5f:1d:69:03:3c:e5:f7:d3:71:98:9b:b7:55:f3:f2:
                    e1:1d:ca:a6:ed:e6:e0:04:7c:ae:45:e5:55:52:20:
                    9d:8e:ec:fc:56:0a:35:72:6b:24:cb:8d:86:50:ef:
                    ac:70:e4:69:f2:14:da:4f:bf:e8:55:b4:fa:29:b4:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CC:69:68:84:FA:A0:F4:EF:67:E8:2F:42:6A:2A:C9:12:9C:CA:05
            X509v3 Authority Key Identifier:
                keyid:44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:41:de:ed:2d:c1:f2:f4:2a:99:9e:32:a6:8c:92:2b:f5:01:
         fa:1b:4d:30:fa:a9:16:9a:4c:89:7a:0f:44:b0:0a:b6:e8:8a:
         d3:88:5d:8e:b8:b3:50:fb:7b:e9:d7:85:a0:53:1d:68:e4:25:
         07:e6:6f:63:b8:4e:bc:c5:11:95:61:07:55:fa:fa:f7:d7:18:
         5d:76:ff:b6:0f:0f:1b:42:6d:ef:c2:fe:2e:13:12:78:97:e0:
         e3:87:15:24:d8:8f:44:b2:ba:70:7f:0a:d6:a4:e8:05:03:ba:
         9e:dd:d7:50:be:95:6e:a6:c2:f0:a9:a1:e9:66:dd:97:b6:ca:
         fa:bd:52:1e:84:29:45:7d:c9:0c:3a:f3:de:63:fe:cf:fb:df:
         b1:e9:ef:65:42:4e:59:96:34:33:56:a8:0d:f5:74:d0:5f:58:
         b0:39:26:f2:0c:f2:32:3b:d5:c9:3a:a2:7a:6c:07:27:ba:6e:
         17:ae:9e:a3:86:e7:b5:af:8c:ac:21:26:48:58:e3:7e:14:b9:
         d6:40:16:59:fd:4a:58:27:ac:0d:fd:b7:0e:2e:c0:6e:7e:ad:
         99:0b:da:4d:58:46:fe:21:08:a5:77:41:be:34:45:73:20:84:
         0a:49:46:e8:15:ff:23:9c:ca:66:f8:9d:b6:9d:11:05:8e:d8:
         79:6c:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----