Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.mft
File:                     gzBqOo2Ly6Ofku8axJpVmwvOilg.mft (raw, json)
Hash identifier:          n2jzYVGZ694F3OBZD4jhu9NQ4SyiMxmCZng0OvzwPVc=
Subject key identifier:   78:89:33:C7:E9:40:24:40:23:52:27:84:D3:32:24:00:E3:0D:01:37
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Certificate issuer:       /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial:       018B93C4F2D5B69B8EB3646F0609E6A9718B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.mft
Manifest number:          094A
Signing time:             Fri 03 Nov 2023 06:00:39 +0000
Manifest this update:     Fri 03 Nov 2023 06:00:39 +0000
Manifest next update:     Sat 04 Nov 2023 06:00:39 +0000
Files and hashes:         1: OvTH0PCVJ4D7UJrP2NuvuVR4PQE.roa (hash: jBoOAx/HJL47Bh5CX/S3t7LcLwNK+3D1oxFQl0oqYeU=)
                          2: gzBqOo2Ly6Ofku8axJpVmwvOilg.crl (hash: hlVlQAOpvbQJwTPxNc4k4+3S5uDhiZ0KD8X2TKNlaYs=)
                          3: iJpC8qre6bMKziJnZsGhYrKguQk.roa (hash: hHtsxJ5pYObh3C5R+dD2/kTYifHV+ToKn4/P0sXBP54=)
                          4: vpwX6X1hkVUPbL5f1ydIgRerDhQ.roa (hash: /Tu4hgsR8YyogGVyARRvmzRzjkYznKUpPWrsW5CWxv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:c4:f2:d5:b6:9b:8e:b3:64:6f:06:09:e6:a9:71:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
        Validity
            Not Before: Nov  3 06:00:39 2023 GMT
            Not After : Nov  4 06:00:39 2023 GMT
        Subject: CN=788933c7e940244023522784d3322400e30d0137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:b8:3a:c7:f5:37:75:a7:9c:61:58:5e:56:
                    29:8a:11:f3:c1:6a:68:2d:f7:21:66:77:43:d7:3b:
                    9b:2a:66:ed:de:a9:da:67:2b:e2:74:af:1b:52:e1:
                    0a:13:26:ed:18:05:f6:bd:81:e4:9b:7c:5a:7a:10:
                    04:7a:c4:ad:d2:f5:b7:24:e6:cc:7a:4c:d3:21:f9:
                    b5:92:24:ff:b2:c5:48:90:df:74:4d:69:fe:ae:a5:
                    b7:b4:c3:93:ff:61:0e:26:bf:1c:82:89:e1:5e:49:
                    05:94:b8:1e:22:25:23:27:d4:20:65:03:c2:29:f3:
                    e6:0d:63:5d:ff:38:8b:16:5f:78:87:19:d0:32:c3:
                    28:c6:62:b3:bc:19:5a:87:88:00:79:4d:e0:29:5a:
                    1d:4d:52:ff:fe:99:f1:6e:fe:f8:4c:ae:b2:56:f9:
                    8e:db:48:7e:cf:18:65:d8:87:58:fa:60:ad:ce:e2:
                    4f:32:c5:d2:99:9b:90:ac:75:e2:c8:56:58:71:e4:
                    19:bf:21:ba:44:41:6b:ca:68:c9:ca:30:5c:b6:c8:
                    a0:26:39:ce:51:b7:29:80:36:7c:9c:a0:9c:a9:e3:
                    db:66:e9:07:f4:4c:55:89:07:22:70:1e:70:71:2c:
                    b4:e8:92:96:f2:d7:64:15:ba:5e:50:fc:74:4e:b3:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:89:33:C7:E9:40:24:40:23:52:27:84:D3:32:24:00:E3:0D:01:37
            X509v3 Authority Key Identifier:
                keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ad:d5:46:68:4f:cb:14:ff:20:f3:2e:aa:ca:9a:9f:3e:08:
         aa:5b:36:f6:bf:8c:02:d1:5c:27:cc:57:1d:83:40:8d:b8:dd:
         bc:bc:3c:ae:93:23:d4:98:9c:c5:63:7b:b8:92:a1:32:b2:e6:
         7d:f5:a3:23:c6:fc:c2:a5:b8:46:e8:c4:d4:f9:c5:4b:9f:3c:
         8f:15:da:ec:e4:66:b9:c6:bb:f9:4b:ad:2f:6a:f6:b7:22:e7:
         1d:1d:15:49:8d:23:89:cd:f5:50:fa:10:ce:0f:77:e1:5d:77:
         11:57:f9:55:c0:2a:3e:69:bd:1c:9e:e5:b8:85:37:43:3e:ee:
         79:67:f8:c7:90:de:76:7c:f6:33:ee:0c:86:ae:19:e1:2d:ce:
         45:78:0a:89:3f:75:c7:9e:d9:c0:0a:fd:16:b6:fb:63:a5:e5:
         33:be:b0:b4:7b:94:29:b0:da:f2:2d:eb:a3:27:46:47:97:5b:
         64:dd:8f:d3:54:fc:d1:e4:e4:a7:10:2f:90:f1:ee:7d:68:1a:
         1d:7a:69:d4:63:0c:01:6e:e7:7d:96:be:18:96:9c:12:d8:e2:
         68:68:93:a2:b5:2c:99:fb:49:a1:8d:44:2d:2e:02:5e:3e:58:
         52:b6:1a:6e:14:00:f6:18:df:a8:88:f2:a1:86:49:65:0c:5b:
         a6:d7:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----