Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/EhLz1gsgjP8J0F5Jxr5LFuis12g.mft
File:                     EhLz1gsgjP8J0F5Jxr5LFuis12g.mft (raw, json)
Hash identifier:          iqs2wti7zNT25Si54X9xIYc1KM68OLjaLoozeHxrXqE=
Subject key identifier:   02:C0:EF:5D:2B:42:CA:49:0C:17:6F:04:D5:A4:4A:35:4B:9D:EE:98
Authority key identifier: 12:12:F3:D6:0B:20:8C:FF:09:D0:5E:49:C6:BE:4B:16:E8:AC:D7:68
Certificate issuer:       /CN=1212f3d60b208cff09d05e49c6be4b16e8acd768
Certificate serial:       018BC5FB397A389F3583143E07F691B9655C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhLz1gsgjP8J0F5Jxr5LFuis12g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/EhLz1gsgjP8J0F5Jxr5LFuis12g.mft
Manifest number:          090B
Signing time:             Mon 13 Nov 2023 00:00:57 +0000
Manifest this update:     Mon 13 Nov 2023 00:00:57 +0000
Manifest next update:     Tue 14 Nov 2023 00:00:57 +0000
Files and hashes:         1: 6Enj3KL88H9Xz1sf_SKEQLNBJZQ.roa (hash: Z6f0uHr8fXdvmBoWYbOgK/6m7Xrx557hOYbpkVJsQfs=)
                          2: EhLz1gsgjP8J0F5Jxr5LFuis12g.crl (hash: TgY0GxFBMRLtshE5aV7HyMZqrcOyPun4/Gz/fbE5ZRg=)
                          3: WhosMnuxXeZqAxEdKVmMJx0-2YU.roa (hash: qxMkcEB/l4tWgjTrQ/eWSWYA95LOhnPVpGVv/RIMa+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c5:fb:39:7a:38:9f:35:83:14:3e:07:f6:91:b9:65:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1212f3d60b208cff09d05e49c6be4b16e8acd768
        Validity
            Not Before: Nov 13 00:00:57 2023 GMT
            Not After : Nov 14 00:00:57 2023 GMT
        Subject: CN=02c0ef5d2b42ca490c176f04d5a44a354b9dee98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a8:33:21:92:ff:b8:97:49:1b:4e:7b:c6:7c:
                    f7:20:be:ba:7d:a1:39:e6:06:82:1f:48:4b:bb:7b:
                    65:4f:50:eb:43:ae:0c:9f:06:bb:39:5e:f6:01:0a:
                    8f:0e:e1:62:8d:72:b8:89:9d:3b:31:80:8e:14:d1:
                    a7:33:dc:86:47:f1:e2:fe:cc:98:30:c5:57:0e:88:
                    38:37:81:b6:73:89:e2:aa:73:dc:c0:a5:54:12:82:
                    41:23:79:72:ee:fd:04:38:0e:b1:63:20:2c:b4:44:
                    4e:3a:b8:16:e3:d1:34:88:04:9c:bb:46:79:cb:76:
                    f1:58:f8:ea:31:29:34:9b:17:83:46:65:63:dc:84:
                    b6:4c:8a:08:a2:f8:1c:31:7b:c6:be:3b:8c:f9:a5:
                    07:9b:5b:a8:b2:37:01:7d:b9:79:25:50:d1:ec:b2:
                    0c:d0:34:49:17:e0:7b:09:ab:b1:c0:ef:45:87:d7:
                    48:be:3c:7b:33:c3:89:48:e7:5a:bf:5a:cb:8a:7e:
                    08:ca:b0:a1:b9:0d:78:34:e9:ec:4d:c2:52:a4:93:
                    28:b0:6b:b3:f2:9e:36:fa:a8:cb:af:56:79:d1:46:
                    04:8c:50:e9:0f:74:75:a0:55:0d:43:18:c8:74:cc:
                    65:21:32:7d:bc:3b:7e:eb:b7:87:a3:2b:22:c2:33:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C0:EF:5D:2B:42:CA:49:0C:17:6F:04:D5:A4:4A:35:4B:9D:EE:98
            X509v3 Authority Key Identifier:
                keyid:12:12:F3:D6:0B:20:8C:FF:09:D0:5E:49:C6:BE:4B:16:E8:AC:D7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhLz1gsgjP8J0F5Jxr5LFuis12g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/EhLz1gsgjP8J0F5Jxr5LFuis12g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/EhLz1gsgjP8J0F5Jxr5LFuis12g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5d:b9:2a:fa:c7:75:c5:e4:2f:d2:98:f3:d2:bd:6e:ea:04:
         e1:4a:66:20:a9:98:ee:0f:b3:5b:93:53:23:ec:92:3d:e0:2a:
         70:32:4a:aa:44:b2:c0:8b:6c:30:4b:0a:b9:b8:71:0f:3d:e9:
         60:6e:44:e6:e0:9b:6a:de:29:37:82:0e:01:41:43:16:c9:e3:
         2e:7a:66:e3:db:21:fc:92:48:61:b0:30:82:32:63:61:8f:a2:
         fc:f8:da:aa:fd:9c:21:64:1d:cf:7f:8e:04:05:88:06:90:89:
         8c:56:c6:3b:87:bc:ed:9f:cb:d6:08:3a:1a:ae:ba:ff:3a:09:
         8d:1c:6c:1d:30:23:b7:8a:f2:e8:35:4e:c0:70:ed:b2:ab:de:
         73:58:76:35:c6:8f:6c:f9:97:7e:17:05:18:45:51:2b:fe:7b:
         93:dc:26:4a:f7:89:79:40:20:09:b6:42:f2:72:32:f2:d3:5b:
         a2:d7:31:4c:ec:b7:3a:00:b2:6c:21:f8:5c:62:bb:c0:cc:a0:
         4f:6f:48:bb:63:db:ec:7e:df:88:3f:15:8f:da:a1:40:14:82:
         00:ed:97:43:74:80:47:a0:76:54:f4:20:e8:4c:9a:a0:1e:a7:
         1b:40:18:f9:64:12:4b:26:35:49:c5:2f:53:76:2e:71:59:93:
         88:80:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----