Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.mft
File:                     9bda1WCc7xEleb0Bk4xscyZ__wc.mft (raw, json)
Hash identifier:          Tqbd5ZDcMyea94+5VEOkzAjL4dLB9SLHMSfpeNIxYOU=
Subject key identifier:   0A:97:92:32:D4:7F:2A:B6:52:FF:6D:55:21:60:FB:87:B0:00:B1:B4
Authority key identifier: F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
Certificate issuer:       /CN=f5b75ad5609cef112579bd01938c6c73267fff07
Certificate serial:       018D6341B747F970DCDF790AE4326EFF98D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.mft
Manifest number:          084C
Signing time:             Thu 01 Feb 2024 06:01:07 +0000
Manifest this update:     Thu 01 Feb 2024 06:01:07 +0000
Manifest next update:     Fri 02 Feb 2024 06:01:07 +0000
Files and hashes:         1: 9bda1WCc7xEleb0Bk4xscyZ__wc.crl (hash: g6Zcd/slFQcheg0V4c2Z8N5ePtesp+aQo44CxO7uX/o=)
                          2: BrsakIEiAcwjPTcCLG3zbepg-vM.roa (hash: 5FBRDzckPB45ax3enSwljCfLMbv0Km95YXZs1gmXrpg=)
                          3: b-edB1r0MoFFpTXf85rLqsaOYrg.roa (hash: nCQvxneLjLtyBmnaRTMq2TOI8KJdJUc1f4uNO5R/yMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:63:41:b7:47:f9:70:dc:df:79:0a:e4:32:6e:ff:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b75ad5609cef112579bd01938c6c73267fff07
        Validity
            Not Before: Feb  1 06:01:07 2024 GMT
            Not After : Feb  2 06:01:07 2024 GMT
        Subject: CN=0a979232d47f2ab652ff6d552160fb87b000b1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:da:67:a3:af:10:37:45:db:56:1a:58:65:db:
                    fa:a5:cb:e7:42:ca:35:41:43:e7:db:a1:93:63:2e:
                    9c:ca:ad:8f:3f:9e:a3:5d:29:d3:66:78:52:cb:1e:
                    ed:ad:22:f6:f5:6a:78:04:95:1a:39:3b:59:cf:6d:
                    21:24:52:8c:b2:f8:9f:e5:3e:48:0a:85:a4:f2:13:
                    bf:d0:b1:79:2c:96:e2:11:6a:47:56:ef:1e:50:d0:
                    eb:e7:3e:ec:7a:dd:07:bc:54:32:f7:be:a0:c5:34:
                    c0:cb:94:cb:01:fa:38:62:3b:70:65:6a:03:30:60:
                    69:4a:87:f2:fd:6b:34:67:65:7f:74:ab:ed:4a:b4:
                    d4:4e:08:b2:65:14:66:0a:86:cc:0f:4a:db:c7:89:
                    ca:d1:c7:4a:d7:e1:9f:31:6e:5a:82:ff:62:05:59:
                    9c:3b:0d:f8:5b:b5:c9:78:24:80:1e:f1:4b:22:03:
                    4a:5d:64:3d:8d:f3:f1:60:b3:bf:f0:45:cd:34:d1:
                    f2:32:4b:b0:21:b1:5f:05:12:bf:d6:a8:37:12:ec:
                    bd:ca:86:c0:d7:60:8e:7d:01:23:18:60:33:21:91:
                    be:14:c8:78:fc:bd:7e:33:08:3e:ee:34:f8:b3:e7:
                    9d:d8:47:18:0f:8e:cf:0c:cb:bb:e8:cf:62:7c:d3:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:97:92:32:D4:7F:2A:B6:52:FF:6D:55:21:60:FB:87:B0:00:B1:B4
            X509v3 Authority Key Identifier:
                keyid:F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:13:86:c5:42:96:a9:81:28:46:af:01:a5:83:9c:08:85:e5:
         e0:0c:0c:2e:4c:48:fc:af:33:67:29:47:8e:93:ed:82:82:3e:
         88:a6:55:98:e3:fb:ee:d1:81:7a:90:cf:de:89:23:92:6c:3f:
         b0:62:d4:0c:13:ee:5d:87:07:e6:6c:2f:e2:de:dd:02:e1:c3:
         af:84:b4:e1:4a:22:0d:93:3f:90:0b:64:f1:18:7c:cd:d5:cc:
         ad:f2:79:71:9a:b4:40:b6:f5:37:86:d2:1e:09:ad:32:ac:06:
         4e:09:11:09:76:30:14:0a:a3:1a:0d:19:9f:ab:25:59:9b:b2:
         09:c7:be:c2:e0:4c:94:42:3e:cf:1c:dd:26:5d:f6:25:8e:ba:
         54:32:e0:4b:cd:e4:4b:0e:3f:67:68:ea:55:f9:a3:03:f5:c8:
         fa:0b:aa:99:b1:4d:34:33:e1:67:cc:d3:5f:05:93:dd:ea:2d:
         eb:a5:d9:b0:18:2a:9a:7c:f8:6c:66:e6:6f:d2:fc:b9:3f:bf:
         c4:30:29:23:12:f7:8a:de:e5:54:ec:3d:5b:00:e8:5b:d6:6a:
         e4:79:cb:1f:37:c5:37:88:b9:b9:4e:aa:65:1b:ca:83:57:3a:
         93:ee:d7:ab:d3:d5:bd:ef:e6:3a:ca:42:b0:08:d3:bd:59:e5:
         21:75:a5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----