Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/8628b1-4a97-483e-a420-f8ebc42c6691/1/rCGgGC1mZKjP-engFwtpIWjO-VA.mft
File:                     rCGgGC1mZKjP-engFwtpIWjO-VA.mft (raw, json)
Hash identifier:          eVHkiy7Bw7ZQi6vUBTuVETKxrmglb8r+B2lfNyopbn4=
Subject key identifier:   C0:9F:7F:DE:E5:30:DD:27:0A:66:9E:6D:28:D2:4D:73:93:86:65:9F
Authority key identifier: AC:21:A0:18:2D:66:64:A8:CF:F9:E9:E0:17:0B:69:21:68:CE:F9:50
Certificate issuer:       /CN=ac21a0182d6664a8cff9e9e0170b692168cef950
Certificate serial:       0189D456B7CDF66C4B8960A2C7D5722CEA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCGgGC1mZKjP-engFwtpIWjO-VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/8628b1-4a97-483e-a420-f8ebc42c6691/1/rCGgGC1mZKjP-engFwtpIWjO-VA.mft
Manifest number:          0853
Signing time:             Tue 08 Aug 2023 08:50:00 +0000
Manifest this update:     Tue 08 Aug 2023 08:50:00 +0000
Manifest next update:     Wed 09 Aug 2023 08:50:00 +0000
Files and hashes:         1: 2QlNDNapZPQ8Ei61JoAw3As0VjU.roa (hash: DM9S1zLTHN+Wcn6VFxhKtJKKybULH8MgrBRgmzY/yOg=)
                          2: rCGgGC1mZKjP-engFwtpIWjO-VA.crl (hash: 2PcyPQ9us+vrv2LEb8yTXoL3asQqC1p4RzvFSadeMCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:56:b7:cd:f6:6c:4b:89:60:a2:c7:d5:72:2c:ea:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac21a0182d6664a8cff9e9e0170b692168cef950
        Validity
            Not Before: Aug  8 08:50:00 2023 GMT
            Not After : Aug  9 08:50:00 2023 GMT
        Subject: CN=c09f7fdee530dd270a669e6d28d24d739386659f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f8:32:3c:a0:ab:fe:e8:fa:61:39:57:b3:41:
                    c6:74:e7:b0:e8:83:6b:5d:4f:d5:23:6e:e0:f2:f5:
                    79:ce:a4:92:5e:81:1a:89:8b:5c:95:78:41:a2:12:
                    3e:87:5d:36:da:30:ef:d9:ec:d2:2d:6b:39:96:e3:
                    fc:dc:43:ce:7e:67:d7:bb:99:97:5f:a1:e3:7c:c7:
                    98:d2:9a:97:1a:f2:0d:67:40:16:6b:7d:14:86:39:
                    2b:ce:c4:30:e0:c5:db:b9:00:ed:72:08:cf:af:8f:
                    3a:50:c0:e5:e4:ba:84:47:32:db:99:08:fe:2d:fc:
                    1c:8f:f0:23:0a:12:0b:6d:30:b3:5b:fd:9c:93:c5:
                    34:d5:7f:84:a5:f2:16:31:16:a7:bd:38:67:dc:60:
                    30:6c:b5:bf:77:e0:62:0f:06:0d:c1:76:98:bd:df:
                    11:1f:4d:0f:c1:ee:31:fa:f9:a5:82:cf:da:07:12:
                    54:ee:af:84:61:4c:d3:ad:72:e1:b9:1c:df:a3:6d:
                    2f:e6:e3:49:4b:b6:60:c8:95:bb:99:cb:30:01:89:
                    6f:ea:1c:98:c6:ed:b2:00:98:5a:fd:75:7d:8e:2b:
                    91:fd:d7:7d:38:5d:52:cf:6a:97:25:f1:9b:02:49:
                    25:81:1c:e0:c2:a6:8b:fe:96:d0:4d:25:79:81:67:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9F:7F:DE:E5:30:DD:27:0A:66:9E:6D:28:D2:4D:73:93:86:65:9F
            X509v3 Authority Key Identifier:
                keyid:AC:21:A0:18:2D:66:64:A8:CF:F9:E9:E0:17:0B:69:21:68:CE:F9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGgGC1mZKjP-engFwtpIWjO-VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/8628b1-4a97-483e-a420-f8ebc42c6691/1/rCGgGC1mZKjP-engFwtpIWjO-VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/8628b1-4a97-483e-a420-f8ebc42c6691/1/rCGgGC1mZKjP-engFwtpIWjO-VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8f:46:4b:a7:3a:1f:9f:0a:65:1a:9b:d7:03:b1:84:54:d0:
         60:b3:00:14:6f:9a:4c:14:18:24:0b:a8:fd:a4:22:b9:55:57:
         b1:f8:f0:e3:6f:21:1a:5c:3a:c6:83:86:12:65:3b:85:aa:e4:
         31:e5:16:4d:35:84:22:cd:1d:f1:42:22:0a:e2:e5:32:69:c3:
         8a:ff:08:54:59:2d:35:45:0e:df:ec:a0:f3:19:23:a8:95:cc:
         f8:78:15:d4:a2:63:49:fa:1e:71:17:1c:9b:f1:81:fb:db:20:
         76:f7:d5:09:38:00:8f:01:c5:dc:5a:05:79:3b:ed:6f:07:5f:
         07:37:17:bd:58:fb:23:96:83:b3:ed:30:00:f4:16:14:57:95:
         9b:b2:fa:d2:35:54:83:02:bc:d0:69:2b:e8:73:c1:8d:17:39:
         f2:96:d9:4f:e7:d9:f8:9d:22:3a:1d:3d:b5:1f:2a:e6:8e:31:
         db:a3:ee:ba:30:62:68:d2:4d:f6:60:ab:b6:04:8a:da:e4:97:
         ea:85:b7:04:f6:26:6f:27:ab:31:67:0d:a9:ba:7d:9d:e7:bf:
         15:c2:50:0f:c3:12:be:1d:d1:3f:eb:db:08:7a:18:8c:63:ae:
         a8:a9:5d:81:3e:99:43:15:d2:7f:01:e9:d0:2e:eb:09:33:d0:
         04:52:a8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----