Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.mft
File:                     E19DjE_M-xjg4u0_yN2e6fNHybk.mft (raw, json)
Hash identifier:          XBYBgmx/HVztwHkA8DY03uE0+7MU1yKR5x4xyUgeo5A=
Subject key identifier:   CB:56:01:D8:A6:62:3F:05:B8:61:AC:F4:6A:B4:52:94:8A:C9:70:74
Authority key identifier: 13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9
Certificate issuer:       /CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
Certificate serial:       018BEC2D102F87A0368F1100D9DA0B9B3575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.mft
Manifest number:          0859
Signing time:             Mon 20 Nov 2023 10:00:57 +0000
Manifest this update:     Mon 20 Nov 2023 10:00:57 +0000
Manifest next update:     Tue 21 Nov 2023 10:00:57 +0000
Files and hashes:         1: 6vjUfaDeJKMGs1BI6HpjM2JaoVc.roa (hash: AhyrtCKoFR7CdoFN6P6gqRX2dibEm3cKuHF6n36Vfxk=)
                          2: E19DjE_M-xjg4u0_yN2e6fNHybk.crl (hash: c/8+O2jdkx+BNmdP8E3kDFHWKZelD9sOtDKZNV3ULJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ec:2d:10:2f:87:a0:36:8f:11:00:d9:da:0b:9b:35:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
        Validity
            Not Before: Nov 20 10:00:57 2023 GMT
            Not After : Nov 21 10:00:57 2023 GMT
        Subject: CN=cb5601d8a6623f05b861acf46ab452948ac97074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:53:44:3d:8d:4d:d9:78:a5:bb:92:80:3a:
                    a7:55:ba:c3:94:08:e9:b9:50:49:bb:f8:e1:18:f9:
                    59:45:9c:0f:8f:4a:b9:18:9a:33:5c:22:03:b8:9c:
                    46:b9:88:01:b0:a8:82:28:50:21:6d:8e:80:da:fc:
                    71:b1:e3:34:1d:8c:53:23:3d:dd:e3:7d:80:c2:98:
                    cb:99:57:41:f0:12:11:d1:32:7e:9e:81:56:d4:89:
                    6d:0c:3a:2b:6c:73:ee:29:7a:bf:e5:ed:45:8a:a2:
                    9b:cc:89:e1:61:72:1c:61:11:3a:0d:1b:0f:64:cf:
                    c6:ee:2c:b9:51:c0:9d:6e:c6:12:ec:b7:e6:9e:82:
                    1a:ac:8c:77:d3:c4:0f:d5:19:47:17:0f:6f:6b:25:
                    6f:91:dc:1d:45:c0:c7:e0:66:1c:6c:35:a0:a2:60:
                    0b:67:f7:9b:b2:55:24:69:ac:1d:82:67:fb:a9:f7:
                    45:02:ba:98:2b:fe:f0:c9:bf:c7:37:34:c6:2d:b0:
                    56:15:dd:dd:db:05:68:5a:89:28:f2:65:df:b2:f9:
                    dd:2a:72:bd:88:ee:2a:9e:10:15:8a:f0:12:3a:01:
                    8b:c2:f6:22:2a:c8:c6:54:50:be:99:b9:b6:31:5f:
                    61:61:fc:ca:17:ae:87:b8:fc:26:24:c9:43:e4:14:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:56:01:D8:A6:62:3F:05:B8:61:AC:F4:6A:B4:52:94:8A:C9:70:74
            X509v3 Authority Key Identifier:
                keyid:13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a9:02:32:9d:cd:cd:c1:d1:96:e4:20:e9:38:fc:f6:f7:3d:
         3d:b5:aa:06:44:a6:2d:3a:e5:67:a0:b6:4a:42:9d:e0:23:af:
         57:dd:85:9c:c1:30:74:3e:90:7e:78:43:95:0a:cf:5f:cd:ac:
         1e:21:73:38:54:77:47:10:e4:4a:24:2d:68:cd:37:4c:33:c8:
         87:b4:77:14:a3:6c:68:de:40:c5:5d:6e:32:29:a4:75:d9:ff:
         29:c3:e9:fd:2e:f9:00:7b:1c:26:8e:ec:a8:95:94:79:69:5a:
         e5:80:2f:c0:44:33:5f:c1:9f:00:32:f6:70:08:f4:85:ee:f7:
         6e:24:41:55:ce:64:79:a0:53:ca:e7:91:d5:30:74:21:97:58:
         4b:0c:ef:0d:e6:c9:f1:d7:1b:85:70:6c:76:76:9c:06:e9:7f:
         6b:0d:50:23:a5:11:9a:cb:28:e1:da:b9:d4:f0:b0:ef:52:46:
         0b:d3:a8:3a:2d:55:da:0f:1d:4e:94:5e:6a:f5:30:3f:81:11:
         1f:17:4e:8a:ca:37:95:99:14:68:62:69:6d:45:fe:e6:07:e5:
         f6:51:e1:a3:71:e5:69:90:11:31:e4:ce:ca:75:46:6b:22:d1:
         27:ed:2d:16:8b:76:13:5e:07:34:e5:a6:f7:d0:f5:77:3e:bd:
         3b:b9:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----