Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c676c9-dea9-45fa-9081-697b8b393da5/1/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.mft
File:                     64ZpBJEgg9jQWQ8O0p_HREJ0mbA.mft (raw, json)
Hash identifier:          ZBzQpFSrphWIvVxC2vOjwRxkPeFfaybR7nrdC4/Amcw=
Subject key identifier:   18:78:5E:D5:63:FF:F3:D9:5D:E9:C4:2A:4E:26:DD:CE:C7:77:6B:77
Authority key identifier: EB:86:69:04:91:20:83:D8:D0:59:0F:0E:D2:9F:C7:44:42:74:99:B0
Certificate issuer:       /CN=eb866904912083d8d0590f0ed29fc744427499b0
Certificate serial:       018C5C661C1B7F856ED4F4384357CC0276BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c676c9-dea9-45fa-9081-697b8b393da5/1/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.mft
Manifest number:          0808
Signing time:             Tue 12 Dec 2023 05:00:44 +0000
Manifest this update:     Tue 12 Dec 2023 05:00:44 +0000
Manifest next update:     Wed 13 Dec 2023 05:00:44 +0000
Files and hashes:         1: 64ZpBJEgg9jQWQ8O0p_HREJ0mbA.crl (hash: niebi6495ycX5KT8sizE9nqs/NXOWifj6fwS6w0/wkk=)
                          2: oO9oHcWCOD3aZNVDQRreCVxTkR4.roa (hash: 0jxaEMVakDp6FlOEq399pzh4stWjLiPmcX2xc5UYlDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5c:66:1c:1b:7f:85:6e:d4:f4:38:43:57:cc:02:76:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb866904912083d8d0590f0ed29fc744427499b0
        Validity
            Not Before: Dec 12 05:00:44 2023 GMT
            Not After : Dec 13 05:00:44 2023 GMT
        Subject: CN=18785ed563fff3d95de9c42a4e26ddcec7776b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:72:9e:bc:2e:6e:5a:ab:34:15:8a:bc:25:
                    5a:1e:81:5d:c8:66:3c:c0:cc:02:2a:96:94:6b:eb:
                    ed:85:83:12:69:ca:9c:cc:41:53:db:84:2b:63:17:
                    b9:5d:b3:30:14:ec:98:a5:c8:16:06:f4:65:7a:a0:
                    c1:10:78:ee:6f:39:3d:f8:25:b4:22:2e:19:de:7f:
                    e3:01:8f:57:73:9b:ad:de:54:fd:6b:bd:31:c2:16:
                    79:05:5b:a1:1c:55:74:ea:73:f9:9e:c0:26:84:aa:
                    de:a9:e9:91:54:6c:78:07:eb:bd:dc:d7:85:09:aa:
                    9a:0c:df:a1:fa:94:7e:1d:cc:3e:7b:f5:0c:2e:37:
                    f4:b3:03:cc:a7:a4:86:bc:ca:b3:1f:37:f9:40:9c:
                    c8:ec:a6:1d:ca:50:7b:d8:e7:af:ab:90:7e:d3:7e:
                    bd:a5:20:30:96:f9:21:9c:f0:99:93:5b:bd:ed:13:
                    a5:bf:74:0c:fd:2f:45:8f:cf:bf:5d:cc:d4:e1:ab:
                    dd:b1:a6:6f:f2:6a:fb:93:e5:48:95:0c:b9:ce:26:
                    0b:57:a0:ca:cf:04:b3:23:da:bd:93:9c:d0:e9:e2:
                    8d:d0:16:0d:2c:c2:59:d3:0c:1a:f3:18:76:94:df:
                    f2:76:19:d0:77:4d:d4:19:d4:1d:34:93:ac:ea:8d:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:78:5E:D5:63:FF:F3:D9:5D:E9:C4:2A:4E:26:DD:CE:C7:77:6B:77
            X509v3 Authority Key Identifier:
                keyid:EB:86:69:04:91:20:83:D8:D0:59:0F:0E:D2:9F:C7:44:42:74:99:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c676c9-dea9-45fa-9081-697b8b393da5/1/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c676c9-dea9-45fa-9081-697b8b393da5/1/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:52:8d:5c:4a:47:5a:05:d7:6c:18:d4:df:d8:6a:ed:ad:2e:
         c0:bd:03:8a:2d:ad:56:7c:ab:bd:c7:87:ea:5b:6e:2a:4f:c2:
         ab:c9:e1:2b:c3:9e:a2:02:92:0d:1e:c3:73:84:a2:17:1e:58:
         48:6e:1a:51:69:2e:e6:d8:a6:93:5e:0e:a8:5d:a6:59:f7:4a:
         15:e1:fa:9f:7b:dc:47:86:93:e1:e1:aa:4b:a6:59:4d:da:51:
         b6:ca:54:ee:38:0d:d2:89:df:c7:ec:9e:42:4e:10:b8:74:db:
         39:36:56:85:ec:8b:14:b3:bf:af:45:96:d2:d9:fa:32:9f:ba:
         42:c4:79:74:3b:45:e2:7f:8b:79:dd:b4:ae:f5:52:73:8b:2b:
         c0:ad:51:3a:54:8d:3b:c5:ee:f1:fc:d4:94:ce:2a:97:95:ef:
         39:4a:8e:93:d6:bd:82:2e:16:42:22:88:15:64:d3:e1:a8:e9:
         84:8b:a9:dc:ed:4f:ec:39:90:7c:ee:b1:c5:fd:a9:69:4e:6c:
         8c:ef:12:d3:83:75:a7:fc:6d:d0:1c:d0:0b:bd:9a:a6:56:b0:
         22:21:92:76:f1:3b:b3:4e:0b:b1:c7:e9:4c:b7:a0:52:53:cf:
         25:11:9c:35:27:00:41:0e:68:77:a3:a5:31:e9:62:b3:8c:56:
         32:04:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----