Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.mft
File:                     HVrzriH5fsTsddUahaPhYu16ntc.mft (raw, json)
Hash identifier:          vjuYPzlf9NVF7wgIYUINpyYaTPUDXq9SOoVJa9M9+O8=
Subject key identifier:   A0:25:F5:C9:F6:90:B7:3B:29:EA:BC:CA:00:B2:E3:21:E4:35:7D:EE
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Certificate issuer:       /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial:       018AE0FEF60F18816016F5F2CDE2FB94B986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.mft
Manifest number:          0EB5
Signing time:             Fri 29 Sep 2023 12:52:00 +0000
Manifest this update:     Fri 29 Sep 2023 12:52:00 +0000
Manifest next update:     Sat 30 Sep 2023 12:52:00 +0000
Files and hashes:         1: 8NsP2gO8Hl1EoKmxYjmKM9w1YWA.roa (hash: E5J5PRo9Bg0VVT3Jq8gEkpaKOpJt3auxg8A0AlY5CIk=)
                          2: HVrzriH5fsTsddUahaPhYu16ntc.crl (hash: 1QmU/sHzpJhX7klxKKmHTOUEBZPNV1ghRcFRhQSbbgI=)
                          3: Yb8DgygRgPubpjPY2bjGLV0cu18.roa (hash: dyDbmQQs4maar1G4WeIhJvZDKK43v38H7TkJDm4ooHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:e0:fe:f6:0f:18:81:60:16:f5:f2:cd:e2:fb:94:b9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
        Validity
            Not Before: Sep 29 12:52:00 2023 GMT
            Not After : Sep 30 12:52:00 2023 GMT
        Subject: CN=a025f5c9f690b73b29eabcca00b2e321e4357dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:83:b5:b8:68:63:86:48:0d:33:39:d3:6c:
                    8a:5d:69:37:06:c1:11:af:55:27:d9:8c:aa:49:80:
                    62:80:9b:c5:91:06:10:ea:d4:a3:8c:6d:61:a2:53:
                    25:ae:8e:ba:6d:6c:45:03:64:37:45:20:a2:2a:75:
                    54:2c:2c:d7:90:b9:d1:d6:ba:aa:00:b4:58:9e:14:
                    7f:82:0d:6f:7e:c2:f2:a2:c2:17:79:f5:9a:9e:fb:
                    09:7d:ec:8d:3a:b7:7e:b0:a5:2d:3a:c3:59:54:61:
                    9f:91:2c:60:51:b7:f9:ce:7b:62:c6:bf:02:12:28:
                    ce:ce:80:db:77:f9:53:bb:9c:25:0c:c9:71:4a:8b:
                    8c:07:50:72:b8:67:fc:39:28:05:96:c5:19:24:b7:
                    d2:97:88:18:c0:70:e6:3b:2f:bb:25:73:94:0c:aa:
                    79:02:b7:a4:4d:7d:95:a0:b7:e5:8a:84:e8:17:ab:
                    3f:77:10:d7:ae:f6:c1:9a:20:e6:e3:c3:6a:7f:73:
                    e6:66:a9:00:f0:13:5b:7d:ce:20:39:bd:5e:ab:d3:
                    08:eb:c7:d2:89:a7:ba:35:4c:cc:e7:42:b0:f5:5e:
                    3f:46:98:7a:3f:b2:f9:b0:4f:eb:9b:6a:dd:16:17:
                    2d:10:64:25:c3:7f:a8:e4:46:9d:09:7d:1a:1a:e0:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:25:F5:C9:F6:90:B7:3B:29:EA:BC:CA:00:B2:E3:21:E4:35:7D:EE
            X509v3 Authority Key Identifier:
                keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a8:cb:84:f8:64:e4:d2:71:11:15:8d:a3:20:ff:15:6a:08:
         f6:38:45:23:5b:90:7c:90:2b:f3:72:93:6b:b8:d5:f2:44:ed:
         d3:19:72:28:9e:36:4e:22:3a:b8:85:40:6e:b1:0c:95:06:56:
         ec:b8:9b:b0:0c:44:93:dc:8c:9b:aa:d8:20:86:cd:03:c4:2b:
         2b:a5:e4:0b:b5:12:e7:c7:f2:5f:20:db:2d:ea:ae:b9:8a:53:
         53:35:9c:55:8f:05:f0:f7:aa:c4:b4:96:41:67:0a:06:a8:2e:
         6d:46:78:ca:5b:08:0f:49:65:3c:0b:0c:7b:46:de:7d:79:44:
         42:2c:72:29:cb:23:dc:a3:bf:1c:66:9d:23:58:9e:d3:d1:bb:
         d7:38:97:bf:b1:92:83:1f:19:54:15:75:72:54:35:cb:95:49:
         20:64:b9:81:bf:2c:31:0e:17:97:f9:cf:a2:07:f8:aa:9b:60:
         2d:f7:7d:e4:99:cc:b1:c7:95:14:97:d0:71:04:ad:ad:13:28:
         d7:0f:f8:e3:8f:52:7a:ee:4e:95:aa:68:6b:99:43:96:85:40:
         20:32:b2:57:9f:d1:5a:d5:fc:f3:bd:50:49:fc:6e:ff:f7:3b:
         e8:90:dd:e1:59:d0:78:9b:2b:20:3e:23:b3:66:25:98:8a:65:
         d3:bb:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----